Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/67or9Vqk9LWJtDblPOzZQGXZRx4.roa
File: 67or9Vqk9LWJtDblPOzZQGXZRx4.roa (raw, json)
Hash identifier: ZIbUMmAFLWXIINSYiWbUSTeKKR2d/ln+3NilxcqeFEo=
Subject key identifier: EB:BA:2B:F5:5A:A4:F4:B5:89:B4:36:E5:3C:EC:D9:40:65:D9:47:1E
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 018570307DF84A4FD08CADDF63F255B26D89
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/67or9Vqk9LWJtDblPOzZQGXZRx4.roa
Signing time: Mon 02 Jan 2023 01:55:04 +0000
ROA not before: Mon 02 Jan 2023 01:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:7d:f8:4a:4f:d0:8c:ad:df:63:f2:55:b2:6d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Jan 2 01:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebba2bf55aa4f4b589b436e53cecd94065d9471e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:52:e0:53:96:99:47:56:fb:44:9b:83:2c:
25:00:44:f1:9c:c5:e1:76:99:a2:82:b7:79:e8:16:
b8:20:05:ef:af:5a:34:40:03:bc:7d:a1:da:77:23:
2b:fb:51:b7:34:9d:cd:6e:09:ae:46:b5:ce:83:cd:
01:fb:6a:8d:f9:8a:11:44:8a:24:00:59:94:dd:bb:
b4:e8:a0:a1:03:6c:9b:15:35:1f:08:8b:44:93:31:
cd:72:b5:ef:d4:5f:40:95:4d:ea:08:ad:17:e4:b6:
f5:b6:bc:aa:13:c4:f7:25:75:bb:f2:3e:5a:05:2c:
3b:77:0e:e3:54:43:bf:c3:17:d1:6a:2c:6f:6f:4e:
a5:56:81:0d:55:e9:c5:47:e5:11:9d:c1:5a:ca:e5:
b9:21:8a:52:9c:ee:8d:f8:be:6f:34:a4:68:e8:cd:
a9:f7:90:66:b3:7c:1b:66:a0:31:4a:d3:25:64:13:
13:ea:07:f0:0b:e7:a2:26:97:7a:e2:61:fb:90:ec:
35:f3:99:20:70:ff:49:14:25:cc:c2:c3:54:c3:a1:
7c:24:42:96:12:4d:af:9e:c6:e3:50:3c:b1:ab:49:
69:ca:78:62:0a:bc:bc:1b:f4:51:b4:18:4e:06:f3:
be:4b:8b:41:32:bd:98:d5:f7:0b:bc:ef:3b:64:5c:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:2B:F5:5A:A4:F4:B5:89:B4:36:E5:3C:EC:D9:40:65:D9:47:1E
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/67or9Vqk9LWJtDblPOzZQGXZRx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e7:f7:e5:6e:10:b0:bb:1b:f3:33:8e:07:84:30:2d:0d:6b:
e2:ee:69:52:cb:ee:a6:1f:bd:53:75:f6:ef:40:b3:ed:6a:bd:
3c:8a:4d:a9:eb:8f:9d:a3:96:d0:1f:c5:31:25:63:7b:47:88:
e0:22:01:0c:94:61:de:f8:cf:b4:9d:5e:2e:7f:42:43:ab:ce:
1b:3c:1a:51:ec:aa:4f:e9:9f:8b:bb:5d:83:d4:b4:ff:bc:59:
83:ed:e9:95:15:f6:40:ac:47:d0:28:7e:0a:f6:ef:c0:2c:17:
33:03:70:3c:39:5f:04:c9:c6:76:ae:73:b3:7b:98:5c:cc:fe:
54:7c:6d:dd:13:25:04:3d:29:11:43:bd:18:3b:e4:22:f8:03:
35:6c:ce:f7:9a:53:a0:77:80:78:5a:6d:89:3f:3d:bf:f1:af:
47:89:6b:fd:81:13:2c:92:ff:bf:d8:f4:6a:44:3e:aa:de:d7:
7e:21:88:4a:e7:ba:b8:a7:b6:1c:ee:e2:84:24:a5:4c:c0:79:
09:3e:e0:da:4c:d7:c9:14:ce:61:98:25:7c:71:87:72:9b:a6:
0e:e7:97:37:79:d3:c6:ac:48:c0:5a:64:69:42:0b:55:06:01:
92:aa:c2:d2:38:96:15:34:dd:26:a4:be:31:e2:ff:43:ef:b1:
c3:b3:49:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMH34Sk/QjK3fY/JVsm2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3
ZWYwZTIwHhcNMjMwMTAyMDE1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmJhMmJmNTVhYTRmNGI1ODliNDM2ZTUzY2VjZDk0MDY1ZDk0NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4BS4FOWmUdW+0SbgywlAETxnMXh
dpmigrd56Ba4IAXvr1o0QAO8faHadyMr+1G3NJ3NbgmuRrXOg80B+2qN+YoRRIok
AFmU3bu06KChA2ybFTUfCItEkzHNcrXv1F9AlU3qCK0X5Lb1tryqE8T3JXW78j5a
BSw7dw7jVEO/wxfRaixvb06lVoENVenFR+URncFayuW5IYpSnO6N+L5vNKRo6M2p
95Bms3wbZqAxStMlZBMT6gfwC+eiJpd64mH7kOw185kgcP9JFCXMwsNUw6F8JEKW
Ek2vnsbjUDyxq0lpynhiCry8G/RRtBhOBvO+S4tBMr2Y1fcLvO87ZFw99wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOu6K/VapPS1ibQ25Tzs2UBl2UceMB8GA1UdIwQY
MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt
N2Y3MmY0NGI4OTgyLzEvNjdvcjlWcWs5TFdKdERibFBPelpRR1haUng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy
LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFyVMA0G
CSqGSIb3DQEBCwUAA4IBAQCK5/flbhCwuxvzM44HhDAtDWvi7mlSy+6mH71Tdfbv
QLPtar08ik2p64+do5bQH8UxJWN7R4jgIgEMlGHe+M+0nV4uf0JDq84bPBpR7KpP
6Z+Lu12D1LT/vFmD7emVFfZArEfQKH4K9u/ALBczA3A8OV8EycZ2rnOze5hczP5U
fG3dEyUEPSkRQ70YO+Qi+AM1bM73mlOgd4B4Wm2JPz2/8a9HiWv9gRMskv+/2PRq
RD6q3td+IYhK57q4p7Yc7uKEJKVMwHkJPuDaTNfJFM5hmCV8cYdym6YO55c3edPG
rEjAWmRpQgtVBgGSqsLSOJYVNN0mpL4x4v9D77HDs0ky
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:41 2024 by rpki-client on console-fra.rpki-client.org