Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/1V_tvkDfyn8McyRSgE2psjv98no.roa
File: 1V_tvkDfyn8McyRSgE2psjv98no.roa (raw, json)
Hash identifier: njFfF8eLb5XfHwkI2FX1Pv0mV3DryA25sP0Tmh9AyVE=
Subject key identifier: D5:5F:ED:BE:40:DF:CA:7F:0C:73:24:52:80:4D:A9:B2:3B:FD:F2:7A
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 018A26916EF4E0FE1B1B821B4486499228AA
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/1V_tvkDfyn8McyRSgE2psjv98no.roa
Signing time: Thu 24 Aug 2023 08:02:59 +0000
ROA not before: Thu 24 Aug 2023 08:02:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209980
IP address blocks: 92.43.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:91:6e:f4:e0:fe:1b:1b:82:1b:44:86:49:92:28:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Aug 24 08:02:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d55fedbe40dfca7f0c732452804da9b23bfdf27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:a5:61:48:da:4a:fa:65:93:1b:ce:9d:86:
0e:db:1d:8f:b6:20:f0:df:e0:26:24:2a:c0:ed:c0:
8a:be:b7:68:d6:9c:2b:3a:66:a2:d2:4b:ed:b3:22:
4c:fa:6c:f1:3a:fe:de:44:d7:7b:13:02:c9:77:68:
9d:65:27:34:66:b8:e0:55:14:38:17:32:c5:8a:c1:
ec:dd:d8:e7:18:53:4d:6c:fb:c6:42:ab:70:61:cb:
d6:d6:85:49:f0:62:9c:70:c9:49:80:af:d8:c9:36:
fa:3f:48:b6:d4:d8:47:40:1e:2b:f7:79:90:34:d9:
8d:c6:15:10:27:09:79:79:68:3e:87:13:3e:94:54:
43:22:c9:6a:5f:24:55:7b:45:2d:65:ce:b3:a1:d0:
2f:8c:ac:c6:cd:a2:ff:3c:42:c5:4f:8b:ed:a6:37:
08:4b:86:54:98:57:e6:17:18:93:b5:f2:b3:c2:23:
1e:e7:dc:7b:81:35:b2:94:4b:8a:cb:e4:33:d4:a8:
cf:68:48:5c:5f:0b:df:85:4a:84:0d:66:ec:f1:fd:
fb:8e:40:78:19:99:69:62:d1:51:5f:04:ae:63:05:
a8:cc:d8:fa:c9:15:9e:d1:0e:a4:ed:af:39:f0:41:
a9:82:de:23:eb:f5:bd:ed:f8:fb:eb:05:9c:86:cf:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:ED:BE:40:DF:CA:7F:0C:73:24:52:80:4D:A9:B2:3B:FD:F2:7A
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/1V_tvkDfyn8McyRSgE2psjv98no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.224.0/21
Signature Algorithm: sha256WithRSAEncryption
68:1a:55:fb:f2:27:99:de:8c:d7:27:67:08:2b:63:c0:e4:de:
ea:1c:92:77:18:3c:20:25:8c:f5:78:ba:68:2e:e4:58:ea:b1:
6c:15:91:fd:bf:90:b9:f0:d9:dd:3b:6c:f9:81:e1:34:fd:04:
8f:0b:86:6f:62:21:bc:37:f6:b9:03:72:47:16:32:68:47:f7:
b5:59:34:75:26:25:e6:e8:9f:98:a0:ed:04:83:d0:0b:82:81:
d2:95:a5:f7:f5:4b:d4:ae:2a:63:42:60:64:60:77:5a:51:92:
8e:bc:a3:1e:89:f9:76:36:f3:32:b9:32:67:1e:59:a4:17:76:
17:fa:f2:6d:0d:00:3f:96:a2:e3:29:1e:65:9f:75:2d:dd:c1:
eb:84:bd:38:1e:d8:90:9d:e1:c2:ea:df:5c:04:c8:88:42:aa:
73:96:e3:59:21:dd:62:87:e8:5d:ee:db:ce:c8:7d:bb:f1:6a:
e1:42:c9:5e:9b:24:93:c9:2a:bf:df:38:7a:79:a4:9c:6a:bf:
9f:86:ca:af:2f:98:78:2e:80:ee:26:1e:b7:f1:15:7c:28:7a:
df:eb:6d:ad:3d:14:29:a5:6e:66:49:74:41:fb:7d:e9:8b:b5:
0f:4e:65:63:dd:fc:7b:9b:bc:15:55:9c:b8:f0:06:14:94:13:
dc:b4:c0:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYomkW704P4bG4IbRIZJkiiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi
NDllYWYwHhcNMjMwODI0MDgwMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTVmZWRiZTQwZGZjYTdmMGM3MzI0NTI4MDRkYTliMjNiZmRmMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwilYUjaSvplkxvOnYYO2x2PtiDw
3+AmJCrA7cCKvrdo1pwrOmai0kvtsyJM+mzxOv7eRNd7EwLJd2idZSc0ZrjgVRQ4
FzLFisHs3djnGFNNbPvGQqtwYcvW1oVJ8GKccMlJgK/YyTb6P0i21NhHQB4r93mQ
NNmNxhUQJwl5eWg+hxM+lFRDIslqXyRVe0UtZc6zodAvjKzGzaL/PELFT4vtpjcI
S4ZUmFfmFxiTtfKzwiMe59x7gTWylEuKy+Qz1KjPaEhcXwvfhUqEDWbs8f37jkB4
GZlpYtFRXwSuYwWozNj6yRWe0Q6k7a858EGpgt4j6/W97fj76wWchs9IvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVf7b5A38p/DHMkUoBNqbI7/fJ6MB8GA1UdIwQY
MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt
NmNiZDU4MWQzMTdjLzEvMVZfdHZrRGZ5bjhNY3lSU2dFMnBzanY5OG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj
LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCvgMA0G
CSqGSIb3DQEBCwUAA4IBAQBoGlX78ieZ3ozXJ2cIK2PA5N7qHJJ3GDwgJYz1eLpo
LuRY6rFsFZH9v5C58NndO2z5geE0/QSPC4ZvYiG8N/a5A3JHFjJoR/e1WTR1JiXm
6J+YoO0Eg9ALgoHSlaX39UvUripjQmBkYHdaUZKOvKMeifl2NvMyuTJnHlmkF3YX
+vJtDQA/lqLjKR5ln3Ut3cHrhL04HtiQneHC6t9cBMiIQqpzluNZId1ih+hd7tvO
yH278WrhQslemySTySq/3zh6eaScar+fhsqvL5h4LoDuJh638RV8KHrf622tPRQp
pW5mSXRB+33pi7UPTmVj3fx7m7wVVZy48AYUlBPctMBU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:47 2024 by rpki-client on console-fra.rpki-client.org