Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/c8piT0OfkL5z0ZzY_m36xI-OVPk.roa
File: c8piT0OfkL5z0ZzY_m36xI-OVPk.roa (raw, json)
Hash identifier: pEba0EtCk00/Qpks8qaEv/igZO6YjiaAA5FCkc/mHB0=
Subject key identifier: 73:CA:62:4F:43:9F:90:BE:73:D1:9C:D8:FE:6D:FA:C4:8F:8E:54:F9
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3AE1E2BEE9E7BDF74989217650CB
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/c8piT0OfkL5z0ZzY_m36xI-OVPk.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 92.240.148.0/24 maxlen: 24
92.240.150.0/24 maxlen: 24
46.244.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 08:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3a:e1:e2:be:e9:e7:bd:f7:49:89:21:76:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73ca624f439f90be73d19cd8fe6dfac48f8e54f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:f0:03:0f:91:fd:56:3c:72:87:0e:b8:f7:
79:20:e2:30:79:52:d2:c3:28:c9:2d:ad:cb:fd:ed:
f1:c7:ea:1e:9d:95:d6:69:94:be:6b:26:64:bf:d7:
56:c2:87:7e:9c:c4:89:6c:6d:fe:e5:86:06:75:69:
cc:0c:eb:6c:70:0d:41:ba:f7:fd:6f:3f:15:10:3a:
1e:7a:fe:d9:c9:60:02:f7:1d:91:7b:cd:93:b1:ce:
0a:07:b8:78:1f:a4:16:f5:66:64:10:98:91:06:07:
a2:9d:f8:30:f0:56:51:85:db:da:9c:e4:75:7b:39:
aa:9c:f3:60:36:53:d7:d8:96:5e:3a:03:a0:9f:ef:
13:ea:94:22:76:05:d9:ca:d8:72:67:78:83:22:fa:
93:ef:28:aa:b9:67:fd:77:62:ed:70:46:51:cb:8f:
2e:3a:e3:23:0a:73:84:e5:25:b9:7f:b9:c2:98:5e:
2e:1f:98:ca:23:39:1f:04:1b:41:86:f1:55:3f:94:
08:c8:3b:8c:80:a7:be:22:e3:5d:02:4c:ca:fc:7f:
00:87:c9:43:a2:49:07:a3:a0:f6:da:ed:7b:8c:b9:
48:93:3e:1f:5a:a0:7f:83:22:a1:ca:f2:87:c3:f3:
c8:76:5c:ce:a4:6b:08:56:e1:67:20:69:a3:29:bd:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:62:4F:43:9F:90:BE:73:D1:9C:D8:FE:6D:FA:C4:8F:8E:54:F9
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/c8piT0OfkL5z0ZzY_m36xI-OVPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.96.0/24
92.240.148.0/24
92.240.150.0/24
Signature Algorithm: sha256WithRSAEncryption
94:22:1d:b9:a4:68:b9:79:86:21:a2:b6:79:56:9b:cc:bf:2c:
74:f6:88:ef:42:4f:b3:72:0d:eb:0d:b3:c9:13:ab:53:12:7b:
77:eb:1f:87:85:e8:22:5e:0b:e4:9f:6d:51:2b:68:85:5e:b5:
b6:7f:39:80:b3:db:b7:bc:c0:2a:6c:f2:54:6a:80:81:12:fd:
c0:82:01:e5:34:a4:28:4a:08:ba:ff:62:8b:79:14:a6:33:79:
93:8d:1e:09:0f:e8:1d:24:82:0f:ed:d4:e0:11:83:bb:58:9c:
50:c5:75:5d:df:e6:1d:ca:98:a8:ad:18:b2:d4:f6:a6:f9:0d:
21:c7:a6:60:9f:97:ca:eb:40:b6:f5:bc:4d:64:b4:30:6d:59:
be:ae:07:d9:7e:06:fa:ed:1b:0a:d5:91:80:3e:bc:78:44:3c:
72:0a:2e:5e:d6:7b:99:3d:2e:fd:30:64:eb:68:15:2d:62:d1:
e9:1d:46:cf:08:e7:ed:4d:9d:9a:ed:9d:d2:53:26:02:46:a6:
7a:ad:14:0a:48:c3:a7:81:28:85:79:8e:57:52:4c:c6:3d:e0:
bd:83:4e:b1:90:e4:8e:38:eb:ea:77:ca:50:d1:17:7d:08:a2:
c0:50:9e:91:72:22:77:1b:6e:10:50:a5:50:4a:ad:36:bb:da:
27:ef:6d:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvDrh4r7p5733SYkhdlDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjQwMTAyMTAzMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2NhNjI0ZjQzOWY5MGJlNzNkMTljZDhmZTZkZmFjNDhmOGU1NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1bwAw+R/VY8cocOuPd5IOIweVLS
wyjJLa3L/e3xx+oenZXWaZS+ayZkv9dWwod+nMSJbG3+5YYGdWnMDOtscA1Buvf9
bz8VEDoeev7ZyWAC9x2Re82Tsc4KB7h4H6QW9WZkEJiRBgeinfgw8FZRhdvanOR1
ezmqnPNgNlPX2JZeOgOgn+8T6pQidgXZythyZ3iDIvqT7yiquWf9d2LtcEZRy48u
OuMjCnOE5SW5f7nCmF4uH5jKIzkfBBtBhvFVP5QIyDuMgKe+IuNdAkzK/H8Ah8lD
okkHo6D22u17jLlIkz4fWqB/gyKhyvKHw/PIdlzOpGsIVuFnIGmjKb3kyQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHPKYk9Dn5C+c9Gc2P5t+sSPjlT5MB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEvYzhwaVQwT2ZrTDV6MFp6WV9tMzZ4SS1PVlBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALvRgAwQA
XPCUAwQAXPCWMA0GCSqGSIb3DQEBCwUAA4IBAQCUIh25pGi5eYYhorZ5VpvMvyx0
9ojvQk+zcg3rDbPJE6tTEnt36x+HhegiXgvkn21RK2iFXrW2fzmAs9u3vMAqbPJU
aoCBEv3AggHlNKQoSgi6/2KLeRSmM3mTjR4JD+gdJIIP7dTgEYO7WJxQxXVd3+Yd
ypiorRiy1Pam+Q0hx6Zgn5fK60C29bxNZLQwbVm+rgfZfgb67RsK1ZGAPrx4RDxy
Ci5e1nuZPS79MGTraBUtYtHpHUbPCOftTZ2a7Z3SUyYCRqZ6rRQKSMOngSiFeY5X
UkzGPeC9g06xkOSOOOvqd8pQ0Rd9CKLAUJ6RciJ3G24QUKVQSq02u9on722v
-----END CERTIFICATE-----
Generated at Fri Mar 1 11:05:08 2024 by rpki-client on console-fra.rpki-client.org