Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/8ntYI6uDBAQC0SIBUb9rV0yH2gQ.roa
File: 8ntYI6uDBAQC0SIBUb9rV0yH2gQ.roa (raw, json)
Hash identifier: yKOqSrnDw/Cr+GVLFnq4boKmwerdEkHjNnSxQIiptUA=
Subject key identifier: F2:7B:58:23:AB:83:04:04:02:D1:22:01:51:BF:6B:57:4C:87:DA:04
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 018891756D78CEA8FE5C7AD56D970B0A1E7C
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/8ntYI6uDBAQC0SIBUb9rV0yH2gQ.roa
Signing time: Tue 06 Jun 2023 16:06:11 +0000
ROA not before: Tue 06 Jun 2023 16:06:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50135
IP address blocks: 92.42.4.0/26 maxlen: 26
92.42.4.64/26 maxlen: 26
92.42.4.128/26 maxlen: 26
92.42.4.192/26 maxlen: 26
Validation: Failed, certificate revoked on Wed 07 Jun 2023 09:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:75:6d:78:ce:a8:fe:5c:7a:d5:6d:97:0b:0a:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Jun 6 16:06:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27b5823ab83040402d1220151bf6b574c87da04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:81:43:3d:82:07:6a:7a:66:b0:2a:ff:61:
ee:bc:66:d5:33:97:fc:3e:26:76:9b:d2:22:99:99:
f4:c9:c4:2c:65:b7:30:51:a8:1b:0b:6c:aa:0b:96:
78:43:40:b6:40:7c:c4:46:b8:52:7a:88:d2:b9:42:
1b:93:e1:65:53:9d:b7:c9:80:9f:1e:69:0a:15:a4:
ba:69:46:11:23:5b:66:79:68:25:c8:89:4d:ea:f9:
15:5b:94:6b:af:c8:8c:d1:35:22:bb:cb:f3:96:e0:
a9:f3:9e:cb:e5:9a:f7:55:c8:40:74:38:65:a1:c3:
07:49:93:87:44:21:8f:e1:72:8c:d9:15:52:5e:af:
f8:25:b8:34:cd:b4:91:73:de:84:61:a2:a9:7c:6e:
02:3e:de:de:12:06:cc:a1:b2:43:41:20:2e:91:be:
75:1e:a3:89:33:02:6a:51:75:21:dc:ff:87:28:9b:
eb:22:dd:ff:6d:32:ef:0c:d5:1e:98:a7:fe:6a:6b:
28:eb:f2:b9:b0:7c:fd:6a:a0:78:81:77:b6:b9:ea:
72:c9:47:2c:9a:db:9e:6a:35:fb:23:c7:42:cd:0c:
9d:ec:34:6c:13:aa:ba:e0:bb:1e:b5:8f:24:e3:56:
28:e6:9a:4e:b6:3f:f5:34:46:9c:2a:9e:f2:d9:9a:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:58:23:AB:83:04:04:02:D1:22:01:51:BF:6B:57:4C:87:DA:04
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/8ntYI6uDBAQC0SIBUb9rV0yH2gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c4:b3:c1:39:b2:f0:dd:59:08:67:3c:76:0c:a8:aa:f4:2d:
3d:45:a7:05:30:b0:1d:a8:69:7e:a4:c9:a8:c7:4a:35:d4:e8:
62:48:ef:96:20:f9:48:31:b4:41:91:ea:c2:ab:c5:12:57:d2:
2a:73:20:61:35:7c:68:93:a7:47:85:ee:85:1f:b5:9c:11:51:
07:c4:c8:52:1e:46:c6:46:b3:db:f9:a7:41:ef:f4:cd:2b:09:
99:25:f6:71:41:92:8f:e5:44:07:77:6a:28:5a:60:ca:69:25:
c3:5f:bc:10:9a:30:fd:ff:76:63:c6:29:e3:56:c1:11:6f:1e:
7b:56:18:47:3a:50:e4:bb:f3:c8:50:73:7f:17:2a:43:27:07:
d3:85:49:f4:d1:de:2b:c2:9c:d6:2a:d1:3e:58:b7:c8:5b:7c:
54:11:bd:bc:52:6d:1c:be:dd:8f:9c:92:23:01:5b:e7:de:2a:
ff:93:d7:da:62:86:48:34:58:c1:7b:40:d3:12:8a:76:66:46:
77:8f:19:db:4f:fe:9d:6e:57:f2:b5:70:54:ee:e8:dd:51:a3:
10:2f:b3:34:60:33:2d:b4:7c:d3:35:1f:56:c2:73:aa:13:c2:
0c:0c:4a:bb:8d:1d:f3:7d:05:04:93:f6:df:b6:8f:80:22:bc:
df:59:69:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiRdW14zqj+XHrVbZcLCh58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWQ4MTJiZGY0YzVmYjA4ZWQ2MTIwZGNkMDYxOWFiZjM1
MzA1MjAwHhcNMjMwNjA2MTYwNjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjdiNTgyM2FiODMwNDA0MDJkMTIyMDE1MWJmNmI1NzRjODdkYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlByBQz2CB2p6ZrAq/2HuvGbVM5f8
PiZ2m9IimZn0ycQsZbcwUagbC2yqC5Z4Q0C2QHzERrhSeojSuUIbk+FlU523yYCf
HmkKFaS6aUYRI1tmeWglyIlN6vkVW5Rrr8iM0TUiu8vzluCp857L5Zr3VchAdDhl
ocMHSZOHRCGP4XKM2RVSXq/4Jbg0zbSRc96EYaKpfG4CPt7eEgbMobJDQSAukb51
HqOJMwJqUXUh3P+HKJvrIt3/bTLvDNUemKf+amso6/K5sHz9aqB4gXe2uepyyUcs
mtueajX7I8dCzQyd7DRsE6q64LsetY8k41Yo5ppOtj/1NEacKp7y2ZrKVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJ7WCOrgwQEAtEiAVG/a1dMh9oEMB8GA1UdIwQY
MBaAFESdgSvfTF+wjtYSDc0GGavzUwUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEt
ZjE0NTFiYTg4NGI4LzEvOG50WUk2dURCQVFDMFNJQlViOXJWMHlIMmdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEtZjE0NTFiYTg4NGI4
LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCoEMA0G
CSqGSIb3DQEBCwUAA4IBAQCLxLPBObLw3VkIZzx2DKiq9C09RacFMLAdqGl+pMmo
x0o11OhiSO+WIPlIMbRBkerCq8USV9IqcyBhNXxok6dHhe6FH7WcEVEHxMhSHkbG
RrPb+adB7/TNKwmZJfZxQZKP5UQHd2ooWmDKaSXDX7wQmjD9/3ZjxinjVsERbx57
VhhHOlDku/PIUHN/FypDJwfThUn00d4rwpzWKtE+WLfIW3xUEb28Um0cvt2PnJIj
AVvn3ir/k9faYoZINFjBe0DTEop2ZkZ3jxnbT/6dblfytXBU7ujdUaMQL7M0YDMt
tHzTNR9WwnOqE8IMDEq7jR3zfQUEk/bfto+AIrzfWWkG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:52 2024 by rpki-client on console-fra.rpki-client.org