Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/IUlslQ4emBMHHRIJnJwOEHNAREA.roa
File: IUlslQ4emBMHHRIJnJwOEHNAREA.roa (raw, json)
Hash identifier: z78ZAMeNRM15m6m9ijKLzwVUle6wE/MQvxCYcQawKmY=
Subject key identifier: 21:49:6C:95:0E:1E:98:13:07:1D:12:09:9C:9C:0E:10:73:40:44:40
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 01856F6FEB2EB5BCFE71A5E5A189A251C991
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/IUlslQ4emBMHHRIJnJwOEHNAREA.roa
Signing time: Sun 01 Jan 2023 22:24:43 +0000
ROA not before: Sun 01 Jan 2023 22:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209284
IP address blocks: 92.118.116.0/22 maxlen: 22
92.118.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:eb:2e:b5:bc:fe:71:a5:e5:a1:89:a2:51:c9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jan 1 22:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21496c950e1e9813071d12099c9c0e1073404440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:66:9e:84:ae:35:b7:f8:a3:19:4a:93:aa:
7a:70:fe:8f:50:c3:4d:20:c6:2b:cf:ef:a5:9d:85:
e4:1d:e7:3e:13:2c:b6:de:50:6b:f3:ac:f7:64:86:
ce:87:f5:4a:e6:e6:1d:c7:a0:3d:09:37:5c:58:28:
3d:b5:7f:dd:2c:25:e2:76:d9:cd:2d:ad:25:f4:8e:
f3:09:66:5e:f0:16:46:cf:45:e4:31:8b:2a:e4:cf:
88:2c:59:3d:b8:79:53:69:a2:a1:3d:64:51:19:a8:
3b:7a:1c:b4:b4:6e:95:39:e9:1c:38:91:7d:ab:02:
b4:2d:40:1a:5d:a0:aa:f4:0c:23:22:29:58:96:7b:
cd:ca:5e:c7:a4:bd:df:e3:76:88:84:6c:d5:af:99:
01:f9:ae:4d:f6:8e:fa:a0:18:da:40:be:59:a0:f3:
ba:21:aa:c5:db:5f:22:ed:6a:f6:20:4b:b5:32:de:
fa:8d:1f:24:07:20:1a:42:0c:ca:bd:ca:c9:74:9e:
8a:08:72:6c:38:6c:35:81:a2:f3:4e:21:ce:3a:41:
d4:22:09:c8:dd:86:db:fe:4d:45:16:28:52:81:0c:
9c:0a:c8:34:f9:fc:d1:61:c7:0f:2d:7b:69:84:75:
39:3e:f0:f1:c1:cc:29:29:6a:41:54:c9:1a:0d:99:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:49:6C:95:0E:1E:98:13:07:1D:12:09:9C:9C:0E:10:73:40:44:40
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/IUlslQ4emBMHHRIJnJwOEHNAREA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.116.0/22
Signature Algorithm: sha256WithRSAEncryption
38:3b:77:e0:97:3f:4a:fe:8d:91:d6:d1:4e:81:d9:56:36:c2:
95:dd:bc:fc:6e:b2:7e:0c:a2:86:c7:34:4e:e0:9a:f9:0f:0e:
16:bf:c5:97:7a:ea:32:2d:ba:96:97:dd:e1:10:02:0d:2e:9a:
28:dd:c4:8f:55:72:8c:7e:3b:78:15:fd:5f:42:82:6c:1a:06:
90:64:60:db:da:53:ff:b3:96:30:f2:66:f7:9d:5f:6e:76:4e:
11:85:ac:d1:c0:cc:09:be:53:d7:99:3b:03:68:53:c7:05:21:
92:23:1e:2f:ba:5d:d5:06:24:ef:2b:57:63:17:04:6b:3e:a4:
0b:21:d1:ca:4e:6e:f3:ba:54:d8:77:f6:8b:ee:d6:69:fe:68:
88:58:1d:00:63:11:b8:97:72:7d:0e:0c:df:25:5c:f6:fc:b4:
fa:47:8f:6f:f0:49:47:80:57:d4:00:c9:7d:e4:0a:90:f8:19:
3e:aa:cc:f5:04:2f:f3:2b:77:76:29:a3:55:e5:bb:3c:69:2b:
70:e6:20:cf:11:38:b4:d4:45:47:3c:1d:e1:56:75:5a:c7:c4:
45:e5:01:bd:27:22:9f:b6:8b:11:20:15:74:25:69:f7:79:05:
51:26:a7:e2:a8:a5:3d:95:52:17:b5:5c:26:8d:43:2d:3f:b9:
c3:a8:fe:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvb+sutbz+caXloYmiUcmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjMwMTAxMjIyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTQ5NmM5NTBlMWU5ODEzMDcxZDEyMDk5YzljMGUxMDczNDA0NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD5mnoSuNbf4oxlKk6p6cP6PUMNN
IMYrz++lnYXkHec+Eyy23lBr86z3ZIbOh/VK5uYdx6A9CTdcWCg9tX/dLCXidtnN
La0l9I7zCWZe8BZGz0XkMYsq5M+ILFk9uHlTaaKhPWRRGag7ehy0tG6VOekcOJF9
qwK0LUAaXaCq9AwjIilYlnvNyl7HpL3f43aIhGzVr5kB+a5N9o76oBjaQL5ZoPO6
IarF218i7Wr2IEu1Mt76jR8kByAaQgzKvcrJdJ6KCHJsOGw1gaLzTiHOOkHUIgnI
3Ybb/k1FFihSgQycCsg0+fzRYccPLXtphHU5PvDxwcwpKWpBVMkaDZk4UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCFJbJUOHpgTBx0SCZycDhBzQERAMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvSVVsc2xRNGVtQk1ISFJJSm5Kd09FSE5BUkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHZ0MA0G
CSqGSIb3DQEBCwUAA4IBAQA4O3fglz9K/o2R1tFOgdlWNsKV3bz8brJ+DKKGxzRO
4Jr5Dw4Wv8WXeuoyLbqWl93hEAINLpoo3cSPVXKMfjt4Ff1fQoJsGgaQZGDb2lP/
s5Yw8mb3nV9udk4RhazRwMwJvlPXmTsDaFPHBSGSIx4vul3VBiTvK1djFwRrPqQL
IdHKTm7zulTYd/aL7tZp/miIWB0AYxG4l3J9DgzfJVz2/LT6R49v8ElHgFfUAMl9
5AqQ+Bk+qsz1BC/zK3d2KaNV5bs8aStw5iDPETi01EVHPB3hVnVax8RF5QG9JyKf
tosRIBV0JWn3eQVRJqfiqKU9lVIXtVwmjUMtP7nDqP4x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-fra.rpki-client.org