Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/x68OQ1vut6ljcFKPpSbNl57ZIYU.roa
File: x68OQ1vut6ljcFKPpSbNl57ZIYU.roa (raw, json)
Hash identifier: OBKRPFG8js2G2TCR/vJ5JImjg/x5aguBSda6Th1Kwzc=
Subject key identifier: C7:AF:0E:43:5B:EE:B7:A9:63:70:52:8F:A5:26:CD:97:9E:D9:21:85
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 0185710C08F038DD2768B4DEA0DDE152310E
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/x68OQ1vut6ljcFKPpSbNl57ZIYU.roa
Signing time: Mon 02 Jan 2023 05:54:52 +0000
ROA not before: Mon 02 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44081
IP address blocks: 92.87.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:08:f0:38:dd:27:68:b4:de:a0:dd:e1:52:31:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Jan 2 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7af0e435beeb7a96370528fa526cd979ed92185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:29:81:85:08:2d:73:97:ed:0d:4c:21:5b:98:
fd:10:37:6e:ad:bc:a6:6b:3b:92:31:53:62:02:63:
5f:bd:9b:c5:d6:02:44:5f:67:57:80:fe:d0:49:f5:
18:2d:58:dd:d5:31:c6:3f:e4:de:8e:09:72:d3:f3:
45:b7:d7:b1:5b:27:9a:5f:fb:fa:94:7d:18:70:a8:
47:f7:ba:88:ce:53:08:33:30:00:c0:9d:a9:46:e5:
1c:d7:c3:3f:ce:94:7d:0e:15:85:6b:e8:b1:bf:25:
b7:ed:45:ef:d9:4c:53:68:a8:df:3a:ba:28:b1:3f:
bd:e1:ff:0e:0b:9b:b7:93:9f:00:3f:fa:bd:2e:99:
0b:ef:e8:5f:8d:10:6d:8b:b9:e6:5c:8e:e9:9e:12:
f1:7c:1b:6e:3d:c2:59:f7:5e:41:15:7c:03:d7:87:
c6:17:be:14:6e:c7:d9:51:72:4b:f6:4b:ca:d8:51:
99:37:ee:53:e4:bd:94:d7:62:fe:23:83:fd:c5:83:
3e:dc:9f:ec:3f:a9:d9:8d:76:8a:8b:f4:88:3e:2b:
81:e9:ab:3c:87:09:bc:8b:6a:ed:f9:f4:69:13:d8:
eb:be:7b:cb:d9:8e:a7:26:02:23:4e:65:a8:63:09:
2b:23:fc:1c:14:71:08:27:e4:2b:99:3d:c4:23:d4:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:0E:43:5B:EE:B7:A9:63:70:52:8F:A5:26:CD:97:9E:D9:21:85
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/x68OQ1vut6ljcFKPpSbNl57ZIYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.87.128.0/23
Signature Algorithm: sha256WithRSAEncryption
75:f5:cc:75:62:94:16:5d:46:bf:88:c4:1d:13:da:11:79:76:
ec:3e:84:ee:ba:54:71:1e:a1:3d:8e:6e:e6:90:25:e7:f4:df:
8e:69:f9:5c:51:9f:be:e8:7d:28:c5:8d:74:3a:64:df:a1:a3:
97:b9:9e:02:7c:63:13:e5:9d:15:a0:e6:91:02:b9:d9:a9:bc:
69:0b:19:e7:bf:92:3d:d0:4a:69:e5:4b:05:24:0c:96:d4:c3:
ef:cf:73:e5:37:59:e3:eb:23:61:1e:99:37:b6:1a:10:98:ac:
69:95:f9:46:c6:06:5d:75:a3:ec:0f:22:01:90:d1:1b:43:46:
73:66:51:a3:45:ff:c2:14:7b:db:26:5b:ae:8c:b5:9e:cc:55:
58:c7:40:b3:44:52:c3:66:1c:24:f8:f3:24:80:50:22:71:c5:
ef:91:83:64:72:f2:27:60:0f:c4:c3:26:eb:ab:53:68:8b:60:
8a:b6:01:29:a0:00:26:82:9f:7e:8e:2e:62:24:ad:17:69:09:
13:e0:be:d0:04:95:09:02:d2:b8:1b:6b:1c:b4:6b:29:56:85:
ec:5a:8f:40:ff:c9:35:d2:77:d5:46:9b:7e:bf:3d:94:a3:04:
af:ab:0d:4d:69:e4:63:30:59:1a:aa:b7:a1:78:83:16:c1:c7:
36:e2:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:38 2024 by rpki-client on console-fra.rpki-client.org