Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/80RgG3ZpikW2tkoxXpFjIvkagvU.roa
File: 80RgG3ZpikW2tkoxXpFjIvkagvU.roa (raw, json)
Hash identifier: 9mbIvjD00n4AWtjx6xYrHe2DORqXU0oyD5psL+KcAiA=
Subject key identifier: F3:44:60:1B:76:69:8A:45:B6:B6:4A:31:5E:91:63:22:F9:1A:82:F5
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 018572D5C0A6DA243ABB904E35A0682C64D1
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/80RgG3ZpikW2tkoxXpFjIvkagvU.roa
Signing time: Mon 02 Jan 2023 14:14:49 +0000
ROA not before: Mon 02 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44292
IP address blocks: 92.42.169.0/24 maxlen: 24
92.42.172.0/24 maxlen: 24
92.42.170.0/24 maxlen: 24
92.42.171.0/24 maxlen: 24
92.42.168.0/24 maxlen: 24
92.42.173.0/24 maxlen: 24
92.42.174.0/24 maxlen: 24
92.42.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c0:a6:da:24:3a:bb:90:4e:35:a0:68:2c:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Jan 2 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f344601b76698a45b6b64a315e916322f91a82f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:36:f2:cd:42:c9:fa:1b:e0:19:1f:dc:e3:70:
89:50:88:22:b2:95:ef:59:85:41:f4:c0:7d:40:09:
af:bc:37:64:ce:6b:34:71:08:cb:8b:97:c2:59:26:
b4:74:56:ed:b5:44:00:bc:1a:6e:d7:81:bd:1d:59:
64:7e:65:a1:88:12:93:75:b1:94:31:0f:ce:bf:70:
fe:b7:01:8c:84:e1:aa:a4:be:5e:7f:9f:4a:a9:a4:
98:8c:c1:f7:7c:8b:a5:34:4a:ce:45:2b:bb:8e:9e:
61:f7:64:df:f8:58:6d:98:17:12:43:74:68:24:90:
77:d4:be:65:e4:97:a8:9e:dc:92:cb:73:fd:c5:35:
36:f6:d8:66:6e:b7:62:02:e2:85:4f:b1:d5:3a:fa:
e3:b6:99:1b:38:bc:6c:2e:42:9c:7f:9f:17:2b:6d:
56:90:47:36:f9:23:bd:b5:3b:39:42:60:3f:8f:49:
d2:c6:a3:3f:07:f5:12:91:b0:69:07:89:69:9a:bb:
2e:e9:9e:eb:ef:93:f4:64:43:5d:ca:a4:30:7f:75:
8e:d8:fd:a0:52:16:9b:d6:87:16:5b:b2:44:f2:54:
2a:bc:a1:74:b7:06:08:cf:b4:82:89:5f:73:4c:e0:
c3:00:c9:57:a3:20:cb:86:d4:24:63:71:0f:06:54:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:60:1B:76:69:8A:45:B6:B6:4A:31:5E:91:63:22:F9:1A:82:F5
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/80RgG3ZpikW2tkoxXpFjIvkagvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.168.0/21
Signature Algorithm: sha256WithRSAEncryption
78:b8:f1:8d:b8:8a:74:eb:22:c1:d5:4a:cb:ea:21:c3:08:1d:
4b:f4:69:a1:d7:ee:d5:f0:c1:2b:f9:3a:07:e4:49:dc:1e:27:
8e:99:b4:c5:a6:2f:8e:a8:f1:d3:51:c5:81:9b:90:74:a8:5c:
45:8a:ce:8c:4f:84:de:1c:e2:1b:da:1c:86:af:03:03:15:f3:
0e:5a:5c:e6:32:ce:1c:52:51:95:03:8d:88:6e:4d:63:21:a7:
67:0b:b4:e8:30:bd:d6:42:53:11:61:8e:79:1b:db:80:8a:b0:
f5:c0:85:9c:86:af:8c:ff:c0:49:e9:0b:53:72:f4:0c:02:00:
0d:a6:3a:0a:7e:1f:8b:ca:93:49:ac:f7:68:bb:d5:2d:c5:d4:
b8:11:5a:1d:19:c2:c3:5d:ec:fe:8f:96:f8:55:b4:cd:52:38:
53:85:ed:39:1f:02:d9:49:1e:ea:97:97:c6:cf:a6:6f:00:a9:
39:62:d1:bb:c9:ef:48:84:bb:9b:7d:fb:50:db:a7:8b:67:9c:
c4:2b:fb:84:61:84:9e:c7:cc:fb:19:05:b3:ae:6d:7b:76:5a:
2a:f0:25:02:ac:88:66:4a:2c:5e:d3:9b:a8:64:08:81:87:34:
4e:0d:4d:f2:cb:06:09:a7:bd:59:47:82:92:80:47:4c:55:51:
cd:fa:2d:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy1cCm2iQ6u5BONaBoLGTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmJjMjg0OThlYjE2OTU5MGIwNjlhMDA1NDE0YzQxYTE3
OWIyNDAwHhcNMjMwMTAyMTQxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzQ0NjAxYjc2Njk4YTQ1YjZiNjRhMzE1ZTkxNjMyMmY5MWE4MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTbyzULJ+hvgGR/c43CJUIgispXv
WYVB9MB9QAmvvDdkzms0cQjLi5fCWSa0dFbttUQAvBpu14G9HVlkfmWhiBKTdbGU
MQ/Ov3D+twGMhOGqpL5ef59KqaSYjMH3fIulNErORSu7jp5h92Tf+FhtmBcSQ3Ro
JJB31L5l5JeontySy3P9xTU29thmbrdiAuKFT7HVOvrjtpkbOLxsLkKcf58XK21W
kEc2+SO9tTs5QmA/j0nSxqM/B/USkbBpB4lpmrsu6Z7r75P0ZENdyqQwf3WO2P2g
Uhab1ocWW7JE8lQqvKF0twYIz7SCiV9zTODDAMlXoyDLhtQkY3EPBlQOqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNEYBt2aYpFtrZKMV6RYyL5GoL1MB8GA1UdIwQY
MBaAFBm7woSY6xaVkLBpoAVBTEGhebJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQt
N2YwMTk3MjE4NmEzLzEvODBSZ0czWnBpa1cydGtveFhwRmpJdmthZ3ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQtN2YwMTk3MjE4NmEz
LzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCqoMA0G
CSqGSIb3DQEBCwUAA4IBAQB4uPGNuIp06yLB1UrL6iHDCB1L9Gmh1+7V8MEr+ToH
5EncHieOmbTFpi+OqPHTUcWBm5B0qFxFis6MT4TeHOIb2hyGrwMDFfMOWlzmMs4c
UlGVA42Ibk1jIadnC7ToML3WQlMRYY55G9uAirD1wIWchq+M/8BJ6QtTcvQMAgAN
pjoKfh+LypNJrPdou9UtxdS4EVodGcLDXez+j5b4VbTNUjhThe05HwLZSR7ql5fG
z6ZvAKk5YtG7ye9IhLubfftQ26eLZ5zEK/uEYYSex8z7GQWzrm17dloq8CUCrIhm
Sixe05uoZAiBhzRODU3yywYJp71ZR4KSgEdMVVHN+i2z
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:05 2024 by rpki-client on console-ams.rpki-client.org