Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/aR8FeKNN2-zD8eV9u3e8Hb6yUDw.roa
File: aR8FeKNN2-zD8eV9u3e8Hb6yUDw.roa (raw, json)
Hash identifier: LCOcCYMeXSEvLEyZfTjOyygKF3zm5UaHQmb5QFAHe0Y=
Subject key identifier: 69:1F:05:78:A3:4D:DB:EC:C3:F1:E5:7D:BB:77:BC:1D:BE:B2:50:3C
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01870934A99BFCA34A7E2FF2796933980F69
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/aR8FeKNN2-zD8eV9u3e8Hb6yUDw.roa
Signing time: Wed 22 Mar 2023 12:04:18 +0000
ROA not before: Wed 22 Mar 2023 12:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50316
IP address blocks: 92.245.184.0/24 maxlen: 24
92.245.185.0/24 maxlen: 24
92.245.186.0/24 maxlen: 24
92.245.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:34:a9:9b:fc:a3:4a:7e:2f:f2:79:69:33:98:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Mar 22 12:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=691f0578a34ddbecc3f1e57dbb77bc1dbeb2503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:0e:23:a5:e6:c6:41:68:b8:63:cd:c1:be:
f4:39:0b:e8:40:90:2d:9e:8f:90:ea:78:bc:f3:9b:
13:a2:1b:5f:c0:48:c5:9c:4f:d2:e5:2a:31:e1:48:
21:f9:d3:85:e2:72:22:d1:db:e8:72:1a:10:7e:46:
65:ec:51:39:bc:79:bd:86:95:95:cf:82:f2:90:80:
52:c3:fe:e4:c0:2c:fa:a4:27:40:5f:e0:4e:31:82:
e6:4d:f0:12:37:51:c6:a0:06:13:04:fd:79:76:b1:
7a:f1:03:e2:99:69:44:d2:89:7d:d3:19:b5:82:dc:
9a:a1:b9:78:15:8b:10:9b:6b:db:91:1b:68:69:85:
49:c8:ba:c6:c6:03:8b:c5:0a:ee:67:a0:e7:d6:ca:
4b:fe:3c:a2:f8:65:95:0b:35:d2:3d:27:5d:b4:fe:
5f:b5:a7:47:66:83:57:c4:99:18:d3:18:61:c1:fb:
7f:a1:4f:15:83:b5:c7:de:20:63:65:fc:0d:c8:85:
7d:74:f6:b9:1f:18:85:fe:9a:19:9d:99:8d:52:26:
f6:44:97:fe:1b:28:84:8e:e0:c1:40:29:83:8e:5a:
01:c4:66:9a:70:4a:85:43:2a:74:ee:a6:15:dd:f8:
65:67:a4:2a:66:e4:15:1e:1a:5a:7c:95:18:fc:04:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:05:78:A3:4D:DB:EC:C3:F1:E5:7D:BB:77:BC:1D:BE:B2:50:3C
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/aR8FeKNN2-zD8eV9u3e8Hb6yUDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.245.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:7a:04:b2:2c:7c:61:1c:c0:ae:06:b0:1a:08:1f:f1:74:05:
43:b6:c1:38:b6:40:e9:f2:02:ec:0e:7d:f4:42:11:90:5c:1b:
40:9a:bd:2b:7b:24:08:4c:77:cb:e8:73:8f:0b:13:71:f0:ba:
ed:b2:d1:87:ed:b8:f8:5b:d6:19:57:c0:9a:8c:dd:7d:60:f6:
4b:20:55:f9:e5:d6:70:64:0b:63:5f:ee:44:4e:3e:ee:83:0c:
8f:11:4f:26:b0:8c:26:8a:a9:8e:41:ce:91:f2:98:ab:71:3f:
92:82:b7:9f:75:56:b0:95:fd:15:49:90:e6:af:7c:c0:d6:06:
c1:a4:9d:4e:45:18:fd:bb:73:8d:39:fa:76:df:4d:d1:7e:88:
bc:93:14:a2:b7:a2:af:44:28:66:94:fc:d3:39:2a:2c:e1:96:
24:fe:79:ee:7e:05:66:a1:a6:8b:6b:32:fe:f4:fd:d7:ea:2d:
34:4e:dd:01:6d:ba:33:a5:1e:ae:98:42:12:13:33:00:b5:3a:
3f:45:e4:13:86:d4:ad:ec:51:e8:c6:c9:eb:bc:67:06:3a:69:
65:20:42:46:bc:41:02:b7:0f:45:1c:21:59:80:81:09:d6:f6:
ff:88:4e:26:f0:33:e1:c5:5b:11:14:7b:14:78:94:68:0c:d6:
80:3e:b3:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcJNKmb/KNKfi/yeWkzmA9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1
NTYwY2MwHhcNMjMwMzIyMTIwNDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTFmMDU3OGEzNGRkYmVjYzNmMWU1N2RiYjc3YmMxZGJlYjI1MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJYOI6XmxkFouGPNwb70OQvoQJAt
no+Q6ni885sTohtfwEjFnE/S5Sox4Ugh+dOF4nIi0dvochoQfkZl7FE5vHm9hpWV
z4LykIBSw/7kwCz6pCdAX+BOMYLmTfASN1HGoAYTBP15drF68QPimWlE0ol90xm1
gtyaobl4FYsQm2vbkRtoaYVJyLrGxgOLxQruZ6Dn1spL/jyi+GWVCzXSPSddtP5f
tadHZoNXxJkY0xhhwft/oU8Vg7XH3iBjZfwNyIV9dPa5HxiF/poZnZmNUib2RJf+
GyiEjuDBQCmDjloBxGaacEqFQyp07qYV3fhlZ6QqZuQVHhpafJUY/ATNYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkfBXijTdvsw/Hlfbt3vB2+slA8MB8GA1UdIwQY
MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct
MWNmMTViMmJhN2JlLzEvYVI4RmVLTk4yLXpEOGVWOXUzZThIYjZ5VUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl
LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPW4MA0G
CSqGSIb3DQEBCwUAA4IBAQAaegSyLHxhHMCuBrAaCB/xdAVDtsE4tkDp8gLsDn30
QhGQXBtAmr0reyQITHfL6HOPCxNx8LrtstGH7bj4W9YZV8CajN19YPZLIFX55dZw
ZAtjX+5ETj7ugwyPEU8msIwmiqmOQc6R8pircT+SgrefdVawlf0VSZDmr3zA1gbB
pJ1ORRj9u3ONOfp2303Rfoi8kxSit6KvRChmlPzTOSos4ZYk/nnufgVmoaaLazL+
9P3X6i00Tt0BbbozpR6umEISEzMAtTo/ReQThtSt7FHoxsnrvGcGOmllIEJGvEEC
tw9FHCFZgIEJ1vb/iE4m8DPhxVsRFHsUeJRoDNaAPrP+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org