Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/8vigB2MWU2qiZk91tE2gWXNcvsk.roa
File: 8vigB2MWU2qiZk91tE2gWXNcvsk.roa (raw, json)
Hash identifier: e0R29j4rTgTcZhr4f468nX14Ycwsc12Y0om/MVTQRdE=
Subject key identifier: F2:F8:A0:07:63:16:53:6A:A2:66:4F:75:B4:4D:A0:59:73:5C:BE:C9
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0185703050701C215BA40FD7D1313537BF01
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/8vigB2MWU2qiZk91tE2gWXNcvsk.roa
Signing time: Mon 02 Jan 2023 01:54:52 +0000
ROA not before: Mon 02 Jan 2023 01:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 92.54.34.0/24 maxlen: 24
2a02:a0:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:50:70:1c:21:5b:a4:0f:d7:d1:31:35:37:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jan 2 01:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f8a0076316536aa2664f75b44da059735cbec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:3c:e3:cd:50:02:12:5f:8b:9c:ff:ac:f2:
4d:da:6c:c3:d6:ed:27:49:63:dd:f4:ca:30:37:47:
1e:ef:22:69:2b:aa:01:1b:22:a7:78:a9:dd:1a:4a:
ae:79:fa:ab:ed:e1:23:b5:78:0f:75:68:6a:c5:b0:
2e:a6:da:35:cd:9b:f7:88:9e:ad:62:f1:5f:10:e1:
91:41:51:6b:f2:eb:30:e9:55:4f:9d:ea:3e:d1:b2:
e4:0a:ec:89:04:7b:5b:98:83:34:76:c3:a4:5a:c8:
f7:2e:a3:c7:2d:83:77:62:cf:5a:ac:c3:05:d1:9f:
cf:f3:7c:05:63:e5:b4:a1:f5:de:47:02:33:bc:3a:
05:43:94:11:92:e2:e6:31:1d:78:8d:a1:83:12:cf:
46:49:c6:ad:3f:75:92:29:15:b4:3f:e3:83:d3:fe:
86:e3:1c:8c:3c:d4:79:f8:43:30:24:0b:4b:13:ea:
79:59:99:4d:be:42:e0:6f:b8:02:35:54:da:f6:2d:
d8:49:21:ab:5a:69:9c:a0:92:75:0d:ba:7a:6b:fb:
4c:e0:54:0a:c9:ac:6b:45:96:c8:ff:97:3f:6f:9b:
ac:89:52:4d:ac:e5:61:f6:6d:d9:87:d8:95:21:0d:
97:b7:e0:36:cd:0e:e8:ee:34:b4:77:8d:ff:6f:51:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:A0:07:63:16:53:6A:A2:66:4F:75:B4:4D:A0:59:73:5C:BE:C9
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/8vigB2MWU2qiZk91tE2gWXNcvsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.54.34.0/24
IPv6:
2a02:a0:9::/48
Signature Algorithm: sha256WithRSAEncryption
78:7a:9d:5f:7e:e7:d6:7b:6c:e1:68:0f:4f:c7:02:3a:2e:b9:
a3:e7:c2:36:c8:d2:d7:95:b5:99:2f:5c:46:12:5e:a4:7e:b0:
17:7a:8e:9d:d9:70:ac:0f:9e:4a:b3:4c:99:5f:48:19:37:58:
88:ab:65:2b:05:ad:6b:09:84:04:8c:34:7c:e7:09:90:8b:8d:
ec:52:cf:77:cb:07:7f:92:65:6d:02:00:2f:f1:ba:63:c8:6a:
4a:ef:1a:e3:12:33:2a:1a:3e:d3:54:40:6e:ac:28:18:e8:74:
c1:38:10:21:5e:71:8e:4f:48:76:6e:56:c5:6f:8e:1c:c2:e5:
8e:93:b3:90:1b:9d:f0:47:44:1d:1c:47:d6:8a:92:12:6d:51:
7f:6c:e2:1a:a0:71:41:34:f3:d1:03:f8:48:52:86:59:2a:01:
2b:67:2e:4f:dc:70:bb:06:5f:b3:36:7c:d8:c5:25:98:fb:a7:
84:cc:f0:b5:c1:ea:08:a7:6a:39:4b:8f:d6:a5:cf:69:dc:85:
c9:7c:75:e8:a9:29:9d:69:34:98:13:e7:fb:a0:12:17:ce:ba:
02:a3:5e:cd:fb:d5:c9:7f:db:cd:7f:a7:19:67:c8:57:68:b1:
5c:af:06:09:17:d3:d3:c7:f7:cc:3c:20:ca:13:de:71:cd:68:
6f:3c:72:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVwMFBwHCFbpA/X0TE1N78BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2
Y2U3NDgwHhcNMjMwMTAyMDE1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY4YTAwNzYzMTY1MzZhYTI2NjRmNzViNDRkYTA1OTczNWNiZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOk8481QAhJfi5z/rPJN2mzD1u0n
SWPd9MowN0ce7yJpK6oBGyKneKndGkquefqr7eEjtXgPdWhqxbAupto1zZv3iJ6t
YvFfEOGRQVFr8usw6VVPneo+0bLkCuyJBHtbmIM0dsOkWsj3LqPHLYN3Ys9arMMF
0Z/P83wFY+W0ofXeRwIzvDoFQ5QRkuLmMR14jaGDEs9GScatP3WSKRW0P+OD0/6G
4xyMPNR5+EMwJAtLE+p5WZlNvkLgb7gCNVTa9i3YSSGrWmmcoJJ1Dbp6a/tM4FQK
yaxrRZbI/5c/b5usiVJNrOVh9m3Zh9iVIQ2Xt+A2zQ7o7jS0d43/b1ERrQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPL4oAdjFlNqomZPdbRNoFlzXL7JMB8GA1UdIwQY
MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt
ODBjM2VhNGZkMDAwLzEvOHZpZ0IyTVdVMnFpWms5MXRFMmdXWE5jdnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw
LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXDYiMA8E
AgACMAkDBwAqAgCgAAkwDQYJKoZIhvcNAQELBQADggEBAHh6nV9+59Z7bOFoD0/H
AjouuaPnwjbI0teVtZkvXEYSXqR+sBd6jp3ZcKwPnkqzTJlfSBk3WIirZSsFrWsJ
hASMNHznCZCLjexSz3fLB3+SZW0CAC/xumPIakrvGuMSMyoaPtNUQG6sKBjodME4
ECFecY5PSHZuVsVvjhzC5Y6Ts5AbnfBHRB0cR9aKkhJtUX9s4hqgcUE089ED+EhS
hlkqAStnLk/ccLsGX7M2fNjFJZj7p4TM8LXB6ginajlLj9alz2nchcl8deipKZ1p
NJgT5/ugEhfOugKjXs371cl/281/pxlnyFdosVyvBgkX09PH98w8IMoT3nHNaG88
csU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org