Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa
File: rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa (raw, json)
Hash identifier: +oa6KJ9P/qYI4opzD1MRy51q8fABX2NPaw0TFT5v0XM=
Subject key identifier: AD:7E:B0:EC:76:BB:40:4A:FA:C9:3D:8F:02:85:0A:F1:77:45:A4:E7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4BE2DA9A2111A000C832B83C616B0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28546
IP address blocks: 85.92.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 17 Jan 2023 17:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:be:2d:a9:a2:11:1a:00:0c:83:2b:83:c6:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad7eb0ec76bb404afac93d8f02850af17745a4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:87:73:22:9f:ce:75:24:47:83:04:05:c9:
28:65:43:12:30:4a:cf:13:b2:9e:0c:4b:c5:02:44:
3d:be:c8:cd:71:d5:68:50:79:4e:94:9c:7d:bc:30:
04:94:75:05:4c:76:c8:9b:25:38:88:21:dd:c4:b7:
26:8d:25:e6:71:47:35:78:f8:ae:59:7d:2d:78:70:
86:f1:8a:c7:40:05:39:89:06:a6:de:e1:d3:63:4e:
c4:97:48:b8:7d:e6:72:a5:1a:c5:73:b3:ab:81:5f:
dc:34:5d:cd:ac:18:1e:ef:ff:d9:c9:08:e6:81:9f:
11:56:bf:5e:0c:ba:7d:e5:db:8a:ad:c4:40:08:54:
22:2a:2b:01:d3:75:37:6f:b1:4e:01:de:7c:aa:b5:
51:9e:3a:79:68:00:91:17:61:73:c3:91:c9:67:12:
d5:67:64:3a:24:5e:c1:80:c9:cd:87:fa:bb:8c:14:
c8:e9:f5:67:dc:6a:43:40:b1:9b:5a:11:d9:80:c3:
a2:a2:17:9c:81:74:1c:89:49:1d:06:17:b3:e0:2b:
03:5e:8a:63:3c:a8:b3:aa:3d:52:28:a4:85:cb:7b:
c6:fc:f8:0b:ad:06:ca:23:7e:b0:96:24:47:82:18:
e4:0d:44:60:aa:e9:b3:65:00:bb:26:04:b9:7e:74:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:B0:EC:76:BB:40:4A:FA:C9:3D:8F:02:85:0A:F1:77:45:A4:E7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:9f:7d:81:cc:a7:48:ad:ef:d7:a4:ca:aa:54:d8:d6:9b:16:
cb:06:68:b1:d7:88:27:46:2f:2a:06:e1:12:a2:ea:8c:79:4e:
ad:7f:33:e9:de:8d:3e:d4:88:0e:ba:ae:2b:84:5a:c0:b7:cf:
3c:f6:47:1d:63:99:9b:56:05:e8:71:cb:17:c1:77:14:72:4b:
bb:95:22:64:4d:f1:a0:eb:95:17:86:77:b8:04:94:ef:e2:90:
cf:6d:30:64:c5:7a:6a:2b:9f:be:73:7b:a2:4b:d6:f0:3d:f6:
ec:09:7f:88:8e:ff:be:79:4e:81:6a:c7:73:ea:51:78:8a:2e:
4a:29:62:62:00:87:ab:49:25:01:91:95:2a:d2:e4:47:a9:16:
5b:cc:33:89:46:e9:dc:23:83:92:fe:c6:a1:f1:f2:5d:8f:95:
b0:99:0a:76:cb:5f:54:d9:16:3c:b4:9c:f4:bc:ce:33:50:8d:
52:56:c2:24:03:c5:f1:02:73:f2:9d:d8:ad:ec:a4:27:77:c0:
f4:a9:f4:6b:44:6b:a7:67:f6:0b:8d:1e:2d:95:da:78:68:3a:
b6:43:cc:c2:95:22:2f:cc:c3:e0:88:b3:30:9a:3d:ac:11:ff:
f2:f2:66:21:38:f9:1e:6c:16:80:eb:6a:44:a6:11:77:1a:6e:
1e:21:c5:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1L4tqaIRGgAMgyuDxhawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTAxMTkzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDdlYjBlYzc2YmI0MDRhZmFjOTNkOGYwMjg1MGFmMTc3NDVhNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEmHcyKfznUkR4MEBckoZUMSMErP
E7KeDEvFAkQ9vsjNcdVoUHlOlJx9vDAElHUFTHbImyU4iCHdxLcmjSXmcUc1ePiu
WX0teHCG8YrHQAU5iQam3uHTY07El0i4feZypRrFc7OrgV/cNF3NrBge7//ZyQjm
gZ8RVr9eDLp95duKrcRACFQiKisB03U3b7FOAd58qrVRnjp5aACRF2Fzw5HJZxLV
Z2Q6JF7BgMnNh/q7jBTI6fVn3GpDQLGbWhHZgMOiohecgXQciUkdBhez4CsDXopj
PKizqj1SKKSFy3vG/PgLrQbKI36wliRHghjkDURgqumzZQC7JgS5fnQu/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1+sOx2u0BK+sk9jwKFCvF3RaTnMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvclg2dzdIYTdRRXI2eVQyUEFvVUs4WGRGcE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVVx8MA0G
CSqGSIb3DQEBCwUAA4IBAQB9n32BzKdIre/XpMqqVNjWmxbLBmix14gnRi8qBuES
ouqMeU6tfzPp3o0+1IgOuq4rhFrAt8889kcdY5mbVgXoccsXwXcUcku7lSJkTfGg
65UXhne4BJTv4pDPbTBkxXpqK5++c3uiS9bwPfbsCX+Ijv++eU6Basdz6lF4ii5K
KWJiAIerSSUBkZUq0uRHqRZbzDOJRuncI4OS/sah8fJdj5WwmQp2y19U2RY8tJz0
vM4zUI1SVsIkA8XxAnPyndit7KQnd8D0qfRrRGunZ/YLjR4tldp4aDq2Q8zClSIv
zMPgiLMwmj2sEf/y8mYhOPkebBaA62pEphF3Gm4eIcXW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:35 2024 by rpki-client on console-ams.rpki-client.org