Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/g0crKeJLNYiu4wdSWsTK0vdcckw.roa
File: g0crKeJLNYiu4wdSWsTK0vdcckw.roa (raw, json)
Hash identifier: ouGHboK5zS3U/6lwm4yU/JmX5gSwEmySX8s1hzzh81A=
Subject key identifier: 83:47:2B:29:E2:4B:35:88:AE:E3:07:52:5A:C4:CA:D2:F7:5C:72:4C
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 0187473D060B158116014F154A041B69CF72
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/g0crKeJLNYiu4wdSWsTK0vdcckw.roa
Signing time: Mon 03 Apr 2023 13:09:54 +0000
ROA not before: Mon 03 Apr 2023 13:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210671
IP address blocks: 85.92.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 12:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:3d:06:0b:15:81:16:01:4f:15:4a:04:1b:69:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Apr 3 13:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83472b29e24b3588aee307525ac4cad2f75c724c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:3a:c6:0f:a5:52:48:4b:14:f2:de:4a:69:
77:5f:30:f6:87:ad:78:9f:f8:2d:7c:fe:6e:7a:de:
8f:b3:e0:87:d6:a8:ab:47:39:08:2c:d7:ef:68:db:
1b:46:72:35:06:ef:d4:66:8c:60:5e:bd:16:6a:5e:
50:e3:14:00:c0:93:8b:58:6b:45:fa:b9:88:41:dd:
80:e3:66:ee:f5:4e:24:1d:bf:df:2c:48:02:31:fb:
8b:e7:d4:dc:17:f0:eb:31:90:c0:8e:9b:66:d6:90:
2a:82:a5:f7:0f:6b:3f:3e:7a:af:17:02:ff:a3:9b:
2e:97:cd:05:27:b0:05:42:a8:04:7d:96:f9:b0:fe:
79:69:33:14:63:8f:1d:c6:41:99:d6:93:c4:fd:d1:
01:a7:f0:b7:46:13:0f:44:15:04:b7:7e:4f:9a:b8:
1d:f3:b3:f8:8d:6a:b1:e9:97:95:6a:b5:d5:c9:4c:
60:37:19:08:e9:da:ad:c2:ea:1e:d1:cb:bc:a2:c2:
1f:16:4d:a6:a8:1e:a6:05:5a:f7:70:bf:09:cd:aa:
29:be:df:28:32:52:2e:0e:72:85:76:6a:8b:44:88:
3f:76:aa:10:72:e6:9b:64:11:5b:da:8a:a9:e4:88:
72:79:8e:af:79:81:3b:1a:45:e5:aa:ff:b9:e0:4c:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:2B:29:E2:4B:35:88:AE:E3:07:52:5A:C4:CA:D2:F7:5C:72:4C
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/g0crKeJLNYiu4wdSWsTK0vdcckw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b5:4d:9b:b5:22:ca:a7:ef:a8:ad:d5:4a:c7:44:92:52:b4:
4a:1b:03:dd:67:cd:80:e4:29:86:5e:98:38:7f:52:0f:e4:99:
cc:ac:3f:19:83:ae:50:d3:59:4c:d7:2c:46:c6:31:ce:11:22:
2c:6b:35:19:fb:07:6d:92:40:b3:0b:0e:65:15:8a:40:ae:68:
12:b1:fa:ab:ff:93:7d:25:56:45:58:59:d0:d3:66:4a:27:b4:
0c:28:99:1c:d4:4b:32:76:b4:9d:52:6f:85:fe:6c:78:b1:b8:
12:37:3d:f4:8c:82:86:fb:48:a3:26:3e:fc:61:5e:94:f8:21:
58:c0:86:a2:91:fc:e3:ec:ff:ef:d6:2a:3e:78:26:ad:32:ca:
59:3b:0b:8d:f7:73:e3:86:78:4e:32:88:44:02:8c:6f:ab:41:
a0:fa:b6:28:72:ef:2a:3b:0f:e1:d6:70:b0:20:cd:7c:6a:b3:
8a:a5:64:a4:46:0a:21:d1:45:59:fd:84:7d:9a:b6:36:f9:7a:
7f:43:98:65:44:53:eb:10:84:a9:ad:46:7b:05:14:79:17:fd:
5e:dd:9e:96:a9:b3:2a:82:82:f5:8e:11:37:8e:17:2b:41:fb:
68:06:50:20:33:00:1f:c4:9e:1b:4a:5e:82:ab:af:54:99:66:
b5:f5:3d:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdHPQYLFYEWAU8VSgQbac9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjdmZDU3MTBhZTVhNDczZTE1OGRjM2ZkNmM4ZjE3ZWZh
M2U1NWIwHhcNMjMwNDAzMTMwOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzQ3MmIyOWUyNGIzNTg4YWVlMzA3NTI1YWM0Y2FkMmY3NWM3MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGw6xg+lUkhLFPLeSml3XzD2h614
n/gtfP5uet6Ps+CH1qirRzkILNfvaNsbRnI1Bu/UZoxgXr0Wal5Q4xQAwJOLWGtF
+rmIQd2A42bu9U4kHb/fLEgCMfuL59TcF/DrMZDAjptm1pAqgqX3D2s/PnqvFwL/
o5sul80FJ7AFQqgEfZb5sP55aTMUY48dxkGZ1pPE/dEBp/C3RhMPRBUEt35Pmrgd
87P4jWqx6ZeVarXVyUxgNxkI6dqtwuoe0cu8osIfFk2mqB6mBVr3cL8Jzaopvt8o
MlIuDnKFdmqLRIg/dqoQcuabZBFb2oqp5IhyeY6veYE7GkXlqv+54EwewQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINHKyniSzWIruMHUlrEytL3XHJMMB8GA1UdIwQY
MBaAFP73/VcQrlpHPhWNw/1sjxfvo+VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODIt
NDUzZDM3YjQ5MjFjLzEvZzBjcktlSkxOWWl1NHdkU1dzVEswdmRjY2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODItNDUzZDM3YjQ5MjFj
LzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVx3MA0G
CSqGSIb3DQEBCwUAA4IBAQA/tU2btSLKp++ordVKx0SSUrRKGwPdZ82A5CmGXpg4
f1IP5JnMrD8Zg65Q01lM1yxGxjHOESIsazUZ+wdtkkCzCw5lFYpArmgSsfqr/5N9
JVZFWFnQ02ZKJ7QMKJkc1EsydrSdUm+F/mx4sbgSNz30jIKG+0ijJj78YV6U+CFY
wIaikfzj7P/v1io+eCatMspZOwuN93PjhnhOMohEAoxvq0Gg+rYocu8qOw/h1nCw
IM18arOKpWSkRgoh0UVZ/YR9mrY2+Xp/Q5hlRFPrEISprUZ7BRR5F/1e3Z6WqbMq
goL1jhE3jhcrQftoBlAgMwAfxJ4bSl6Cq69UmWa19T2t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:30 2024 by rpki-client on console-fra.rpki-client.org