Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/kB85rk0JX1nUqV1QvoxTFD1OCBg.roa
File: kB85rk0JX1nUqV1QvoxTFD1OCBg.roa (raw, json)
Hash identifier: pJLEFuLPJ0eGshAgVBgr3y7L51Jp5ZHlMED6gmS6fnk=
Subject key identifier: 90:1F:39:AE:4D:09:5F:59:D4:A9:5D:50:BE:8C:53:14:3D:4E:08:18
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139B2A4717289F836D3E235C97D4AD4
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/kB85rk0JX1nUqV1QvoxTFD1OCBg.roa
Signing time: Mon 02 Jan 2023 06:44:44 +0000
ROA not before: Mon 02 Jan 2023 06:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210811
IP address blocks: 92.119.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b2:a4:71:72:89:f8:36:d3:e2:35:c9:7d:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=901f39ae4d095f59d4a95d50be8c53143d4e0818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:d0:bc:e0:a8:96:12:c9:e5:4a:ae:b9:c3:
bc:87:e1:b4:8d:a2:9a:ae:c7:6d:09:7b:4f:9e:c8:
85:36:51:49:03:fc:50:d3:3e:49:e3:e5:66:2d:3c:
78:6a:4b:65:64:a8:b1:48:8e:57:59:10:fe:28:93:
65:30:4a:fc:18:a2:82:b3:07:4b:a7:9f:2b:38:71:
8f:ff:45:de:78:3e:6c:fb:5f:64:20:63:29:9a:a9:
90:8e:b5:a3:e1:96:47:f4:f5:aa:df:50:94:15:59:
39:3b:7b:4e:4a:9c:09:5f:dc:b9:74:b1:c8:a7:7f:
a5:85:e7:f6:2a:db:b0:d3:a9:b3:e3:5f:a7:f6:e1:
a9:fb:74:79:2e:f0:9e:48:20:69:d2:d0:b4:dc:5f:
79:37:1a:60:a6:19:a1:ae:d7:e7:cd:43:f6:57:49:
f6:60:b9:a9:1a:d1:2c:2c:c9:8c:f8:7c:8a:c5:60:
1a:d7:40:8b:95:79:52:6d:a7:84:6b:ff:f9:ca:5d:
29:39:83:b6:51:bd:3c:c9:90:6d:01:f5:f9:af:8b:
1c:ba:df:2f:d6:81:a3:2a:69:0c:97:53:f4:1a:c0:
92:c4:16:60:e6:26:ae:f4:d9:ff:04:4b:77:9e:77:
5f:ae:70:cc:78:95:29:7e:5e:3c:e8:d4:ed:51:3f:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:39:AE:4D:09:5F:59:D4:A9:5D:50:BE:8C:53:14:3D:4E:08:18
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/kB85rk0JX1nUqV1QvoxTFD1OCBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.184.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a5:b8:84:b0:64:a8:02:94:16:a8:19:79:ed:4f:58:f1:a5:
4b:3a:75:03:fe:b5:cf:00:b4:26:af:58:ea:82:a7:89:ef:85:
5f:2f:9b:9a:1c:54:1d:8b:7c:37:e2:20:47:be:40:b7:f6:70:
7d:68:66:18:72:d3:2f:25:36:41:17:b1:d9:b9:40:0f:30:aa:
64:e9:93:45:d2:a3:e3:66:1a:18:a0:55:ae:54:51:24:06:25:
61:a7:54:af:09:ca:4e:d6:7a:02:c8:ab:84:4d:9a:52:85:ea:
2f:82:ec:a9:4b:0f:98:ff:37:fa:f5:1c:87:93:55:44:9d:70:
5b:cc:3c:f5:ee:0f:ed:7f:f5:fb:b1:bb:b7:81:85:e5:81:84:
0f:77:32:02:64:c7:e6:9c:56:0c:dd:6f:f9:05:68:01:3f:35:
c2:ac:55:7c:77:c4:ad:52:91:cd:a5:ff:a3:c0:b3:83:02:79:
03:09:3d:45:54:8c:4e:aa:23:9e:32:b0:0e:96:26:fb:1f:e0:
22:57:1e:62:5c:0a:07:0b:2c:62:d8:09:0e:ae:b9:3a:e7:00:
05:22:73:d4:f5:11:79:9a:6c:fd:2f:9a:bc:a6:79:5a:bd:dc:
e5:1d:e2:96:bc:24:51:aa:8f:17:8f:63:b3:ea:be:a5:fe:f8:
32:a1:ad:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxObKkcXKJ+DbT4jXJfUrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjMwMTAyMDY0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDFmMzlhZTRkMDk1ZjU5ZDRhOTVkNTBiZThjNTMxNDNkNGUwODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXXQvOColhLJ5UquucO8h+G0jaKa
rsdtCXtPnsiFNlFJA/xQ0z5J4+VmLTx4aktlZKixSI5XWRD+KJNlMEr8GKKCswdL
p58rOHGP/0XeeD5s+19kIGMpmqmQjrWj4ZZH9PWq31CUFVk5O3tOSpwJX9y5dLHI
p3+lhef2Ktuw06mz41+n9uGp+3R5LvCeSCBp0tC03F95NxpgphmhrtfnzUP2V0n2
YLmpGtEsLMmM+HyKxWAa10CLlXlSbaeEa//5yl0pOYO2Ub08yZBtAfX5r4scut8v
1oGjKmkMl1P0GsCSxBZg5iau9Nn/BEt3nndfrnDMeJUpfl486NTtUT+mOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJAfOa5NCV9Z1KldUL6MUxQ9TggYMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEva0I4NXJrMEpYMW5VcVYxUXZveFRGRDFPQ0JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHe4MA0G
CSqGSIb3DQEBCwUAA4IBAQAVpbiEsGSoApQWqBl57U9Y8aVLOnUD/rXPALQmr1jq
gqeJ74VfL5uaHFQdi3w34iBHvkC39nB9aGYYctMvJTZBF7HZuUAPMKpk6ZNF0qPj
ZhoYoFWuVFEkBiVhp1SvCcpO1noCyKuETZpSheovguypSw+Y/zf69RyHk1VEnXBb
zDz17g/tf/X7sbu3gYXlgYQPdzICZMfmnFYM3W/5BWgBPzXCrFV8d8StUpHNpf+j
wLODAnkDCT1FVIxOqiOeMrAOlib7H+AiVx5iXAoHCyxi2AkOrrk65wAFInPU9RF5
mmz9L5q8pnlavdzlHeKWvCRRqo8Xj2Oz6r6l/vgyoa2j
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:00 2024 by rpki-client on console-fra.rpki-client.org