Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6VZVDaYMsNyAt5LMeMmxvzt0i6k.roa
File: 6VZVDaYMsNyAt5LMeMmxvzt0i6k.roa (raw, json)
Hash identifier: nkkkZUiSoMcZe7UkU6Mb3vCSPDDIfux6GbSGLkuiPBs=
Subject key identifier: E9:56:55:0D:A6:0C:B0:DC:80:B7:92:CC:78:C9:B1:BF:3B:74:8B:A9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC26C9F1580A3A22F878E2F8DA34C0AEA
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6VZVDaYMsNyAt5LMeMmxvzt0i6k.roa
Signing time: Mon 01 Jan 2024 00:29:07 +0000
ROA not before: Mon 01 Jan 2024 00:29:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:9f:15:80:a3:a2:2f:87:8e:2f:8d:a3:4c:0a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 00:29:07 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e956550da60cb0dc80b792cc78c9b1bf3b748ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:4d:f7:9d:82:56:2f:89:ff:1e:2b:5a:10:
c0:09:18:46:cc:ec:93:ac:e5:f8:16:c8:7b:5d:d3:
5d:a0:1c:cd:e1:b5:76:11:a3:dc:9c:83:07:ef:23:
97:19:40:df:03:80:55:55:9b:7f:c8:6e:3a:4e:f7:
c0:15:87:ce:bb:ff:77:0a:2c:b1:ca:a0:ca:61:b0:
0c:c9:2f:a8:20:1c:f9:bc:ce:46:d4:0a:66:a5:2e:
b5:86:d0:ab:bb:48:45:67:c9:64:d5:42:70:26:7a:
a2:8b:34:57:91:8f:15:97:f6:7d:e0:79:0a:f5:22:
40:2d:87:ab:73:7a:85:94:05:a8:3f:d4:99:f1:e1:
39:b4:bb:c3:8d:89:05:eb:60:c8:89:bb:60:92:23:
76:72:72:d6:b3:a9:09:c0:50:fd:6f:5f:3f:c4:5d:
44:c1:07:e6:ac:75:9e:51:a2:48:b1:7e:50:96:0e:
9f:e0:f8:b9:41:1a:c8:a9:8a:aa:25:3d:0b:bf:2e:
b8:84:8d:76:4d:24:46:6e:f7:9d:15:d4:e8:01:ec:
42:6b:04:b5:94:7c:0b:56:e4:1e:ac:e8:f8:39:78:
e9:6c:7a:e9:2c:92:a7:a3:be:15:64:99:66:88:37:
3d:3a:79:71:cc:d4:4b:f7:c6:02:12:d7:73:e1:cb:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:55:0D:A6:0C:B0:DC:80:B7:92:CC:78:C9:B1:BF:3B:74:8B:A9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6VZVDaYMsNyAt5LMeMmxvzt0i6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2d:6b:28:a4:aa:d4:dc:71:52:7b:76:03:44:95:82:39:37:
7a:11:98:28:4c:1d:83:eb:9e:d7:91:f5:d1:3a:bd:58:c3:ed:
0f:cf:2d:c1:c3:e8:cd:09:0a:ec:49:40:a3:59:7b:b4:df:55:
92:09:01:8d:e1:20:a3:99:e9:36:22:2b:80:67:9f:84:27:27:
48:cc:82:51:7a:1a:c6:9e:d8:8c:b5:4b:8f:28:04:d6:f4:dc:
c1:ac:78:e6:3b:34:3b:d1:04:6c:00:35:f1:d2:0e:34:75:0d:
70:5f:ab:62:30:4d:52:2e:04:75:db:d4:46:70:dd:99:a8:f1:
54:1b:4c:8c:b8:f3:c1:c4:84:77:8d:cc:16:74:be:86:9f:13:
f8:1d:d6:f7:4d:31:11:66:19:40:43:27:b2:8e:1b:69:a6:89:
3c:d1:c5:54:07:80:13:7e:e8:e8:dd:19:62:c8:31:35:e6:00:
94:18:e1:99:0a:e6:38:de:4e:11:8d:46:4f:b6:f5:34:51:2b:
3a:55:91:c7:0a:c8:9d:b1:ad:7d:b9:c2:09:cb:bd:5e:d3:89:
82:2f:52:0e:45:75:81:e3:42:f4:6b:cd:9b:ce:74:87:37:51:
22:95:a2:6b:95:95:ac:63:62:40:a1:3e:8e:84:80:8b:b2:98:
e6:ee:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org