Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/_eVvrVy4GHR_RvtVFh1eoj0ZjNw.roa
File: _eVvrVy4GHR_RvtVFh1eoj0ZjNw.roa (raw, json)
Hash identifier: ZAMfA1YrNd9OyjkNBFlvP3YgUdf7ETihLFGzaGynhvw=
Subject key identifier: FD:E5:6F:AD:5C:B8:18:74:7F:46:FB:55:16:1D:5E:A2:3D:19:8C:DC
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 01857295D284AFBD7CC7FBDCBDEFA05E5739
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/_eVvrVy4GHR_RvtVFh1eoj0ZjNw.roa
Signing time: Mon 02 Jan 2023 13:04:59 +0000
ROA not before: Mon 02 Jan 2023 13:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44465
IP address blocks: 92.43.170.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:d2:84:af:bd:7c:c7:fb:dc:bd:ef:a0:5e:57:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 13:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fde56fad5cb818747f46fb55161d5ea23d198cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:ba:c7:68:e3:b3:3b:3d:fb:18:4a:89:45:
32:95:3d:e0:ea:d0:72:24:d1:6f:a4:73:06:15:23:
43:5a:f6:5f:23:09:f5:73:d0:3f:d0:2b:ce:d5:77:
99:12:ce:de:94:74:9c:37:ef:42:0f:20:71:18:84:
25:5d:42:1c:80:51:20:8a:8e:0a:86:02:8d:3a:f8:
44:6c:28:8e:a5:36:95:24:6a:51:4a:f9:dd:82:df:
e3:40:58:19:3a:14:a3:1a:0b:2c:70:a4:32:98:94:
57:e8:f3:5f:3c:5f:08:05:19:3d:14:be:16:b5:dc:
fa:2e:be:c4:c7:6d:d8:eb:37:03:98:80:45:9f:e0:
55:4a:db:e4:d8:5a:1e:2f:80:9a:49:73:da:14:c5:
03:97:4e:7d:5a:98:8a:4b:ba:3e:52:f1:6d:84:0b:
7e:ad:1d:8e:11:bb:87:62:48:d9:d2:87:0c:34:5b:
d6:f3:0a:f4:a3:7b:2b:18:98:96:d5:20:29:0a:3b:
74:51:24:d0:f8:9d:dc:24:ce:ce:54:07:eb:16:d0:
f2:3e:f9:cb:df:c6:27:71:1a:98:20:6b:6a:80:01:
c5:15:d8:44:b8:1a:54:ab:6d:9d:ee:e7:43:66:f8:
a6:0a:ec:38:9b:2f:09:92:19:8a:94:b1:b5:29:a2:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:6F:AD:5C:B8:18:74:7F:46:FB:55:16:1D:5E:A2:3D:19:8C:DC
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/_eVvrVy4GHR_RvtVFh1eoj0ZjNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.170.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
8e:3d:6b:91:34:2f:be:7d:c9:69:b4:10:57:00:0b:e7:a4:ac:
6b:06:ff:2f:e9:48:24:4e:f6:85:62:e9:67:45:ac:a3:0c:ee:
d1:6d:01:eb:e5:34:de:c5:42:9f:fb:d0:e0:f6:f2:95:a7:52:
f3:8c:28:53:5c:73:90:66:c5:d6:c7:ac:22:f8:25:d7:d0:65:
4d:64:a9:d4:9b:28:40:6e:38:c5:7c:34:e6:01:64:43:f4:90:
aa:b1:11:0c:50:35:9a:fb:96:a5:22:b6:c6:12:59:73:72:11:
af:6c:b8:2d:87:36:01:2a:c2:8a:3b:0b:ef:15:32:cc:c5:1a:
cf:29:2f:90:d2:cc:56:92:00:5f:4a:26:cf:59:71:91:16:9b:
71:55:e8:a4:64:1f:c2:8a:cb:01:c7:bf:59:2c:fc:3f:90:61:
5d:ba:02:6c:9f:1a:dd:8b:52:f5:36:3e:5b:3e:bf:63:43:7d:
0d:2f:b2:47:df:60:89:b1:ca:34:6c:4a:46:6e:e8:7b:ec:45:
f4:63:46:f3:84:4b:60:1f:82:1d:36:b0:07:ab:cc:3e:bf:e0:
60:cd:04:77:51:9e:fe:2d:e6:82:68:78:0b:56:c0:ff:4f:15:
f3:5e:49:07:5b:4e:c6:ab:05:31:a1:e2:83:d0:b0:83:7a:c5:
a0:6d:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:57 2024 by rpki-client on console.sobornost.net