Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/typ1FFDTHGLURxjoR3mmKScZtn4.roa
File: typ1FFDTHGLURxjoR3mmKScZtn4.roa (raw, json)
Hash identifier: v4CRPXRldrSHSBmo69VQko/dfSPD2fxZVbeyGR/UWDA=
Subject key identifier: B7:2A:75:14:50:D3:1C:62:D4:47:18:E8:47:79:A6:29:27:19:B6:7E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE2BAF66D406F96909A19A657C12D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/typ1FFDTHGLURxjoR3mmKScZtn4.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201256
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e2:ba:f6:6d:40:6f:96:90:9a:19:a6:57:c1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b72a751450d31c62d44718e84779a6292719b67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:11:1d:3d:64:a4:28:b0:c4:a4:f4:93:d8:
f4:a7:a1:1b:29:ee:53:ba:71:35:0d:e3:24:7c:78:
cf:e0:e9:2c:2a:39:20:38:1f:8f:9d:18:93:94:cf:
7d:36:4f:d3:3e:ca:4c:2a:57:f8:8a:9f:13:7a:fb:
dc:ac:8c:3e:ca:6f:ed:02:4c:e7:a3:b6:61:de:14:
7b:36:ec:bf:81:1c:82:9b:27:e3:6d:66:0c:78:f3:
c6:82:06:a8:d3:00:09:3f:dc:ac:87:bc:e0:a4:74:
60:33:9f:b3:80:09:e2:fd:4c:e0:0d:71:2a:9b:9a:
63:a1:e3:01:51:45:4a:a4:30:51:5d:b2:28:eb:d1:
7f:dd:64:0d:5b:42:fd:cd:11:2d:b2:38:18:87:52:
59:d3:e8:ea:80:31:7c:ae:6b:2b:3f:e9:1f:62:14:
73:1c:57:d4:f4:4c:5a:e0:4d:f1:d8:70:13:34:d7:
34:a8:8e:2c:7b:ac:50:75:b9:7e:23:29:d4:24:ec:
f7:ce:11:65:c6:26:72:2b:e5:31:d4:c2:38:02:22:
da:57:e4:63:14:2f:e9:c1:c7:38:cd:0c:f9:ac:3d:
bf:ec:dd:f8:13:09:d3:39:a3:f8:72:21:bc:4d:c5:
e8:a7:af:4f:b7:5f:63:e1:ae:8f:d1:0e:92:ca:d4:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:75:14:50:D3:1C:62:D4:47:18:E8:47:79:A6:29:27:19:B6:7E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/typ1FFDTHGLURxjoR3mmKScZtn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d9:6f:81:db:64:0c:11:48:3e:b9:f9:37:9c:a3:2e:68:b0:
a9:c1:5f:fc:51:92:5e:f6:26:bf:1e:e1:16:9d:c9:d1:d6:ec:
91:a8:13:80:0d:ea:bd:68:06:22:2c:d3:b2:de:d2:95:f4:b6:
25:ba:75:cd:24:95:f8:76:32:85:c9:85:76:50:11:23:39:58:
b6:47:a4:8d:8f:ef:28:96:4e:82:77:ed:a6:1b:53:d8:fc:02:
69:b9:df:a6:ff:6c:74:2e:c3:e3:7e:0d:69:b6:55:20:7b:7f:
e0:fa:a0:67:e4:35:35:63:98:46:5b:ea:2b:8e:b3:8a:f7:47:
43:0f:56:20:76:76:44:7f:a7:30:2c:e0:a8:1b:0c:61:a2:fd:
14:62:e2:dd:cb:ba:39:10:84:07:9c:84:19:b3:5c:e7:a0:7d:
79:6f:bc:08:aa:31:4f:32:7a:86:cf:b4:ff:b5:df:41:0c:39:
b3:14:3b:aa:c7:20:4d:ed:70:5a:2b:1c:6f:79:bf:cb:58:b8:
60:bf:bb:cb:c6:14:5c:7b:b5:5c:2f:0e:21:4f:89:8f:ba:c0:
e9:dd:dd:86:36:e8:ea:28:1d:36:49:3c:bc:8d:ac:6e:ea:36:
52:16:18:1a:c6:3a:ad:e6:a3:5e:9d:52:24:0a:8b:4a:23:51:
79:fc:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org