Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/MyUqGPpiiCFtTpf9jYyIwRMe1eM.roa
File: MyUqGPpiiCFtTpf9jYyIwRMe1eM.roa (raw, json)
Hash identifier: soOjr/dQt3TFBIJre/T4FVWoJVc9EJZgT0YJJI/+UEQ=
Subject key identifier: 33:25:2A:18:FA:62:88:21:6D:4E:97:FD:8D:8C:88:C1:13:1E:D5:E3
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E69E728B769523C38473005B3DF9
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/MyUqGPpiiCFtTpf9jYyIwRMe1eM.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199440
IP address blocks: 80.92.228.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e6:9e:72:8b:76:95:23:c3:84:73:00:5b:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33252a18fa6288216d4e97fd8d8c88c1131ed5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:f2:b5:53:ed:bb:35:16:88:0b:12:ab:dd:
95:ae:55:17:a3:40:47:b0:ba:b3:89:f1:7e:54:a9:
8a:86:e8:b9:fc:2b:e9:ce:44:ed:ee:43:be:89:b1:
55:94:c2:75:51:a1:b5:3a:a9:6c:40:5d:88:15:99:
6f:f7:5b:3a:38:5d:9d:3d:bc:91:e9:7d:1f:c7:6b:
14:2c:91:39:43:d4:89:d8:99:72:a8:26:3a:f5:de:
b4:c1:82:35:e6:31:b1:17:26:de:4b:28:41:7d:4a:
60:41:b8:e7:6a:97:e3:b5:98:7d:a5:dd:66:a0:4f:
f4:80:0b:61:41:cd:d8:0a:0d:9f:79:94:0b:04:41:
29:c3:24:03:32:7d:45:6d:06:c1:f3:00:d1:e6:9b:
f1:c8:3c:7a:6e:8d:82:71:60:c6:34:b7:07:ba:5f:
f9:5d:27:87:d8:0e:62:18:bc:7f:45:da:be:3b:6e:
4a:31:84:dd:fe:d6:f5:6c:0d:d4:8a:23:76:d1:78:
6b:fb:bd:3f:4a:5e:36:d9:c8:6c:c1:d0:42:78:c9:
c0:0f:d1:c2:b2:8f:72:08:42:ee:a0:e6:fa:3a:02:
9e:36:ae:2b:43:fe:38:6b:69:78:60:85:c9:51:90:
0e:ce:86:b8:e0:a7:cb:c4:aa:d2:0a:7e:55:29:cb:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:2A:18:FA:62:88:21:6D:4E:97:FD:8D:8C:88:C1:13:1E:D5:E3
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/MyUqGPpiiCFtTpf9jYyIwRMe1eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.228.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6b:e9:b1:69:c2:d7:31:03:6d:9e:67:ec:49:5f:2a:7b:31:
06:21:32:d6:d0:03:cb:ce:5c:1e:a4:81:e1:e9:88:b1:29:07:
23:34:25:e8:5d:2e:d8:56:c6:72:92:c1:e7:9d:9e:46:17:4e:
74:0c:80:2f:68:c2:74:6c:32:41:3d:e3:50:f2:9d:44:a2:98:
78:d6:36:41:ac:c0:0d:e2:b6:c2:34:30:c2:d6:3c:e2:98:fb:
65:2c:f1:39:f9:26:7a:bb:3a:01:a5:ce:37:4d:ac:de:da:03:
38:64:46:87:06:87:33:b1:62:f8:6e:7f:ab:28:37:25:9e:83:
da:8e:e1:4a:2d:d4:1f:74:1f:dc:c2:ce:75:4a:91:5b:1b:4f:
35:fd:6a:fa:82:41:17:03:2a:1f:8d:85:eb:01:b8:8b:76:fb:
26:cd:d4:28:eb:f8:95:4b:01:c2:f0:b1:f4:21:74:17:eb:40:
9b:46:88:eb:53:a9:21:e0:c7:98:a8:70:46:47:8a:b6:7d:9f:
56:e5:33:06:55:6a:15:28:88:1f:f5:dd:a7:17:c0:79:03:62:
c1:57:8e:2c:a2:83:3f:ec:37:c8:99:e1:f6:af:99:72:69:4e:
f9:aa:94:72:fe:2d:24:6a:10:c9:5d:69:22:2f:e6:42:37:0d:
7a:30:cc:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFOaecot2lSPDhHMAWz35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjMwMTAxMjA0NTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzI1MmExOGZhNjI4ODIxNmQ0ZTk3ZmQ4ZDhjODhjMTEzMWVkNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqHytVPtuzUWiAsSq92VrlUXo0BH
sLqzifF+VKmKhui5/CvpzkTt7kO+ibFVlMJ1UaG1OqlsQF2IFZlv91s6OF2dPbyR
6X0fx2sULJE5Q9SJ2JlyqCY69d60wYI15jGxFybeSyhBfUpgQbjnapfjtZh9pd1m
oE/0gAthQc3YCg2feZQLBEEpwyQDMn1FbQbB8wDR5pvxyDx6bo2CcWDGNLcHul/5
XSeH2A5iGLx/Rdq+O25KMYTd/tb1bA3UiiN20Xhr+70/Sl422chswdBCeMnAD9HC
so9yCELuoOb6OgKeNq4rQ/44a2l4YIXJUZAOzoa44KfLxKrSCn5VKcuq7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMlKhj6YoghbU6X/Y2MiMETHtXjMB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvTXlVcUdQcGlpQ0Z0VHBmOWpZeUl3Uk1lMWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFzkMA0G
CSqGSIb3DQEBCwUAA4IBAQBVa+mxacLXMQNtnmfsSV8qezEGITLW0APLzlwepIHh
6YixKQcjNCXoXS7YVsZyksHnnZ5GF050DIAvaMJ0bDJBPeNQ8p1Eoph41jZBrMAN
4rbCNDDC1jzimPtlLPE5+SZ6uzoBpc43Taze2gM4ZEaHBoczsWL4bn+rKDclnoPa
juFKLdQfdB/cws51SpFbG081/Wr6gkEXAyofjYXrAbiLdvsmzdQo6/iVSwHC8LH0
IXQX60CbRojrU6kh4MeYqHBGR4q2fZ9W5TMGVWoVKIgf9d2nF8B5A2LBV44sooM/
7DfImeH2r5lyaU75qpRy/i0kahDJXWkiL+ZCNw16MMzS
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:10 2024 by rpki-client on console-fra.rpki-client.org