Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/CgW50N1HvAMB0do6pS3I8tI9m1Q.roa
File: CgW50N1HvAMB0do6pS3I8tI9m1Q.roa (raw, json)
Hash identifier: OUbxhtwhXEoc+2t2Yp2lCFDxI0X6Q74wkgPofvh2xfs=
Subject key identifier: 0A:05:B9:D0:DD:47:BC:03:01:D1:DA:3A:A5:2D:C8:F2:D2:3D:9B:54
Certificate issuer: /CN=f571716c098aa06f4703154b98ab00228b5b7d89
Certificate serial: 018A548432AD252D06795701E582B5251048
Authority key identifier: F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/CgW50N1HvAMB0do6pS3I8tI9m1Q.roa
Signing time: Sat 02 Sep 2023 06:11:04 +0000
ROA not before: Sat 02 Sep 2023 06:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:54:84:32:ad:25:2d:06:79:57:01:e5:82:b5:25:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571716c098aa06f4703154b98ab00228b5b7d89
Validity
Not Before: Sep 2 06:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a05b9d0dd47bc0301d1da3aa52dc8f2d23d9b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:d7:4b:47:92:99:f1:55:95:08:e3:75:80:
71:1a:b1:74:28:47:c6:44:cc:d5:e8:5e:75:e5:a1:
0e:fa:31:5b:13:9c:51:d8:53:e8:49:eb:8a:09:98:
8a:aa:a0:5e:93:58:fa:d5:4b:5c:2c:12:88:9b:75:
e1:29:6e:46:cd:3b:49:26:30:37:84:94:94:31:a6:
8e:d6:e6:17:36:9b:7f:f6:cf:01:3b:75:58:73:f4:
72:81:80:b0:e4:d9:6b:24:4b:0c:60:75:28:60:aa:
26:b2:e0:06:51:f7:7e:5d:e2:02:ab:50:f8:c6:51:
f4:cb:2d:dc:b6:2f:7a:72:40:3b:66:37:41:b5:c8:
90:87:e4:79:80:7c:e3:e4:50:bc:d7:fa:cf:19:a2:
4e:b0:d3:d5:0b:96:03:c5:63:9b:9c:e1:1d:fd:2b:
d7:be:bb:4a:8c:84:a2:18:b2:b6:bf:59:b0:45:cb:
bd:b2:a7:fe:d0:f4:dd:e9:87:21:f3:5f:6f:34:54:
09:1f:a8:14:2f:33:f0:e8:6d:ab:e1:4c:ef:d8:58:
2c:b9:ae:06:9d:23:f3:30:2b:95:c3:62:e6:56:21:
86:75:da:9a:4e:df:61:c8:42:c8:0a:33:9a:70:d4:
a5:46:2e:74:9c:00:cb:a8:67:f9:38:72:ea:af:c0:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:B9:D0:DD:47:BC:03:01:D1:DA:3A:A5:2D:C8:F2:D2:3D:9B:54
X509v3 Authority Key Identifier:
keyid:F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/CgW50N1HvAMB0do6pS3I8tI9m1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/9XFxbAmKoG9HAxVLmKsAIotbfYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
25:48:58:15:6a:a4:77:14:28:f5:83:3a:9e:d8:8e:22:ff:49:
a8:c7:04:2d:2b:06:12:ea:36:75:fb:13:79:2b:c0:b6:f0:e8:
73:76:06:a1:ab:3c:a9:b4:11:17:a6:a1:e4:68:8c:a3:8c:43:
2c:24:01:30:b6:53:9e:3e:f2:f0:d6:83:37:5a:df:b1:2d:df:
bc:41:e3:8b:42:bf:67:65:c8:7e:99:71:fa:48:b0:0b:05:92:
d6:d6:de:89:50:0c:0a:9e:19:31:c4:07:43:15:80:3f:b5:48:
44:ff:1b:f9:1d:1b:f1:22:1c:85:db:33:d9:98:99:1b:3d:c9:
a9:00:f5:69:4a:d3:f3:d2:93:1a:bb:df:51:8c:ec:ca:21:66:
52:91:d6:11:87:86:a8:a8:e1:56:85:fb:a2:6a:e2:de:5e:c5:
79:c0:4f:61:43:5b:6e:08:b5:85:2d:27:1e:56:55:5e:2e:d8:
57:9b:94:a9:cd:cf:bb:3c:42:a0:73:8a:83:cb:6c:dd:19:a9:
fd:77:51:3b:83:c0:b7:c1:96:c3:dd:ce:70:51:41:69:e7:45:
f6:56:b8:de:6b:45:78:c0:2d:1d:5c:ec:97:aa:11:72:e8:0b:
90:c4:be:2f:5c:8f:22:31:e8:94:ca:1c:9e:d8:19:79:a8:68:
b6:7c:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:05 2024 by rpki-client on console-ams.rpki-client.org