Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/ac6r11i-mBhWks25Gcr8qUDuaR0.roa
File: ac6r11i-mBhWks25Gcr8qUDuaR0.roa (raw, json)
Hash identifier: tn8aY2nSMwPvtGvz3xpC+bSyjnTNwNOdfuJucC4iiAU=
Subject key identifier: 69:CE:AB:D7:58:BE:98:18:56:92:CD:B9:19:CA:FC:A9:40:EE:69:1D
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 01856F02587774DC1C5DC5B30DC828683B10
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/ac6r11i-mBhWks25Gcr8qUDuaR0.roa
Signing time: Sun 01 Jan 2023 20:25:02 +0000
ROA not before: Sun 01 Jan 2023 20:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:58:77:74:dc:1c:5d:c5:b3:0d:c8:28:68:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Jan 1 20:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ceabd758be98185692cdb919cafca940ee691d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:a9:2a:87:99:c0:79:c9:03:93:f1:cd:2e:
db:53:92:e3:e5:38:f6:9e:a5:5f:80:60:69:d4:8d:
0a:e6:ef:62:ee:43:f4:cf:ad:23:72:89:51:47:6b:
fb:62:00:26:3e:3e:d7:f4:ab:f0:f6:33:6f:81:e1:
bc:63:70:8f:53:01:bd:d7:dd:10:8a:1b:0a:af:9e:
10:ec:f6:0d:66:6c:f9:cd:e7:3a:66:9c:7c:8f:fb:
96:58:e8:dd:e8:0b:77:15:7c:82:1d:9f:af:94:bd:
06:43:d7:20:e8:07:94:bb:26:83:53:80:17:57:8a:
9a:49:b1:85:28:96:11:ba:d8:f7:38:38:2e:bd:61:
c1:be:85:5b:98:dc:f8:2b:9a:84:b2:35:d7:5a:05:
35:8b:10:d5:7b:23:44:0f:4d:03:2c:f5:7c:2e:83:
92:dc:a0:a2:41:51:6c:ec:12:8e:6f:0f:af:5a:7d:
54:73:04:90:07:45:b9:4b:f9:7e:9c:29:b9:8a:63:
6e:e8:e8:c2:50:4f:b2:97:b1:53:9d:b2:97:00:e9:
95:29:a3:48:70:60:41:2d:ba:de:1c:b4:fe:ac:51:
dd:dd:d4:0b:ee:f6:db:92:d9:77:36:9f:6f:e8:17:
36:6a:89:12:db:fc:fd:50:62:d5:2e:dd:33:84:0f:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CE:AB:D7:58:BE:98:18:56:92:CD:B9:19:CA:FC:A9:40:EE:69:1D
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/ac6r11i-mBhWks25Gcr8qUDuaR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b4:c2:88:14:f6:c0:86:29:e0:cd:9b:3d:29:82:6a:be:17:
82:02:a0:d7:14:80:e4:76:91:c1:00:54:da:8a:25:47:d5:97:
37:ee:4c:e2:e9:9f:0d:6a:f7:de:33:46:20:b6:ff:27:1e:0e:
47:c3:6e:88:47:3e:29:72:5d:2b:18:b5:d3:4d:68:ef:83:aa:
e3:c1:e2:08:7c:f1:42:5d:76:4b:ae:30:a1:f1:9f:f5:11:47:
f5:73:6f:af:dd:c3:62:df:1d:9a:96:7b:6e:ca:01:91:7c:cb:
80:63:56:c9:fa:99:81:00:ab:7f:49:7e:45:3b:35:43:9d:62:
98:65:31:84:ba:5d:13:36:ec:cc:14:f3:75:88:87:07:fa:5a:
e6:fb:db:5a:08:23:59:c1:cd:be:81:4c:b5:cb:c1:c4:fd:1b:
5b:c1:a8:cd:65:2e:bf:81:86:2c:7a:4c:71:ce:9f:cb:f1:c3:
dc:8e:ac:58:33:77:68:0a:f6:6b:e6:25:c0:bc:1b:b5:eb:3f:
a5:a0:c5:8d:7c:65:db:8b:c7:fb:4e:7e:37:f9:13:04:1c:0a:
51:65:15:5e:22:da:e4:41:06:97:f3:e3:5a:8a:2d:57:2c:7f:
cc:66:1c:4c:b7:50:a1:48:04:04:75:50:53:07:1b:48:0f:e8:
9b:bf:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:44 2024 by rpki-client on console-fra.rpki-client.org