Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4pQYap3MqzhAbvanSu-3nZfImE0.roa
File: 4pQYap3MqzhAbvanSu-3nZfImE0.roa (raw, json)
Hash identifier: 5s0Ki9W8pXGS1tBitQ5Xd0YAeYDWu1teVMG8KZww9f4=
Subject key identifier: E2:94:18:6A:9D:CC:AB:38:40:6E:F6:A7:4A:EF:B7:9D:97:C8:98:4D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186C2E54E80B5295437A6D797E211F0F89A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4pQYap3MqzhAbvanSu-3nZfImE0.roa
Signing time: Wed 08 Mar 2023 20:24:13 +0000
ROA not before: Wed 08 Mar 2023 20:24:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48939
IP address blocks: 92.63.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:e5:4e:80:b5:29:54:37:a6:d7:97:e2:11:f0:f8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 8 20:24:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e294186a9dccab38406ef6a74aefb79d97c8984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:44:7e:78:34:ec:47:d9:37:65:83:f1:94:
34:09:ca:fd:8e:45:7d:8d:39:46:fc:f2:16:10:e3:
18:03:69:4f:88:03:f9:41:09:a1:b0:df:c2:56:aa:
cf:82:66:a8:26:32:58:cd:69:ef:eb:e8:5a:2d:0a:
6a:6f:20:27:fa:c1:ec:44:b8:18:20:a5:07:54:46:
2f:88:f7:6f:45:2e:ea:10:e5:d5:a6:44:3e:33:c0:
ed:41:b6:fb:ec:f3:f4:02:d8:21:dc:73:24:60:02:
f2:f5:46:c3:93:80:02:c6:95:4d:aa:a7:f2:9c:5c:
04:f3:4a:e2:32:74:59:28:28:9e:54:47:3f:9c:29:
ee:ce:82:a0:ae:e1:dd:03:fa:44:c2:c6:27:ce:25:
a7:3f:84:4a:0c:86:0f:ea:cd:f0:df:08:9d:78:ee:
33:1a:ba:e8:66:19:09:96:d8:7a:ed:f8:b2:8c:08:
90:53:36:f0:34:16:dd:00:c5:1b:9c:51:90:f6:99:
27:23:e9:be:0d:82:0d:9c:71:66:da:3b:aa:39:2e:
07:a9:fc:84:01:45:03:b1:5d:3e:f9:35:48:3e:44:
1e:92:ff:92:c2:b5:3b:6e:e6:fe:49:df:a0:29:85:
b3:91:77:a0:d0:25:0a:38:8a:56:7a:f1:f8:60:6a:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:18:6A:9D:CC:AB:38:40:6E:F6:A7:4A:EF:B7:9D:97:C8:98:4D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4pQYap3MqzhAbvanSu-3nZfImE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.191.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c0:9f:6d:c7:e9:a3:16:6d:16:a7:e4:47:b8:11:b8:9b:1e:
a1:bc:1c:ac:5f:d6:47:1e:c7:cd:9a:12:6e:a5:6b:01:bb:35:
3a:66:1c:cd:56:42:f6:be:83:04:23:62:e9:8b:e9:09:06:72:
4a:68:5f:f7:12:ae:0a:37:7a:3c:a1:c8:ec:8a:a2:1d:75:69:
1e:d7:8e:04:c2:62:46:b9:61:89:a0:81:aa:5d:07:ea:e0:06:
08:8a:1b:de:d7:f0:0c:9c:19:4d:88:a7:a4:33:11:b0:14:19:
05:70:83:a2:d2:e3:1e:b0:4f:52:09:90:55:0a:48:42:73:59:
b8:37:76:9f:c9:75:5b:df:01:c9:ec:05:fd:9f:40:7d:65:4e:
ea:6b:4b:b0:a0:15:4a:68:b3:a4:bf:e4:d0:2d:03:19:3f:e8:
2d:d6:b2:ce:32:0d:5e:39:14:34:ba:1a:7e:84:ee:b9:4e:11:
88:4a:81:f6:16:e2:02:02:c3:1a:9f:6b:36:05:1d:b7:1d:d0:
74:42:9c:01:78:8f:38:4a:ef:9c:9d:00:76:fa:3b:01:5b:15:
fb:1b:37:1a:7e:3c:46:fa:1d:ef:75:40:5c:09:13:9c:17:4c:
73:a3:9e:40:81:8d:5a:1d:8c:57:eb:c5:e3:4f:3c:45:5e:56:
cb:12:23:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org