Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/TIv0L04HCtakx_JoQcnIrITIFag.roa
File: TIv0L04HCtakx_JoQcnIrITIFag.roa (raw, json)
Hash identifier: wVA7vw0Wa0Rk7wMdRmzC8RWkwEJ0ODoKQ3+l4ovtU6Q=
Subject key identifier: 4C:8B:F4:2F:4E:07:0A:D6:A4:C7:F2:68:41:C9:C8:AC:84:C8:15:A8
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 01856CEF2808631141F65E42EAE8A753EF8F
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/TIv0L04HCtakx_JoQcnIrITIFag.roa
Signing time: Sun 01 Jan 2023 10:44:50 +0000
ROA not before: Sun 01 Jan 2023 10:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51616
IP address blocks: 92.119.50.0/24 maxlen: 24
92.119.48.0/23 maxlen: 23
92.119.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:28:08:63:11:41:f6:5e:42:ea:e8:a7:53:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Jan 1 10:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c8bf42f4e070ad6a4c7f26841c9c8ac84c815a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:a1:f0:5e:fa:cd:c7:e8:8d:d4:36:af:79:
2f:9f:f5:3b:ea:8b:c3:0a:bf:6a:67:28:06:da:12:
0b:d4:9f:0f:ea:d9:52:19:b6:ba:a2:33:ec:ba:96:
28:cd:35:70:13:5d:aa:c2:84:ec:dc:d7:5c:fb:52:
8c:88:fa:42:33:a2:cd:49:5c:ce:59:3b:52:62:b5:
94:7a:da:42:10:19:43:f3:a3:38:10:00:a0:f4:ec:
91:1e:d2:a3:86:ac:51:dd:d8:6a:01:07:72:b0:b2:
04:48:3c:b0:55:83:98:97:63:0a:fa:d2:bb:0c:07:
c4:cc:15:c7:5e:69:ba:bc:15:95:1e:9e:a0:05:7e:
9f:8b:64:d0:4e:72:bd:04:0b:db:45:ff:3d:e4:f8:
fc:94:85:da:43:9c:93:f3:f9:43:11:42:fb:ba:56:
02:c2:73:52:23:e4:b6:f4:72:41:2b:f7:8d:77:cc:
2d:87:5d:b5:74:47:34:2f:f4:00:1f:2c:64:18:20:
3c:2b:79:0f:a4:4c:be:7f:f6:8a:ac:73:00:ba:9d:
2a:51:e9:f4:d9:9e:d8:a0:96:f7:38:58:3c:a9:f9:
0c:48:7a:71:d1:14:9e:84:e1:02:58:6e:db:e0:64:
3b:d3:2b:49:1d:3f:93:1a:74:be:7b:22:0a:00:8a:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:F4:2F:4E:07:0A:D6:A4:C7:F2:68:41:C9:C8:AC:84:C8:15:A8
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/TIv0L04HCtakx_JoQcnIrITIFag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.48.0/22
Signature Algorithm: sha256WithRSAEncryption
78:14:da:48:78:be:c6:e6:05:8c:bb:8d:8a:1f:01:dd:b8:73:
c3:a6:c2:dc:eb:92:2c:c0:c5:ab:13:0c:9c:79:f4:47:84:ff:
96:99:49:0f:a2:35:5c:25:e4:d8:83:a1:85:11:80:44:ef:5b:
00:ae:fb:cf:e9:1c:09:a1:4d:a8:48:cb:4d:a0:35:5f:ec:77:
ed:d3:23:67:32:c6:6b:05:02:fd:11:db:33:94:81:ae:fe:a1:
8b:1d:d2:88:cb:12:11:1c:5f:4e:38:2f:c5:d7:11:b9:a9:2b:
71:28:ce:c1:24:b2:2d:79:56:17:35:ca:12:28:0c:7a:ae:29:
96:3e:98:93:5e:d6:68:74:42:42:7d:83:19:d4:a8:b3:e1:28:
47:b5:a9:cf:7e:4e:11:63:58:13:6f:ff:f4:f5:77:53:ac:68:
bd:52:bb:c5:65:83:11:bb:33:b9:f2:bd:dc:9a:1e:26:c2:43:
27:0b:99:ef:19:9b:0d:84:85:44:60:e7:68:5d:16:8c:44:df:
b5:cc:5b:6a:25:10:43:7b:7f:25:30:07:6c:b5:20:26:0b:e0:
96:3a:5f:cb:7e:6b:e7:fe:2d:d3:65:a6:58:e0:7d:f6:ca:eb:
b6:a7:bc:c0:95:07:4a:ac:a1:e3:72:a1:f9:d3:21:3e:52:41:
7f:5b:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:10 2024 by rpki-client on console.sobornost.net