Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/1-L6D_9l-cT56KIsU-432NZjG6Pc.roa
File: 1-L6D_9l-cT56KIsU-432NZjG6Pc.roa (raw, json)
Hash identifier: 7Puzxehea/d1KONsdJnc4ymMafjH5HERfmVwP9I6hA8=
Subject key identifier: F8:BE:83:FF:D9:7E:71:3E:7A:28:8B:14:FB:8D:F6:35:98:C6:E8:F7
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0189406336E0F0D04417834B77C06628AEF5
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/1-L6D_9l-cT56KIsU-432NZjG6Pc.roa
Signing time: Mon 10 Jul 2023 15:19:51 +0000
ROA not before: Mon 10 Jul 2023 15:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35357
IP address blocks: 92.119.132.0/24 maxlen: 24
92.119.132.0/23 maxlen: 23
92.119.132.0/22 maxlen: 22
92.119.133.0/24 maxlen: 24
92.119.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 15:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:63:36:e0:f0:d0:44:17:83:4b:77:c0:66:28:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Jul 10 15:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8be83ffd97e713e7a288b14fb8df63598c6e8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:13:bd:be:69:fa:ed:38:65:30:fd:f1:9b:
3b:b8:40:20:f4:9a:05:77:58:f5:0a:e1:d6:b2:05:
bd:c4:4d:c5:2a:77:2f:8e:5a:8a:2c:01:48:ef:3d:
2f:f3:60:f9:c7:ef:9c:ba:49:6c:1e:9c:c8:7b:a3:
10:09:d1:a4:2a:35:3c:61:93:5f:7f:a5:6e:05:c5:
1f:23:2a:99:ef:de:5c:6d:bb:2a:3f:d7:49:82:3f:
57:1f:56:bd:67:45:6b:f6:f3:c3:7e:cc:d3:92:72:
9a:5e:75:00:6e:db:c6:c8:44:09:7e:b2:a2:aa:48:
fc:04:26:ed:8f:a9:95:7b:be:70:39:61:8b:2f:0e:
ed:da:64:81:69:cb:b4:ff:be:56:b0:6c:6e:21:89:
a5:83:03:d1:3c:2f:ef:62:0e:14:01:2a:81:b2:78:
12:7e:dc:04:f5:f2:b5:42:ad:49:cd:d6:73:8a:bc:
5f:71:64:a7:32:5f:5a:1f:62:46:8a:00:d5:13:c4:
80:e0:d2:2e:ca:c2:8d:32:4d:57:1e:a9:8a:15:b5:
ec:05:b6:4f:86:c3:a0:22:5d:b9:df:2b:96:79:a5:
3f:e1:0e:e4:5a:ac:26:a9:b0:fe:7f:76:c6:4b:5a:
16:35:e0:a7:03:f5:c2:04:f9:57:fd:c9:a1:48:ad:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:83:FF:D9:7E:71:3E:7A:28:8B:14:FB:8D:F6:35:98:C6:E8:F7
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/1-L6D_9l-cT56KIsU-432NZjG6Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.132.0/22
Signature Algorithm: sha256WithRSAEncryption
af:89:6d:66:ee:88:bb:50:5d:bf:09:37:48:b9:fd:03:89:d0:
f6:61:a1:56:58:76:07:18:ca:91:79:61:eb:38:12:60:b8:d9:
b9:40:0e:09:b7:00:b7:88:21:2f:02:fc:60:10:e9:38:97:6b:
41:22:c1:01:17:7d:d5:23:e8:be:bb:3c:c2:84:3d:02:e6:59:
7d:97:f8:c6:af:d6:67:9f:b2:c7:b8:9e:72:a3:af:96:ea:d7:
9c:a2:24:e1:84:de:21:ab:4d:9f:7b:5f:52:74:c7:02:14:32:
1a:2f:9a:18:4d:5e:ea:21:23:8e:db:6c:27:aa:62:08:1b:2c:
05:a3:89:90:27:26:0a:2e:42:9f:f2:4d:8d:2e:5b:a5:8d:fe:
36:6f:f2:b7:68:85:07:18:02:5f:33:f6:82:60:9b:ba:a2:7a:
78:b0:34:16:ac:e4:9e:59:f5:32:41:90:93:cf:71:0d:10:e5:
a8:5a:3b:05:13:cc:f7:5a:aa:03:a0:2b:b8:d0:ed:ac:0c:2b:
58:16:12:13:70:4f:82:09:d4:72:e3:72:a4:13:0d:e8:59:cb:
08:9f:cd:01:0b:3c:e3:66:8f:0b:77:bf:3c:46:f1:7b:98:73:
e7:04:86:ea:78:55:86:76:36:c6:e8:13:19:64:03:12:4e:5b:
f7:87:2b:41
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYlAYzbg8NBEF4NLd8BmKK71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDUwNjQ1ZDY5Y2U3ODFlNDkwYzBmM2M0OTk1ZWU2ZDRl
NjA3OGIwHhcNMjMwNzEwMTUxOTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGJlODNmZmQ5N2U3MTNlN2EyODhiMTRmYjhkZjYzNTk4YzZlOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYgTvb5p+u04ZTD98Zs7uEAg9JoF
d1j1CuHWsgW9xE3FKncvjlqKLAFI7z0v82D5x++cuklsHpzIe6MQCdGkKjU8YZNf
f6VuBcUfIyqZ795cbbsqP9dJgj9XH1a9Z0Vr9vPDfszTknKaXnUAbtvGyEQJfrKi
qkj8BCbtj6mVe75wOWGLLw7t2mSBacu0/75WsGxuIYmlgwPRPC/vYg4UASqBsngS
ftwE9fK1Qq1JzdZzirxfcWSnMl9aH2JGigDVE8SA4NIuysKNMk1XHqmKFbXsBbZP
hsOgIl253yuWeaU/4Q7kWqwmqbD+f3bGS1oWNeCnA/XCBPlX/cmhSK3jQwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPi+g//ZfnE+eiiLFPuN9jWYxuj3MB8GA1UdIwQY
MBaAFB4FBkXWnOeB5JDA88SZXubU5geLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEt
MjI3YTg2YzQ3MmNlLzEvMS1MNkRfOWwtY1Q1NktJc1UtNDMyTlpqRzZQYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWIvY2IzYWYwLTA1NmQtNDI3Ny1hNmRhLTIyN2E4NmM0NzJj
ZS8xL0hnVUdSZGFjNTRIa2tNRHp4SmxlNXRUbUI0cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlx3hDAN
BgkqhkiG9w0BAQsFAAOCAQEAr4ltZu6Iu1Bdvwk3SLn9A4nQ9mGhVlh2BxjKkXlh
6zgSYLjZuUAOCbcAt4ghLwL8YBDpOJdrQSLBARd91SPovrs8woQ9AuZZfZf4xq/W
Z5+yx7iecqOvlurXnKIk4YTeIatNn3tfUnTHAhQyGi+aGE1e6iEjjttsJ6piCBss
BaOJkCcmCi5Cn/JNjS5bpY3+Nm/yt2iFBxgCXzP2gmCbuqJ6eLA0Fqzknln1MkGQ
k89xDRDlqFo7BRPM91qqA6AruNDtrAwrWBYSE3BPggnUcuNypBMN6FnLCJ/NAQs8
42aPC3e/PEbxe5hz5wSG6nhVhnY2xugTGWQDEk5b94crQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org