Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/92y11CqC8QFn4mmsAyPTEwcZ5Wg.roa
File: 92y11CqC8QFn4mmsAyPTEwcZ5Wg.roa (raw, json)
Hash identifier: v1rYrnlY2L2nfu86GbxDLFkbPV03Gikkrf6SdfeUnpw=
Subject key identifier: F7:6C:B5:D4:2A:82:F1:01:67:E2:69:AC:03:23:D3:13:07:19:E5:68
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 018C59ACF62FE13FE0AFDB6C4D6A1F03BA08
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/92y11CqC8QFn4mmsAyPTEwcZ5Wg.roa
Signing time: Mon 11 Dec 2023 16:19:16 +0000
ROA not before: Mon 11 Dec 2023 16:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58221
IP address blocks: 91.239.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:ac:f6:2f:e1:3f:e0:af:db:6c:4d:6a:1f:03:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Dec 11 16:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76cb5d42a82f10167e269ac0323d3130719e568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:ef:94:c3:09:bb:26:78:e9:b3:fd:27:f5:
e4:9b:e9:67:05:5c:6e:ee:a0:d5:74:2b:7d:9f:6e:
97:11:e4:05:55:b4:53:fd:1d:99:ae:d7:98:26:55:
4d:34:a1:74:f7:8b:55:35:6e:94:10:4e:71:d8:cd:
a9:4d:c3:5f:33:91:d2:74:05:1d:0c:75:46:21:f2:
21:0c:f5:8e:85:32:68:0d:ea:e2:e6:33:0d:0f:fe:
81:8f:d8:ed:19:b3:bd:9c:44:cc:c5:c5:b1:02:62:
71:a8:cd:72:8f:02:46:96:74:00:28:22:22:f1:b2:
f0:bb:ea:3c:51:69:66:4f:63:4e:8d:59:79:1c:c6:
a5:45:79:0d:6e:35:2f:75:82:5c:08:48:2f:05:bd:
4c:6c:89:08:7c:fa:ee:e1:91:19:e8:22:c9:00:30:
0a:23:8f:ce:0a:5e:bb:10:d9:7a:9e:5a:58:db:44:
a7:a5:e6:5b:b3:91:99:21:f5:06:cd:4f:86:a9:8e:
33:c9:68:c9:82:bf:bd:fd:a9:45:d5:b5:10:25:80:
2d:39:50:16:a4:dc:17:fb:10:00:3c:cc:a2:28:e4:
de:64:c6:e7:c4:aa:c8:9e:32:a1:3d:eb:7e:2c:cf:
e6:03:2b:31:b3:d8:9b:5b:53:1c:f5:53:fc:7a:e0:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:B5:D4:2A:82:F1:01:67:E2:69:AC:03:23:D3:13:07:19:E5:68
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/92y11CqC8QFn4mmsAyPTEwcZ5Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:e3:6b:81:72:fd:1c:39:d6:bf:b6:74:7f:4e:2c:2c:ea:60:
f3:34:8e:82:71:01:93:1e:46:a9:02:2f:1b:76:7b:09:a0:ae:
a6:41:16:0c:23:79:ab:f1:d6:1f:38:74:11:d3:53:7c:74:bb:
bb:b9:c4:a1:e5:9b:74:96:1c:f1:49:dc:91:20:36:09:67:3c:
f6:d9:84:ed:ae:3f:11:c3:6f:97:46:d1:1e:5e:b4:49:6d:6c:
94:92:a8:d7:40:98:31:df:41:e3:47:93:ed:a0:92:1a:94:0e:
33:fc:de:fb:2f:33:19:96:ed:ba:66:e2:ca:6e:31:73:ad:f6:
05:91:80:95:8c:0f:5b:8a:7c:b2:d1:7d:76:1b:a4:6e:b6:4a:
ab:87:dc:00:ab:38:ff:86:90:e3:19:cf:44:1b:8d:d3:44:50:
2e:14:8e:56:41:67:53:94:3a:5d:83:d2:ca:10:ee:85:cd:45:
58:b2:c7:ef:7b:e2:cc:40:5d:fa:f1:13:41:55:2d:23:ad:47:
fd:b4:4c:b0:5c:84:65:a7:ad:23:c6:ed:77:ce:ac:13:9b:1b:
2a:6f:33:8e:33:c2:0a:b6:4f:a1:92:13:73:77:70:94:4d:1b:
a5:97:73:d3:ab:1d:1b:c9:cf:1a:8d:dc:9d:66:7d:28:16:81:
74:2c:39:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxZrPYv4T/gr9tsTWofA7oIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTVjOWM5YTdmMTlhOWFkNzE3ZTRkYWE1MzBjODVjZjk5
YWI5NzUwHhcNMjMxMjExMTYxOTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzZjYjVkNDJhODJmMTAxNjdlMjY5YWMwMzIzZDMxMzA3MTllNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl3vlMMJuyZ46bP9J/Xkm+lnBVxu
7qDVdCt9n26XEeQFVbRT/R2ZrteYJlVNNKF094tVNW6UEE5x2M2pTcNfM5HSdAUd
DHVGIfIhDPWOhTJoDeri5jMND/6Bj9jtGbO9nETMxcWxAmJxqM1yjwJGlnQAKCIi
8bLwu+o8UWlmT2NOjVl5HMalRXkNbjUvdYJcCEgvBb1MbIkIfPru4ZEZ6CLJADAK
I4/OCl67ENl6nlpY20SnpeZbs5GZIfUGzU+GqY4zyWjJgr+9/alF1bUQJYAtOVAW
pNwX+xAAPMyiKOTeZMbnxKrInjKhPet+LM/mAysxs9ibW1Mc9VP8euDrGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdstdQqgvEBZ+JprAMj0xMHGeVoMB8GA1UdIwQY
MBaAFA+Vycmn8Zqa1xfk2qUwyFz5mrl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTIt
YzkzNjU5Zjc2NzM3LzEvOTJ5MTFDcUM4UUZuNG1tc0F5UFRFd2NaNVdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTItYzkzNjU5Zjc2NzM3
LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+9QMA0G
CSqGSIb3DQEBCwUAA4IBAQBr42uBcv0cOda/tnR/Tiws6mDzNI6CcQGTHkapAi8b
dnsJoK6mQRYMI3mr8dYfOHQR01N8dLu7ucSh5Zt0lhzxSdyRIDYJZzz22YTtrj8R
w2+XRtEeXrRJbWyUkqjXQJgx30HjR5PtoJIalA4z/N77LzMZlu26ZuLKbjFzrfYF
kYCVjA9binyy0X12G6Rutkqrh9wAqzj/hpDjGc9EG43TRFAuFI5WQWdTlDpdg9LK
EO6FzUVYssfve+LMQF368RNBVS0jrUf9tEywXIRlp60jxu13zqwTmxsqbzOOM8IK
tk+hkhNzd3CUTRull3PTqx0byc8ajdydZn0oFoF0LDns
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:52 2024 by rpki-client on console-ams.rpki-client.org