Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Xj6COK7hiXm5dspTyElev4EIfR0.roa
File: Xj6COK7hiXm5dspTyElev4EIfR0.roa (raw, json)
Hash identifier: QtSxTdOWfLZ7fBR4hcEzPieloTdwEjbAunlUZNAfF6A=
Subject key identifier: 5E:3E:82:38:AE:E1:89:79:B9:76:CA:53:C8:49:5E:BF:81:08:7D:1D
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018791653352CF18348E094E548E266434A4
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Xj6COK7hiXm5dspTyElev4EIfR0.roa
Signing time: Mon 17 Apr 2023 22:45:41 +0000
ROA not before: Mon 17 Apr 2023 22:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 92.249.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 15 Jun 2023 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:91:65:33:52:cf:18:34:8e:09:4e:54:8e:26:64:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 17 22:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e3e8238aee18979b976ca53c8495ebf81087d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:46:5e:67:91:db:cc:39:67:a7:ba:90:c8:
c3:73:07:25:f8:d5:de:9c:b7:c6:3d:84:1b:f6:ef:
a2:f4:5b:1a:3d:c6:68:62:a3:47:e1:08:bd:3e:1d:
fc:2c:99:1d:8e:64:cc:60:87:d8:23:ad:1d:00:65:
e2:95:f9:6b:a5:a3:70:55:5f:2e:a4:dd:ed:93:d0:
d2:0d:9e:64:b8:3a:ce:0d:26:08:59:d8:88:e6:ae:
0f:4f:df:e6:1e:68:83:3d:a1:e2:60:32:f1:c2:da:
ee:fc:49:2f:40:0d:a8:14:78:26:20:1c:c2:cd:a9:
44:1d:22:ed:33:c3:1e:35:df:54:c2:8f:34:c5:13:
1c:f9:93:cc:24:1f:e6:e4:24:69:a9:56:fb:d2:72:
98:0b:71:70:e1:4c:05:cc:c3:51:75:61:4a:c8:dd:
ad:80:f7:78:93:a7:4e:c7:f5:47:72:cd:c5:f6:13:
b2:59:7f:ef:a5:1d:d4:fa:f9:6c:bd:be:59:9f:67:
2b:b3:43:36:ae:e0:f1:36:63:dc:41:ec:4b:71:46:
cc:8d:01:35:23:8c:c8:6f:2f:e6:5b:93:75:93:8c:
d2:da:bb:d5:d5:a7:bd:2e:43:e9:b5:ac:4c:f7:94:
98:43:b5:97:9c:a3:cb:23:60:ff:be:d5:d8:88:ca:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:82:38:AE:E1:89:79:B9:76:CA:53:C8:49:5E:BF:81:08:7D:1D
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Xj6COK7hiXm5dspTyElev4EIfR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:ad:cd:04:cd:cb:2e:62:53:e8:2c:73:35:a5:11:50:6a:ff:
49:c6:65:7a:83:0b:f6:e9:22:06:1d:b7:ef:27:7c:80:e9:48:
9b:b3:29:6f:bb:a6:59:2f:41:8b:ad:43:b8:ae:72:bb:bc:80:
95:26:3a:8f:19:b1:08:55:40:e8:4c:79:b9:ad:89:8c:75:55:
70:3b:5b:76:6d:b1:e3:19:b8:a9:eb:e3:02:2b:c7:bf:d6:4a:
a6:bb:fa:22:55:2c:74:75:5c:96:23:02:42:7a:64:66:49:15:
0a:06:af:28:b1:f3:87:51:ed:89:6e:be:78:ea:14:2c:85:a5:
bb:ce:20:32:51:54:61:3a:f2:b6:25:ea:cd:fe:d3:f7:50:8f:
85:5d:aa:68:1c:bd:c1:17:f3:73:6a:07:65:db:63:94:46:9e:
15:71:ed:43:20:1b:77:e9:9d:98:56:39:c7:96:10:62:11:4d:
b8:b3:93:1a:a1:32:fe:45:88:95:e9:27:54:09:e2:89:24:27:
ad:e5:54:d3:71:aa:62:0a:b2:b8:c2:29:7c:49:2e:5d:43:1d:
57:57:a4:fc:2b:aa:b4:4a:e1:3d:f6:a9:67:2a:aa:e6:42:b3:
77:08:cb:fb:52:57:08:bf:5e:f0:08:71:6d:74:5a:76:fb:d6:
f4:9c:ba:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeRZTNSzxg0jglOVI4mZDSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwNDE3MjI0NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTNlODIzOGFlZTE4OTc5Yjk3NmNhNTNjODQ5NWViZjgxMDg3ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNdGXmeR28w5Z6e6kMjDcwcl+NXe
nLfGPYQb9u+i9FsaPcZoYqNH4Qi9Ph38LJkdjmTMYIfYI60dAGXilflrpaNwVV8u
pN3tk9DSDZ5kuDrODSYIWdiI5q4PT9/mHmiDPaHiYDLxwtru/EkvQA2oFHgmIBzC
zalEHSLtM8MeNd9Uwo80xRMc+ZPMJB/m5CRpqVb70nKYC3Fw4UwFzMNRdWFKyN2t
gPd4k6dOx/VHcs3F9hOyWX/vpR3U+vlsvb5Zn2crs0M2ruDxNmPcQexLcUbMjQE1
I4zIby/mW5N1k4zS2rvV1ae9LkPptaxM95SYQ7WXnKPLI2D/vtXYiMr8NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF4+gjiu4Yl5uXbKU8hJXr+BCH0dMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvWGo2Q09LN2hpWG01ZHNwVHlFbGV2NEVJZlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPk8MA0G
CSqGSIb3DQEBCwUAA4IBAQAerc0EzcsuYlPoLHM1pRFQav9JxmV6gwv26SIGHbfv
J3yA6Uibsylvu6ZZL0GLrUO4rnK7vICVJjqPGbEIVUDoTHm5rYmMdVVwO1t2bbHj
Gbip6+MCK8e/1kqmu/oiVSx0dVyWIwJCemRmSRUKBq8osfOHUe2Jbr546hQshaW7
ziAyUVRhOvK2JerN/tP3UI+FXapoHL3BF/Nzagdl22OURp4Vce1DIBt36Z2YVjnH
lhBiEU24s5MaoTL+RYiV6SdUCeKJJCet5VTTcapiCrK4wil8SS5dQx1XV6T8K6q0
SuE99qlnKqrmQrN3CMv7UlcIv17wCHFtdFp2+9b0nLo+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org