Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/wADlWxYN15seaJ1fgt9kqVK3O0k.roa
File: wADlWxYN15seaJ1fgt9kqVK3O0k.roa (raw, json)
Hash identifier: Q+DBgO07qMNSbYXsEvMiVBMlT3noiYiopi63XvhqcgU=
Subject key identifier: C0:00:E5:5B:16:0D:D7:9B:1E:68:9D:5F:82:DF:64:A9:52:B7:3B:49
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 018CFE0AF791D28C10423DBF45CEE0F51355
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/wADlWxYN15seaJ1fgt9kqVK3O0k.roa
Signing time: Fri 12 Jan 2024 14:19:40 +0000
ROA not before: Fri 12 Jan 2024 14:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216258
IP address blocks: 92.42.98.0/24 maxlen: 28
2a13:2140::/32 maxlen: 48
2a13:2143:1::/48 maxlen: 48
2a13:2141:1::/48 maxlen: 48
2a13:2142:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:0a:f7:91:d2:8c:10:42:3d:bf:45:ce:e0:f5:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Jan 12 14:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c000e55b160dd79b1e689d5f82df64a952b73b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:3e:c5:a8:ed:48:28:1b:b2:fb:59:7f:a6:
b1:9c:9a:33:e5:20:a3:d3:f9:87:a6:fe:6f:3d:8b:
98:48:ea:33:4b:0f:4e:3a:15:63:82:36:82:95:34:
77:de:64:01:36:4b:f8:0c:05:89:f2:77:4e:a8:5a:
d6:96:60:aa:65:e5:ef:ed:05:fd:65:53:a4:b4:9d:
bd:78:a5:0f:33:85:1a:1a:4a:b4:d9:a7:e0:2e:05:
57:66:a3:ae:11:05:73:cc:38:d9:15:b6:7e:e3:dd:
2b:85:b1:1e:87:f3:8b:11:97:07:ad:1f:5c:ee:28:
12:63:9b:fa:0f:6b:2f:aa:10:80:e6:82:a0:7b:6b:
37:57:87:5c:02:fe:95:c7:c6:7e:e5:28:96:a4:8b:
2c:1e:f8:62:36:9e:d3:ff:d2:f3:c9:b5:33:cc:0b:
82:d0:72:6b:f8:bf:a4:41:38:75:db:84:37:5b:eb:
74:8d:52:f6:fc:46:85:b7:71:90:c2:55:29:61:e2:
03:8c:3d:68:3d:f3:34:3c:1d:2e:a0:94:90:74:eb:
7b:4f:52:1d:85:fa:90:9a:40:73:39:92:a7:bd:75:
6f:84:8f:99:00:06:9f:bb:55:3f:19:cd:5e:4f:ad:
d5:be:45:b8:b6:51:ed:d0:ff:a0:05:4d:0c:f4:ac:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:00:E5:5B:16:0D:D7:9B:1E:68:9D:5F:82:DF:64:A9:52:B7:3B:49
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/wADlWxYN15seaJ1fgt9kqVK3O0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.98.0/24
IPv6:
2a13:2140::/32
2a13:2141:1::/48
2a13:2142:1::/48
2a13:2143:1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:39:fd:66:af:93:df:3f:ba:81:ca:62:f2:c3:bc:0e:3f:44:
76:d4:5b:ec:09:42:f2:40:2c:9c:c2:97:a8:b7:b3:9f:c5:08:
28:45:14:dd:90:a0:e9:f1:84:8b:32:ac:63:82:2b:33:ef:c4:
61:62:7b:d4:bd:c8:b1:9f:a8:04:cb:dd:65:1c:a0:49:d4:95:
66:18:52:cf:0c:d9:08:33:70:e8:1f:d2:9a:c8:94:32:b4:08:
68:d7:3e:f9:0f:06:af:bf:2d:86:06:cd:5d:93:a0:49:cf:03:
7c:e0:7f:36:c6:0b:8a:e7:d2:31:b1:01:dc:e6:a6:63:cf:33:
e4:22:a6:e2:77:7f:58:13:13:79:34:07:c9:e9:29:83:b4:20:
77:cc:ac:2f:cc:79:5a:15:77:1b:85:b2:2d:67:96:45:8c:85:
80:34:7e:34:67:d2:c3:06:76:c1:f5:50:e3:7f:4b:08:93:a5:
20:5d:a4:4b:e6:ab:e7:a7:72:aa:fb:f1:98:ce:71:80:8e:1e:
04:d0:f3:8b:ce:2b:a1:2c:8a:ae:2d:45:72:a2:be:6e:23:42:
5b:62:8f:2d:d7:96:82:f6:02:0d:90:36:b8:0d:2c:21:a9:8e:
84:6b:42:6b:13:99:2e:d5:c1:10:1c:a9:eb:0e:f4:4b:05:2a:
a6:6b:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org