Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_k5NOYfcapj042k-9yWN1vkUJMY.roa
File: _k5NOYfcapj042k-9yWN1vkUJMY.roa (raw, json)
Hash identifier: qVTOnfqGKD9FEVrNkZbDsENJNTl2Wog4EqO7+TN5wNk=
Subject key identifier: FE:4E:4D:39:87:DC:6A:98:F4:E3:69:3E:F7:25:8D:D6:F9:14:24:C6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0185D3A22971E4ABC18464B114C0A7FBF5DB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_k5NOYfcapj042k-9yWN1vkUJMY.roa
Signing time: Sat 21 Jan 2023 09:21:37 +0000
ROA not before: Sat 21 Jan 2023 09:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 92.119.164.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:a2:29:71:e4:ab:c1:84:64:b1:14:c0:a7:fb:f5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 21 09:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe4e4d3987dc6a98f4e3693ef7258dd6f91424c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:ee:79:4e:1e:13:03:27:07:17:55:4e:8c:
49:ca:d2:0f:85:2c:e6:d7:c2:65:f5:5d:fe:56:2f:
ed:9d:b7:6b:db:31:c4:c5:f5:4c:13:08:2a:1b:61:
c6:99:62:d1:70:46:d1:30:f7:f6:01:5c:96:87:32:
c8:f7:16:37:d1:b2:41:6d:81:3c:1b:c7:f7:fe:86:
28:56:8c:33:49:25:08:59:5b:a3:73:82:70:1e:4e:
15:6b:da:05:21:76:e2:1e:43:e5:05:53:af:a1:19:
99:03:20:97:fc:72:4f:90:61:c4:b0:49:02:f9:04:
c5:2a:1f:45:48:3d:86:b4:b5:d5:f0:cc:c0:67:3c:
07:5a:01:81:c7:91:dd:c9:9a:e1:69:6b:66:44:35:
c9:99:d9:ad:a7:8d:06:dc:77:4b:bd:13:5e:e1:34:
8f:a8:2e:90:3e:43:f9:76:1f:83:54:aa:1e:87:e6:
f8:d9:92:ed:35:43:73:43:48:ee:2a:db:87:23:18:
6a:cb:9a:0a:d8:c3:93:57:16:f9:11:4f:22:92:94:
ac:92:54:51:68:4a:05:53:50:fb:da:bf:99:68:ec:
84:cc:12:9f:ba:15:84:27:42:37:a8:f5:89:4a:64:
78:13:ca:b9:05:a0:3b:b9:6b:72:1c:a3:49:8d:6c:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4E:4D:39:87:DC:6A:98:F4:E3:69:3E:F7:25:8D:D6:F9:14:24:C6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_k5NOYfcapj042k-9yWN1vkUJMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.32.0/22
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:8f:d2:db:d2:12:30:f9:5a:29:93:52:f1:01:b3:28:63:48:
46:c9:90:d8:96:f8:27:bd:01:4a:69:bd:40:8d:af:d3:7d:a4:
7b:ce:fd:f0:15:03:c6:c7:21:e9:04:b6:12:b3:3e:f6:67:65:
74:44:3d:53:43:42:55:f8:e9:e1:e8:17:e2:77:ba:97:1d:da:
de:7c:1c:64:aa:0d:05:0c:85:ad:de:1f:70:40:b0:86:fb:39:
08:f0:71:8b:3e:a5:fe:a4:16:b4:0a:62:0c:d3:54:f6:dc:7e:
15:14:8b:fe:68:96:d7:0c:20:02:a7:dd:20:7e:03:84:bc:88:
d4:35:00:db:4f:ac:a2:47:bb:05:e1:cd:5f:ac:4c:56:a9:69:
6f:da:5b:b9:10:56:7b:9e:0a:f1:9d:f3:be:2e:68:61:65:d5:
3a:cb:62:fa:b7:b7:90:d2:82:1f:1e:7c:0b:67:b7:c8:05:a4:
92:da:db:95:a0:48:ff:19:75:91:54:5d:bf:4c:fd:cb:f2:09:
0d:42:41:84:40:29:be:54:29:c2:61:e1:ad:56:eb:49:c6:cf:
b1:bf:35:33:95:df:7d:86:b4:e2:af:85:f1:04:c8:69:2d:3b:
94:92:0e:11:09:fe:3e:f8:55:4f:cb:c6:d0:23:de:bb:d8:b7:
a8:0c:bb:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXToilx5KvBhGSxFMCn+/XbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwMTIxMDkyMTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTRlNGQzOTg3ZGM2YTk4ZjRlMzY5M2VmNzI1OGRkNmY5MTQyNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zueU4eEwMnBxdVToxJytIPhSzm
18Jl9V3+Vi/tnbdr2zHExfVMEwgqG2HGmWLRcEbRMPf2AVyWhzLI9xY30bJBbYE8
G8f3/oYoVowzSSUIWVujc4JwHk4Va9oFIXbiHkPlBVOvoRmZAyCX/HJPkGHEsEkC
+QTFKh9FSD2GtLXV8MzAZzwHWgGBx5HdyZrhaWtmRDXJmdmtp40G3HdLvRNe4TSP
qC6QPkP5dh+DVKoeh+b42ZLtNUNzQ0juKtuHIxhqy5oK2MOTVxb5EU8ikpSsklRR
aEoFU1D72r+ZaOyEzBKfuhWEJ0I3qPWJSmR4E8q5BaA7uWtyHKNJjWwxawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP5OTTmH3GqY9ONpPvcljdb5FCTGMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvX2s1Tk9ZZmNhcGowNDJrLTl5V04xdmtVSk1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTVMgAwQC
XHekMA0GCSqGSIb3DQEBCwUAA4IBAQCaj9Lb0hIw+Vopk1LxAbMoY0hGyZDYlvgn
vQFKab1Aja/TfaR7zv3wFQPGxyHpBLYSsz72Z2V0RD1TQ0JV+Onh6Bfid7qXHdre
fBxkqg0FDIWt3h9wQLCG+zkI8HGLPqX+pBa0CmIM01T23H4VFIv+aJbXDCACp90g
fgOEvIjUNQDbT6yiR7sF4c1frExWqWlv2lu5EFZ7ngrxnfO+LmhhZdU6y2L6t7eQ
0oIfHnwLZ7fIBaSS2tuVoEj/GXWRVF2/TP3L8gkNQkGEQCm+VCnCYeGtVutJxs+x
vzUzld99hrTir4XxBMhpLTuUkg4RCf4++FVPy8bQI9672LeoDLsi
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org