Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/DB8P5Laq4fQuEbdcLmZl0wd6W7o.roa
File: DB8P5Laq4fQuEbdcLmZl0wd6W7o.roa (raw, json)
Hash identifier: y8P2ZEakq3JK6OyE3BBmHZJRk1TmJNgp8r9FoFPvq2g=
Subject key identifier: 0C:1F:0F:E4:B6:AA:E1:F4:2E:11:B7:5C:2E:66:65:D3:07:7A:5B:BA
Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial: 01856DF88748A6E8B04BB07CE8FC8D4D5B46
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/DB8P5Laq4fQuEbdcLmZl0wd6W7o.roa
Signing time: Sun 01 Jan 2023 15:34:42 +0000
ROA not before: Sun 01 Jan 2023 15:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204890
IP address blocks: 92.119.45.0/24 maxlen: 24
92.119.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f8:87:48:a6:e8:b0:4b:b0:7c:e8:fc:8d:4d:5b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Validity
Not Before: Jan 1 15:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c1f0fe4b6aae1f42e11b75c2e6665d3077a5bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:26:3e:44:2a:9e:b6:fb:a1:6c:15:4f:9a:
28:85:19:aa:de:27:47:32:4b:e6:fc:a4:5e:5e:7d:
e9:7c:d3:ae:b0:af:8f:24:d4:6a:29:f1:45:a6:6b:
2e:a2:10:00:eb:9b:7c:71:15:0a:9f:ef:3a:89:a6:
46:50:4e:86:bb:7a:c2:6d:a8:27:db:e4:36:82:30:
4f:1e:4f:f1:e7:b2:8d:00:ce:03:3c:4b:a9:c0:2a:
5e:d5:05:8e:6f:cc:36:3c:ea:26:ef:28:9c:1f:c8:
d9:70:9c:1e:65:6b:d3:b5:5e:b9:78:68:99:4a:c4:
7b:7f:96:1f:94:1a:bc:7a:8a:49:43:de:bf:eb:2f:
d7:21:d3:d6:10:6b:3f:49:c1:b2:fe:e9:81:ed:a3:
5b:23:c7:d0:40:b2:57:5a:d2:dd:01:69:e1:e5:66:
b2:42:0a:27:39:12:81:60:53:8c:18:a9:5e:8e:ff:
6a:4f:15:81:1e:69:6e:c2:c7:26:8e:3b:c0:56:57:
8d:6c:3a:ac:b2:19:43:fb:5c:d1:3b:44:cc:d5:bd:
db:7a:ca:a9:bc:45:25:95:f5:50:59:8b:4a:14:24:
1c:d1:c2:5a:fa:77:cd:84:3b:81:7c:4c:fc:08:b8:
e7:bc:e2:7e:cc:7c:24:a1:b0:ff:01:e6:bf:29:cb:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:0F:E4:B6:AA:E1:F4:2E:11:B7:5C:2E:66:65:D3:07:7A:5B:BA
X509v3 Authority Key Identifier:
keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/DB8P5Laq4fQuEbdcLmZl0wd6W7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.45.0-92.119.46.255
Signature Algorithm: sha256WithRSAEncryption
af:23:2a:f6:07:4d:3b:fd:3c:f4:8b:c5:fc:1d:87:54:9a:4b:
ad:1b:d5:02:cd:69:03:9a:3d:dd:c1:39:b5:44:4c:9d:3d:68:
90:74:d6:01:3f:2d:80:41:48:46:d8:7d:a3:db:50:03:4e:ec:
03:b4:0b:88:42:62:7b:34:8d:da:d2:62:7a:57:06:b6:da:a8:
fb:63:33:e4:cf:5c:d8:ac:fb:9f:ea:3a:b4:b3:3e:d3:18:4a:
7f:4e:94:8c:2b:da:b4:8c:31:90:0a:ad:a0:d8:4e:77:db:a3:
0e:67:64:4c:1c:b5:6a:61:a7:38:10:d7:ef:dd:80:5b:22:db:
dd:a3:ac:07:7e:8b:57:2f:b9:a0:ec:8d:e0:5d:c4:18:40:75:
40:62:a0:1a:a5:73:a4:6c:1e:81:da:ad:83:a6:78:b0:a5:67:
19:de:5d:3d:31:6b:0b:72:8d:e1:d8:37:4d:4f:6e:c1:4c:08:
cb:9a:e6:ea:50:a9:39:7b:c2:3a:07:fd:0d:33:4e:e6:a8:70:
5e:ce:44:30:98:a1:1e:42:dc:22:6b:ae:8a:f4:63:e2:ee:b8:
9d:a5:12:bd:45:88:99:75:b2:65:f8:4a:85:61:da:a1:2a:ce:
77:30:88:6d:f0:fd:d4:10:c6:db:4c:6b:f8:ee:b3:91:a0:4b:
94:d3:4f:2c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVt+IdIpuiwS7B86PyNTVtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl
YTlmODgwHhcNMjMwMTAxMTUzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzFmMGZlNGI2YWFlMWY0MmUxMWI3NWMyZTY2NjVkMzA3N2E1YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuEmPkQqnrb7oWwVT5oohRmq3idH
Mkvm/KReXn3pfNOusK+PJNRqKfFFpmsuohAA65t8cRUKn+86iaZGUE6Gu3rCbagn
2+Q2gjBPHk/x57KNAM4DPEupwCpe1QWOb8w2POom7yicH8jZcJweZWvTtV65eGiZ
SsR7f5YflBq8eopJQ96/6y/XIdPWEGs/ScGy/umB7aNbI8fQQLJXWtLdAWnh5Way
QgonORKBYFOMGKlejv9qTxWBHmluwscmjjvAVleNbDqsshlD+1zRO0TM1b3besqp
vEUllfVQWYtKFCQc0cJa+nfNhDuBfEz8CLjnvOJ+zHwkobD/Aea/KcuVkwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAwfD+S2quH0LhG3XC5mZdMHelu6MB8GA1UdIwQY
MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt
NTMxMjY2ZGYzMmMwLzEvREI4UDVMYXE0ZlF1RWJkY0xtWmwwd2Q2VzdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw
LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABcdy0D
BABcdy4wDQYJKoZIhvcNAQELBQADggEBAK8jKvYHTTv9PPSLxfwdh1SaS60b1QLN
aQOaPd3BObVETJ09aJB01gE/LYBBSEbYfaPbUANO7AO0C4hCYns0jdrSYnpXBrba
qPtjM+TPXNis+5/qOrSzPtMYSn9OlIwr2rSMMZAKraDYTnfbow5nZEwctWphpzgQ
1+/dgFsi292jrAd+i1cvuaDsjeBdxBhAdUBioBqlc6RsHoHarYOmeLClZxneXT0x
awtyjeHYN01PbsFMCMua5upQqTl7wjoH/Q0zTuaocF7ORDCYoR5C3CJrror0Y+Lu
uJ2lEr1FiJl1smX4SoVh2qEqzncwiG3w/dQQxttMa/jus5GgS5TTTyw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org