Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/wF6TUIJc7iYrdBOsonQEcsesJRM.roa
File: wF6TUIJc7iYrdBOsonQEcsesJRM.roa (raw, json)
Hash identifier: WE/TmpzNBL3Ky3qK6mWkAkVl9e3Yy9I62+Ty4Gr89R4=
Subject key identifier: C0:5E:93:50:82:5C:EE:26:2B:74:13:AC:A2:74:04:72:C7:AC:25:13
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0189C1643B1CB9A9A1528F9B707DA093B752
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/wF6TUIJc7iYrdBOsonQEcsesJRM.roa
Signing time: Fri 04 Aug 2023 16:31:58 +0000
ROA not before: Fri 04 Aug 2023 16:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51055
IP address blocks: 92.243.72.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:64:3b:1c:b9:a9:a1:52:8f:9b:70:7d:a0:93:b7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Aug 4 16:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c05e9350825cee262b7413aca2740472c7ac2513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:0d:20:44:34:ea:15:8d:54:97:d5:c2:40:
34:a2:7b:80:f0:bd:84:2b:05:80:d2:e0:df:b8:73:
3b:86:89:b4:1a:02:e6:23:70:49:ec:b9:97:d1:30:
89:d8:d5:eb:4b:ff:a6:fa:2b:7c:c3:40:0a:dd:aa:
41:5f:12:a4:7f:f0:97:1e:8e:5c:ed:f2:df:3b:47:
6b:71:82:44:fc:08:28:27:0c:03:b0:f0:3e:5f:86:
6a:a7:cb:ef:e8:7c:9d:84:c0:07:5e:d3:27:4f:de:
bc:82:38:a3:a4:c8:a2:34:08:22:6a:c7:ce:27:4d:
d4:4a:64:74:e0:5a:a9:2f:5a:17:cf:06:6e:83:a2:
8c:d5:94:b5:2e:c6:12:64:27:4a:3f:b2:41:68:2f:
c9:ca:fb:f7:f2:ef:a4:41:dc:7a:b9:75:eb:38:8b:
a3:2e:d6:13:92:b0:8d:03:8e:43:76:c0:c6:06:46:
51:ba:57:41:96:0b:8b:dc:29:5d:a6:e6:a5:f2:a1:
5b:bd:50:8f:d9:81:cd:cd:57:0f:fd:9a:b0:bc:63:
69:54:49:51:53:dc:27:da:f3:3a:18:05:13:98:92:
78:2c:08:db:fc:75:61:42:74:7d:62:74:82:f2:0c:
0d:2f:04:90:f8:45:39:82:9d:dc:57:0a:ed:6a:7e:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:93:50:82:5C:EE:26:2B:74:13:AC:A2:74:04:72:C7:AC:25:13
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/wF6TUIJc7iYrdBOsonQEcsesJRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.72.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:a9:9c:0d:4a:0e:95:6d:83:a6:f1:65:a7:24:b9:9e:c3:68:
22:c3:8c:4f:1d:59:e7:18:f1:54:00:a1:3a:5d:c9:5b:8f:9e:
3f:66:71:22:5c:ee:e9:a8:31:73:fa:a2:5a:70:44:e9:d6:4f:
8f:95:1a:dc:ac:1a:ff:6d:b2:1f:d3:04:eb:20:22:df:5c:12:
92:1e:83:6a:6a:b6:ed:88:15:f5:da:47:04:b4:a2:74:6a:2c:
1f:65:cc:fb:fa:89:e9:2e:2a:c6:ca:63:4e:f5:2b:03:54:24:
5e:14:10:4d:3e:53:bb:41:c4:23:cc:2b:07:97:d8:83:17:65:
4a:fb:03:12:a5:c7:71:aa:fc:24:2e:c5:89:87:20:52:17:84:
58:7e:8f:4a:eb:1e:94:52:2e:e2:ec:98:ce:a5:7c:6b:77:0c:
87:71:7a:4f:15:38:e2:e2:f6:3d:1c:86:e9:08:09:a5:41:3c:
ca:46:d8:62:fe:0b:ea:8c:1d:54:d4:3e:2f:01:aa:8e:f0:9d:
63:ff:f2:f2:e0:a5:07:25:03:26:81:80:f7:38:18:ad:02:7d:
9a:cc:b5:2e:bf:1f:e2:b1:e9:fa:f6:d5:5b:43:34:90:6c:84:
48:54:12:a9:7a:b5:81:27:43:28:01:9b:37:dc:b9:29:2c:fd:
6f:25:48:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnBZDscuamhUo+bcH2gk7dSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4
ZTI3ZTkwHhcNMjMwODA0MTYzMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDVlOTM1MDgyNWNlZTI2MmI3NDEzYWNhMjc0MDQ3MmM3YWMyNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfoNIEQ06hWNVJfVwkA0onuA8L2E
KwWA0uDfuHM7hom0GgLmI3BJ7LmX0TCJ2NXrS/+m+it8w0AK3apBXxKkf/CXHo5c
7fLfO0drcYJE/AgoJwwDsPA+X4Zqp8vv6HydhMAHXtMnT968gjijpMiiNAgiasfO
J03USmR04FqpL1oXzwZug6KM1ZS1LsYSZCdKP7JBaC/Jyvv38u+kQdx6uXXrOIuj
LtYTkrCNA45DdsDGBkZRuldBlguL3Cldpual8qFbvVCP2YHNzVcP/ZqwvGNpVElR
U9wn2vM6GAUTmJJ4LAjb/HVhQnR9YnSC8gwNLwSQ+EU5gp3cVwrtan41BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBek1CCXO4mK3QTrKJ0BHLHrCUTMB8GA1UdIwQY
MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt
ZjM4MTBiZDcwMzc2LzEvd0Y2VFVJSmM3aVlyZEJPc29uUUVjc2VzSlJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2
LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXPNIMA0G
CSqGSIb3DQEBCwUAA4IBAQDUqZwNSg6VbYOm8WWnJLmew2giw4xPHVnnGPFUAKE6
Xclbj54/ZnEiXO7pqDFz+qJacETp1k+PlRrcrBr/bbIf0wTrICLfXBKSHoNqarbt
iBX12kcEtKJ0aiwfZcz7+onpLirGymNO9SsDVCReFBBNPlO7QcQjzCsHl9iDF2VK
+wMSpcdxqvwkLsWJhyBSF4RYfo9K6x6UUi7i7JjOpXxrdwyHcXpPFTji4vY9HIbp
CAmlQTzKRthi/gvqjB1U1D4vAaqO8J1j//Ly4KUHJQMmgYD3OBitAn2azLUuvx/i
sen69tVbQzSQbIRIVBKperWBJ0MoAZs33LkpLP1vJUiW
-----END CERTIFICATE-----
Generated at Fri Aug 4 17:16:51 2023 by rpki-client on console-fra.rpki-client.org