Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/pbZgApv3U4Px-Oglpe_iXgPc014.roa
File: pbZgApv3U4Px-Oglpe_iXgPc014.roa (raw, json)
Hash identifier: N9XyD/J3iU8eY381Q6VyTjOWxXskpjioltPoJcbtJkc=
Subject key identifier: A5:B6:60:02:9B:F7:53:83:F1:F8:E8:25:A5:EF:E2:5E:03:DC:D3:5E
Certificate issuer: /CN=6827dc221544fc74215112a5812de196a2872e86
Certificate serial: 018CC50029603A43C791C01115919DDCA1BE
Authority key identifier: 68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/pbZgApv3U4Px-Oglpe_iXgPc014.roa
Signing time: Mon 01 Jan 2024 12:29:31 +0000
ROA not before: Mon 01 Jan 2024 12:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29076
IP address blocks: 188.92.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 22 May 2024 21:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:29:60:3a:43:c7:91:c0:11:15:91:9d:dc:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6827dc221544fc74215112a5812de196a2872e86
Validity
Not Before: Jan 1 12:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5b660029bf75383f1f8e825a5efe25e03dcd35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:85:55:07:d7:71:f7:c7:5e:fe:21:5d:f3:
31:42:23:65:41:9b:2f:cf:24:a3:89:99:c5:8a:5d:
87:f9:5f:ac:c6:87:60:3f:23:30:1a:60:bf:89:c6:
cc:ca:b2:f1:b1:2e:43:e8:6d:b3:5d:d9:e5:cc:10:
b3:2a:f8:21:8c:ff:86:b0:73:43:b3:e6:f4:c8:5c:
2e:6b:53:57:da:2a:1a:0f:8d:2d:0c:75:d9:44:61:
ff:cd:86:9a:3a:a9:e6:0d:f3:93:d5:1b:c3:d0:50:
1d:fb:9d:61:72:3e:4d:84:64:24:c0:e3:83:93:5e:
32:1b:08:a6:14:56:8f:ce:01:47:84:f7:69:48:97:
81:4b:47:26:72:26:c1:95:ed:5a:1c:68:5e:ec:b6:
9d:9c:c3:b4:c8:db:46:8a:17:08:2e:b4:ab:8c:c2:
5e:bd:7e:c9:48:9c:29:f7:74:1a:56:d6:21:0a:74:
a2:ce:0f:d2:2e:a8:65:90:21:cc:6d:2b:3d:13:cd:
f1:a3:a3:a6:8c:32:20:ac:52:98:3d:95:d5:de:63:
55:c8:17:75:90:02:8b:51:a2:a6:64:27:d3:87:3e:
5e:f0:c4:6c:cd:e4:7c:30:f3:f4:ca:d5:6b:b4:46:
2e:0b:55:6d:cc:e6:1e:93:40:02:e4:ca:b0:4c:05:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:60:02:9B:F7:53:83:F1:F8:E8:25:A5:EF:E2:5E:03:DC:D3:5E
X509v3 Authority Key Identifier:
keyid:68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/pbZgApv3U4Px-Oglpe_iXgPc014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.176.0/21
Signature Algorithm: sha256WithRSAEncryption
85:39:0e:b5:0e:b1:66:a4:b5:f8:7b:b7:f4:07:1e:74:67:8e:
00:19:c7:6f:9d:db:5b:70:99:f7:17:fd:35:b2:b2:9b:26:56:
32:ad:4f:76:11:0e:a9:82:e4:b5:55:e7:6e:5a:83:22:e0:95:
5e:be:aa:19:79:97:7d:ce:82:14:c1:d2:af:83:1a:c9:ca:a1:
01:66:7f:45:f6:62:1d:c4:c2:05:b6:68:a5:9c:d4:74:da:c0:
d3:e2:7e:54:63:c3:63:cd:03:f9:9d:9d:aa:65:ef:89:e6:fb:
1e:99:43:ff:af:12:ed:94:14:a7:7a:3d:9a:b2:9c:1b:07:32:
1f:f1:0a:54:41:a4:88:3d:f8:45:a5:f1:64:fb:da:3b:b8:ee:
4a:32:61:30:8d:4a:f4:05:a8:0f:f8:d0:8c:d9:62:19:87:00:
32:7d:6d:52:fd:c5:2a:8e:63:80:86:62:aa:10:52:03:e6:fa:
fd:22:fc:44:10:dc:32:f4:97:7f:86:e6:49:65:31:89:c8:57:
c8:93:cf:18:be:bf:b3:a2:60:a4:86:06:bb:a5:26:8e:42:14:
16:a1:63:55:4c:3c:33:45:62:98:5e:72:cf:c4:a7:1c:5e:eb:
fb:92:51:ca:8a:13:15:20:02:57:36:3d:b5:d3:4a:41:fe:8b:
f1:b2:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 09:35:53 2024 by rpki-client on console.sobornost.net