Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/N7Xm7DPCyRyl6ldfWENERsOYNGg.roa
File: N7Xm7DPCyRyl6ldfWENERsOYNGg.roa (raw, json)
Hash identifier: dNNvfwCT3XXUNK4tanoYkYzqmIQo4iQTkT1cJa751Hc=
Subject key identifier: 37:B5:E6:EC:33:C2:C9:1C:A5:EA:57:5F:58:43:44:46:C3:98:34:68
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 01856B00AFD4B72247F1EE70C293A201052A
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/N7Xm7DPCyRyl6ldfWENERsOYNGg.roa
Signing time: Sun 01 Jan 2023 01:44:45 +0000
ROA not before: Sun 01 Jan 2023 01:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207597
IP address blocks: 92.119.4.0/24 maxlen: 24
92.119.5.0/24 maxlen: 24
92.119.7.0/24 maxlen: 24
92.119.6.0/24 maxlen: 24
2a09:afc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:af:d4:b7:22:47:f1:ee:70:c2:93:a2:01:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Jan 1 01:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b5e6ec33c2c91ca5ea575f58434446c3983468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:56:28:16:86:23:4e:f3:88:42:4b:4a:16:
b8:ae:c9:39:5d:91:16:5a:e1:ea:fa:94:16:e8:c3:
3f:5f:c8:57:a6:a0:23:3d:2d:e9:c3:30:52:f5:08:
c8:7b:ab:e9:b6:66:73:e5:f9:dc:b4:eb:46:3e:87:
56:3e:50:64:35:e6:cc:b9:95:3a:36:37:c8:94:a7:
1c:75:e0:b5:4f:cc:76:36:4e:66:8f:25:11:fa:fe:
2d:cb:e6:33:64:25:75:05:69:33:d1:09:93:ba:68:
ed:ac:87:90:c8:98:21:52:e4:8d:be:0b:5a:36:4b:
e3:26:6f:eb:b0:53:7b:4f:88:d7:f9:63:7b:e3:98:
ce:97:be:8a:90:69:91:12:20:d5:39:24:50:15:36:
61:03:eb:93:40:7f:46:90:0d:55:b8:38:fe:29:61:
17:87:6d:c7:2c:d5:32:ec:4e:2d:ba:f2:56:4d:07:
5d:7a:bb:f3:bd:40:37:9f:05:70:8b:27:d3:fb:9e:
13:a1:ff:ea:60:c1:99:fb:c6:ba:3c:5a:b8:45:59:
77:27:42:b6:0d:12:e9:84:cb:96:72:99:2a:9c:43:
3b:10:59:e0:89:bc:0b:7b:0f:c7:34:54:0e:8a:3a:
78:02:c4:4a:89:ac:c4:70:e9:cc:77:54:5a:fe:40:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B5:E6:EC:33:C2:C9:1C:A5:EA:57:5F:58:43:44:46:C3:98:34:68
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/N7Xm7DPCyRyl6ldfWENERsOYNGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.4.0/22
IPv6:
2a09:afc0::/48
Signature Algorithm: sha256WithRSAEncryption
bb:64:ff:91:97:8f:bb:d4:60:59:34:70:47:0a:2b:3f:29:5f:
30:90:16:8d:64:87:0c:ce:ba:da:27:2e:f0:c2:43:88:ad:c9:
8e:1a:1c:5a:30:85:11:7f:2e:7e:62:ce:c7:de:27:32:12:87:
cc:66:d2:10:3d:c7:e2:fd:e9:8a:98:04:40:62:46:c0:56:10:
12:1c:df:25:19:e2:fe:a6:66:b3:98:19:05:90:bb:84:18:33:
81:13:43:d4:66:80:a8:2a:40:56:86:02:5e:5b:97:d4:fb:f8:
44:60:15:12:ee:c8:61:89:98:d2:16:c2:90:5f:a5:7b:0c:e3:
fa:77:0b:3a:7b:22:8c:19:a1:00:0e:bb:d9:e3:54:09:03:91:
d9:74:fb:9c:e1:5d:48:31:59:1e:87:cf:f4:ad:71:49:18:d9:
c9:bb:e3:c9:ff:71:39:84:6c:12:af:bc:47:bc:e8:3f:95:d9:
96:06:54:12:b1:7b:2a:41:13:2f:09:af:2b:51:28:88:ac:e6:
6f:8a:fb:02:01:92:fc:26:55:fe:90:69:d5:a1:ba:c2:ee:7c:
2b:81:a8:3a:e2:66:76:fc:99:57:2d:20:32:93:1e:67:e3:ce:
e7:f8:81:12:7e:07:df:e2:54:d2:92:a7:10:27:d4:f8:a7:23:
28:3c:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:56 2024 by rpki-client on console-fra.rpki-client.org