Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/3UKtbU4WxaCJU612mthxwu2ti-w.roa
File: 3UKtbU4WxaCJU612mthxwu2ti-w.roa (raw, json)
Hash identifier: ejxrwWuZfmy7sFx14vkJfdfxmV9FyFtf6lcKA0ExVAA=
Subject key identifier: DD:42:AD:6D:4E:16:C5:A0:89:53:AD:76:9A:D8:71:C2:ED:AD:8B:EC
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 01856E14532139E9728A2C4E0DB1C6C40DC5
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/3UKtbU4WxaCJU612mthxwu2ti-w.roa
Signing time: Sun 01 Jan 2023 16:05:03 +0000
ROA not before: Sun 01 Jan 2023 16:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 92.249.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:53:21:39:e9:72:8a:2c:4e:0d:b1:c6:c4:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 16:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd42ad6d4e16c5a08953ad769ad871c2edad8bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:24:2a:02:57:5c:cf:c7:5b:99:50:f4:80:
a8:65:f8:47:84:a2:d8:26:a3:cc:c5:a2:41:e5:8c:
5d:de:8f:93:85:73:f6:9b:ef:3e:fb:cd:29:68:d8:
f8:3f:df:fb:55:8f:6b:cd:83:c2:10:a5:77:ca:bd:
e9:7f:0c:ef:6a:65:f2:2c:4f:9a:27:5c:ee:d7:6d:
c0:1d:d7:d3:09:0b:b7:6d:9e:b1:1a:ea:12:67:db:
0a:9d:b7:68:74:a0:b0:63:c3:58:e9:61:66:3e:86:
a5:95:39:4e:ec:ad:94:f9:89:61:07:44:ed:cf:f3:
25:c4:f7:aa:1b:38:cd:88:25:24:e6:fb:cc:ad:a7:
ca:da:53:2e:ac:7c:2c:19:d9:60:36:98:1b:ce:a7:
23:70:9f:64:74:c3:3f:14:54:1c:af:ad:1f:0d:c7:
7d:67:a4:db:74:be:c5:0b:fc:cf:44:a5:c7:29:3d:
a4:d0:9d:48:df:e1:56:38:82:af:eb:f1:c8:a2:ad:
32:e8:4a:ed:2d:ae:2a:11:73:26:71:19:de:c8:e8:
11:fa:5e:5f:1e:52:9b:2c:18:ae:b7:2e:46:48:95:
8c:c4:eb:ba:40:8e:c0:10:70:65:2a:64:16:bd:35:
a7:19:33:a9:99:4f:94:e2:de:bc:0c:13:c2:c2:ac:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:AD:6D:4E:16:C5:A0:89:53:AD:76:9A:D8:71:C2:ED:AD:8B:EC
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/3UKtbU4WxaCJU612mthxwu2ti-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.5.0/24
Signature Algorithm: sha256WithRSAEncryption
91:89:7e:76:54:7c:b5:53:42:bc:44:4d:15:13:88:5c:17:a6:
86:19:8d:13:b9:77:41:9f:c4:e8:c5:23:5f:66:45:80:f0:c9:
b8:0e:d1:3f:b7:b7:12:68:c7:8a:03:e7:07:4b:3b:a7:4c:d6:
2f:4c:39:6e:97:dc:3c:77:89:68:e2:6a:af:cc:52:9a:aa:f1:
61:88:e5:2e:54:00:a5:e9:a0:b3:71:1d:15:38:7f:ab:0b:b2:
57:dc:98:0e:5d:3b:79:32:96:cf:28:26:30:86:84:1d:ba:14:
07:9c:4b:c3:83:77:7f:30:30:d5:6a:d3:76:22:b7:4d:cf:b6:
59:bf:52:1b:25:f2:6f:83:9e:16:94:fe:d5:76:06:a0:2a:50:
8d:43:89:39:09:f0:fc:86:53:08:24:8b:c1:c8:e2:d5:62:0a:
c3:74:f0:e1:10:94:91:29:98:de:da:99:68:10:cf:ca:be:e3:
fc:4a:26:bd:ee:01:2d:2d:ef:a7:6b:7b:c2:0a:be:2c:6a:54:
b3:52:ea:63:33:fc:57:f0:00:4e:0e:d9:c6:ae:f1:2d:34:bc:
cd:60:2d:ae:8f:80:27:3c:d7:bf:e0:c1:ce:cd:a7:82:7a:97:
89:26:83:4c:96:a6:46:0f:82:5c:54:cc:da:45:e4:a6:32:fe:
2b:b0:b9:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFFMhOelyiixODbHGxA3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjMwMTAxMTYwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDQyYWQ2ZDRlMTZjNWEwODk1M2FkNzY5YWQ4NzFjMmVkYWQ4YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08EkKgJXXM/HW5lQ9ICoZfhHhKLY
JqPMxaJB5Yxd3o+ThXP2m+8++80paNj4P9/7VY9rzYPCEKV3yr3pfwzvamXyLE+a
J1zu123AHdfTCQu3bZ6xGuoSZ9sKnbdodKCwY8NY6WFmPoallTlO7K2U+YlhB0Tt
z/MlxPeqGzjNiCUk5vvMrafK2lMurHwsGdlgNpgbzqcjcJ9kdMM/FFQcr60fDcd9
Z6TbdL7FC/zPRKXHKT2k0J1I3+FWOIKv6/HIoq0y6ErtLa4qEXMmcRneyOgR+l5f
HlKbLBiuty5GSJWMxOu6QI7AEHBlKmQWvTWnGTOpmU+U4t68DBPCwqw0+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1CrW1OFsWgiVOtdprYccLtrYvsMB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvM1VLdGJVNFd4YUNKVTYxMm10aHh3dTJ0aS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkFMA0G
CSqGSIb3DQEBCwUAA4IBAQCRiX52VHy1U0K8RE0VE4hcF6aGGY0TuXdBn8ToxSNf
ZkWA8Mm4DtE/t7cSaMeKA+cHSzunTNYvTDlul9w8d4lo4mqvzFKaqvFhiOUuVACl
6aCzcR0VOH+rC7JX3JgOXTt5MpbPKCYwhoQduhQHnEvDg3d/MDDVatN2IrdNz7ZZ
v1IbJfJvg54WlP7VdgagKlCNQ4k5CfD8hlMIJIvByOLVYgrDdPDhEJSRKZje2plo
EM/KvuP8Sia97gEtLe+na3vCCr4salSzUupjM/xX8ABODtnGrvEtNLzNYC2uj4An
PNe/4MHOzaeCepeJJoNMlqZGD4JcVMzaReSmMv4rsLl3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:53 2024 by rpki-client on console-fra.rpki-client.org