Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ZcxE3pj4-dtnuE_H8In-R9jENvU.roa
File: ZcxE3pj4-dtnuE_H8In-R9jENvU.roa (raw, json)
Hash identifier: ZxjAoUbGYEcYqaTZVyO8fD96bsx9lMZh1QynLwszp0I=
Subject key identifier: 65:CC:44:DE:98:F8:F9:DB:67:B8:4F:C7:F0:89:FE:47:D8:C4:36:F5
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01906EAEA90307612BC62879552737FC4B28
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ZcxE3pj4-dtnuE_H8In-R9jENvU.roa
Signing time: Mon 01 Jul 2024 14:24:18 +0000
ROA not before: Mon 01 Jul 2024 14:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 92.60.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 09:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:ae:a9:03:07:61:2b:c6:28:79:55:27:37:fc:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jul 1 14:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cc44de98f8f9db67b84fc7f089fe47d8c436f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:2f:1d:00:38:46:6e:14:ae:0f:35:e3:96:
75:c1:8c:fd:e9:58:11:8c:d4:6f:3c:9d:56:1f:33:
77:ef:96:01:38:ba:63:f6:0a:e0:bc:68:16:99:32:
fe:fa:12:43:1a:db:1e:a6:7c:25:b0:25:50:2a:c8:
11:46:47:6b:a7:20:21:6e:67:17:96:fe:25:f5:0e:
70:a3:4c:16:5f:5b:fb:4a:65:51:e3:e7:b7:81:80:
82:2b:13:ad:2e:4e:4c:30:91:19:91:bc:8a:16:c5:
0f:f1:df:62:45:93:e6:2d:79:e5:64:03:d2:94:04:
e0:4e:ec:07:b7:4e:21:46:d6:f0:48:7c:f4:ce:a5:
5b:00:c6:f6:01:f9:cd:b9:81:99:1f:7a:99:e4:28:
71:72:cb:29:38:5c:56:a4:6a:40:e2:ba:24:e5:fc:
25:dd:c7:21:49:ca:50:96:d6:78:3a:88:23:d3:a3:
64:c8:95:d5:a8:03:8c:56:49:7b:5b:aa:8a:8e:77:
db:23:bb:cd:f8:84:c9:52:af:0a:49:a8:af:79:b0:
fe:0a:65:37:81:15:26:0b:6e:78:ab:2f:57:53:b2:
1b:94:72:19:f8:c7:44:60:7d:b2:c9:53:a3:e2:9c:
2c:f1:db:c0:b5:e8:b0:e0:7f:b3:82:8b:38:a6:45:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:44:DE:98:F8:F9:DB:67:B8:4F:C7:F0:89:FE:47:D8:C4:36:F5
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ZcxE3pj4-dtnuE_H8In-R9jENvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.79.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b8:8d:46:b5:a9:ce:66:c4:58:b3:eb:8e:e3:3b:14:29:03:
a8:ad:8c:e4:f3:1d:94:9d:d9:b4:4d:e1:e5:c9:84:48:49:28:
fd:08:8e:31:d0:6f:9c:40:a7:41:43:67:a6:9e:97:1a:d7:6c:
92:e7:7e:bf:81:3f:5b:de:dd:6a:18:91:22:8d:08:92:c1:cf:
f3:c7:79:b2:f1:60:11:17:a1:59:f7:f2:44:dd:11:fc:4b:75:
86:2f:d9:75:9b:9c:66:be:01:8c:e2:2b:ab:09:f4:48:f2:4e:
66:4d:69:36:ac:0a:e7:6a:79:07:4c:ae:fb:a4:6a:ea:3c:df:
15:af:4c:cb:ef:1c:ba:53:03:41:76:f4:d5:73:6f:8f:0d:ae:
26:ce:03:87:ec:91:bc:de:44:87:43:c8:25:79:8c:5d:2f:81:
74:9c:3e:39:02:5a:4a:19:a4:b9:53:71:1e:6c:09:49:94:a1:
cc:cf:96:79:13:2b:c4:24:ad:92:48:67:38:0c:51:76:34:26:
2d:94:83:0a:c3:1f:ef:60:e6:4e:f6:2a:d1:77:34:8a:4f:07:
79:a3:06:b6:bf:ec:b1:1c:49:ce:27:aa:69:30:9e:d9:f2:38:
20:12:fd:86:84:92:c7:eb:05:c7:ca:05:7f:b1:3d:27:80:c1:
8f:96:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 12:24:42 2024 by rpki-client on console-fra.rpki-client.org