Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/7Tq52ilTcJePrQze-t9H7yhLljE.roa
File: 7Tq52ilTcJePrQze-t9H7yhLljE.roa (raw, json)
Hash identifier: bDq9fOLd8A7Sq5c+9jqYQFOF29+McBaOxsnFGTybj3w=
Subject key identifier: ED:3A:B9:DA:29:53:70:97:8F:AD:0C:DE:FA:DF:47:EF:28:4B:96:31
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 018CC793E9CE3A7E3125BA694278427F7A95
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/7Tq52ilTcJePrQze-t9H7yhLljE.roa
Signing time: Tue 02 Jan 2024 00:30:08 +0000
ROA not before: Tue 02 Jan 2024 00:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 92.118.22.0/24 maxlen: 24
92.118.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 08:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e9:ce:3a:7e:31:25:ba:69:42:78:42:7f:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jan 2 00:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed3ab9da295370978fad0cdefadf47ef284b9631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:6f:09:39:a1:39:1b:c3:5a:10:f3:72:8a:
c5:d3:d1:8d:93:e6:55:01:70:6e:35:d7:83:a2:d4:
5a:af:79:ef:06:b1:bc:aa:e5:bf:c7:66:7d:37:d5:
44:1f:9e:30:74:38:5d:c8:da:98:e6:cd:0b:13:42:
1e:bf:bc:83:db:56:8e:fa:5b:a3:ab:06:b2:40:ca:
59:9a:3f:05:93:57:f9:3d:1c:ad:37:34:43:68:e8:
d8:3e:3b:77:f3:57:0a:62:2f:a6:2a:51:35:82:df:
16:fd:01:96:ad:50:2a:49:91:c9:a3:ac:bf:58:3c:
e8:4b:cc:0e:3d:e1:45:42:ae:25:af:d3:a4:10:ba:
5c:6b:6f:52:c1:47:0d:aa:c2:d4:81:b1:cd:2d:07:
46:31:62:32:cb:e5:27:61:3e:0e:c0:9c:0b:a8:6e:
bd:d7:bd:43:76:6a:56:a2:33:d4:15:0f:a9:aa:1d:
66:00:fd:85:48:c4:3a:7d:78:c9:fc:7d:01:91:bb:
b1:b1:4c:40:b6:d4:4a:34:04:b0:a7:b5:bd:7a:f0:
13:7e:4f:cf:b8:57:34:6d:eb:b0:51:5e:c6:83:92:
9a:19:5d:1d:58:fb:b2:dc:63:36:13:89:88:39:5e:
04:a2:6d:b7:4e:70:01:81:0f:fe:5b:7c:89:b3:c2:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:B9:DA:29:53:70:97:8F:AD:0C:DE:FA:DF:47:EF:28:4B:96:31
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/7Tq52ilTcJePrQze-t9H7yhLljE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.22.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:a0:1c:75:d9:ff:bb:a1:0d:b9:67:8e:c6:76:e5:57:14:7d:
e7:36:7f:b3:5d:82:41:e3:3a:6a:58:8b:32:09:8d:73:74:02:
1f:ed:08:ad:de:ef:d8:ae:34:3e:65:7e:06:d6:a9:09:12:b4:
ca:8e:9f:d4:fe:1c:9c:39:d5:7e:86:93:ba:75:40:7c:33:8b:
96:a2:d0:14:3a:c6:97:fb:83:4d:a5:28:e9:0a:10:91:fb:55:
d9:1e:d4:4f:30:f0:30:1f:48:06:39:1c:5d:62:b7:cb:77:7f:
2a:71:50:1c:91:c2:17:40:ed:60:38:4c:aa:2e:07:68:09:d1:
46:23:91:34:33:bd:f5:29:74:5e:ec:58:c7:cc:7d:33:99:a7:
68:cc:4b:7b:03:40:7e:cb:cd:46:51:dd:cc:15:fd:a8:8e:53:
12:96:8a:e3:a9:08:8f:40:a6:88:f1:29:97:e7:be:83:e8:b4:
15:7c:ef:93:8b:65:a6:dd:27:f1:aa:08:51:50:61:7e:4d:5c:
43:45:bf:65:c4:cd:fc:7e:ea:09:fb:41:e3:2f:d3:5a:42:68:
89:68:ce:89:e8:89:86:50:ed:3f:39:32:3b:13:68:1e:23:0b:
d2:ab:97:19:c7:6b:ff:25:cb:d9:d3:9c:db:7f:bb:03:c5:2f:
6a:4c:16:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHk+nOOn4xJbppQnhCf3qVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I4YTcwZjkwOWFlM2UxZmMxZGJkNmJkYzQyNWUwOGVl
YzgxYjkwHhcNMjQwMTAyMDAzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDNhYjlkYTI5NTM3MDk3OGZhZDBjZGVmYWRmNDdlZjI4NGI5NjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY5vCTmhORvDWhDzcorF09GNk+ZV
AXBuNdeDotRar3nvBrG8quW/x2Z9N9VEH54wdDhdyNqY5s0LE0Iev7yD21aO+luj
qwayQMpZmj8Fk1f5PRytNzRDaOjYPjt381cKYi+mKlE1gt8W/QGWrVAqSZHJo6y/
WDzoS8wOPeFFQq4lr9OkELpca29SwUcNqsLUgbHNLQdGMWIyy+UnYT4OwJwLqG69
171DdmpWojPUFQ+pqh1mAP2FSMQ6fXjJ/H0BkbuxsUxAttRKNASwp7W9evATfk/P
uFc0beuwUV7Gg5KaGV0dWPuy3GM2E4mIOV4Eom23TnABgQ/+W3yJs8JmFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO06udopU3CXj60M3vrfR+8oS5YxMB8GA1UdIwQY
MBaAFBrLinD5Ca4+H8Hb1r3EJeCO7IG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYt
NjBkZTIyNGNmYTRiLzEvN1RxNTJpbFRjSmVQclF6ZS10OUg3eWhMbGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYtNjBkZTIyNGNmYTRi
LzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHYWMA0G
CSqGSIb3DQEBCwUAA4IBAQBboBx12f+7oQ25Z47GduVXFH3nNn+zXYJB4zpqWIsy
CY1zdAIf7Qit3u/YrjQ+ZX4G1qkJErTKjp/U/hycOdV+hpO6dUB8M4uWotAUOsaX
+4NNpSjpChCR+1XZHtRPMPAwH0gGORxdYrfLd38qcVAckcIXQO1gOEyqLgdoCdFG
I5E0M731KXRe7FjHzH0zmadozEt7A0B+y81GUd3MFf2ojlMSlorjqQiPQKaI8SmX
576D6LQVfO+Ti2Wm3SfxqghRUGF+TVxDRb9lxM38fuoJ+0HjL9NaQmiJaM6J6ImG
UO0/OTI7E2geIwvSq5cZx2v/JcvZ05zbf7sDxS9qTBb8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:15 2024 by rpki-client on console-ams.rpki-client.org