Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/k0tVQqub0TfbMBevi4JwLfIty4M.roa
File: k0tVQqub0TfbMBevi4JwLfIty4M.roa (raw, json)
Hash identifier: VXFeKcB9l7LpZ3OK0MyEjf3zmRUw8P7a/5GVF0+/UNQ=
Subject key identifier: 93:4B:55:42:AB:9B:D1:37:DB:30:17:AF:8B:82:70:2D:F2:2D:CB:83
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0186DDB5534CE026C35E26394AB348A69363
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/k0tVQqub0TfbMBevi4JwLfIty4M.roa
Signing time: Tue 14 Mar 2023 01:21:33 +0000
ROA not before: Tue 14 Mar 2023 01:21:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34769
IP address blocks: 85.94.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dd:b5:53:4c:e0:26:c3:5e:26:39:4a:b3:48:a6:93:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Mar 14 01:21:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934b5542ab9bd137db3017af8b82702df22dcb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:2a:a4:c6:ec:80:51:8d:d7:c6:67:66:1b:
3f:3c:8d:6a:14:c4:5a:53:88:f5:b4:2d:83:26:84:
68:00:ba:de:00:32:96:a6:62:02:ff:a8:0d:48:b6:
3c:23:9c:a2:42:a0:4e:e4:c3:cf:b8:a3:1c:10:be:
9a:cb:c9:4b:c1:3e:14:0c:bd:ec:18:28:fe:34:cf:
4e:da:70:9c:f4:89:64:68:f9:a6:bb:5d:25:0a:32:
3e:5a:11:75:82:78:4e:5e:c4:a0:a7:75:a4:a2:39:
f9:bd:30:c4:1f:98:b2:77:67:5d:7f:5f:a3:9c:aa:
da:5a:48:4a:8a:03:c5:84:7d:37:75:2d:7d:3f:41:
01:47:e9:7c:29:f3:5b:14:68:73:7f:50:29:be:92:
23:4f:27:6a:b7:7f:47:f7:99:a6:71:34:c2:f0:fc:
6e:4f:d3:93:ae:bb:15:80:18:3d:7a:c5:30:dc:1a:
57:3f:7a:c9:73:7f:0d:f0:fb:6a:8c:0b:31:d9:90:
0e:e4:aa:21:f8:8e:02:3f:02:70:b6:c1:28:44:80:
dc:fa:bf:32:da:41:41:49:a4:68:c5:7b:b4:07:4f:
68:e6:e7:45:23:ad:96:b8:c6:d1:40:16:4f:18:c7:
84:5b:10:89:84:a6:dd:f2:38:c0:0e:ec:0f:de:1f:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:55:42:AB:9B:D1:37:DB:30:17:AF:8B:82:70:2D:F2:2D:CB:83
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/k0tVQqub0TfbMBevi4JwLfIty4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.224.0/24
Signature Algorithm: sha256WithRSAEncryption
26:67:5f:de:a1:f4:6d:27:fc:4b:6c:c7:3e:73:10:7f:e5:7d:
4e:f3:22:2a:45:be:0f:c7:67:0c:b2:55:bf:71:9b:4c:32:ec:
58:0d:9f:31:3d:54:82:ff:a5:fa:cb:e5:e8:c8:44:ca:79:fc:
d4:93:7f:95:0f:3c:c7:d4:88:22:28:fd:0f:30:09:56:94:9e:
29:fb:10:95:c8:ba:fb:9e:aa:20:f6:57:93:83:be:71:54:f6:
64:a1:4f:d1:1d:3d:3c:bc:41:f5:54:bc:41:dc:1b:73:a0:91:
bd:d8:96:38:f4:e9:11:b0:fe:a7:d0:1d:61:8c:20:65:53:cc:
c4:8b:ca:bf:9f:1a:c0:d4:42:58:0e:3f:9c:5f:72:94:96:11:
18:48:72:f5:4e:f3:4d:a8:e2:91:e9:1a:9d:7a:97:3e:df:07:
55:d4:43:52:dc:7b:3f:13:b8:5a:86:01:68:50:cb:ec:8b:79:
be:38:88:1c:01:e9:5e:5b:4c:78:7e:20:49:8d:f6:f0:25:1a:
83:4d:43:be:43:62:f8:1e:2a:34:16:bd:88:1c:ca:67:d5:3c:
d3:60:24:06:ec:fb:9d:48:85:3c:ab:02:31:57:63:f4:0f:00:
13:ef:ed:69:a3:cd:79:27:2c:9b:e7:35:2e:67:89:4a:b3:3c:
03:4e:66:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbdtVNM4CbDXiY5SrNIppNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3
MzAwNDEwHhcNMjMwMzE0MDEyMTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzRiNTU0MmFiOWJkMTM3ZGIzMDE3YWY4YjgyNzAyZGYyMmRjYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5wqpMbsgFGN18ZnZhs/PI1qFMRa
U4j1tC2DJoRoALreADKWpmIC/6gNSLY8I5yiQqBO5MPPuKMcEL6ay8lLwT4UDL3s
GCj+NM9O2nCc9IlkaPmmu10lCjI+WhF1gnhOXsSgp3Wkojn5vTDEH5iyd2ddf1+j
nKraWkhKigPFhH03dS19P0EBR+l8KfNbFGhzf1ApvpIjTydqt39H95mmcTTC8Pxu
T9OTrrsVgBg9esUw3BpXP3rJc38N8PtqjAsx2ZAO5Koh+I4CPwJwtsEoRIDc+r8y
2kFBSaRoxXu0B09o5udFI62WuMbRQBZPGMeEWxCJhKbd8jjADuwP3h+OJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNLVUKrm9E32zAXr4uCcC3yLcuDMB8GA1UdIwQY
MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt
YTEyYjNjM2FlODhmLzEvazB0VlFxdWIwVGZiTUJldmk0SndMZkl0eTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm
LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV7gMA0G
CSqGSIb3DQEBCwUAA4IBAQAmZ1/eofRtJ/xLbMc+cxB/5X1O8yIqRb4Px2cMslW/
cZtMMuxYDZ8xPVSC/6X6y+XoyETKefzUk3+VDzzH1IgiKP0PMAlWlJ4p+xCVyLr7
nqog9leTg75xVPZkoU/RHT08vEH1VLxB3BtzoJG92JY49OkRsP6n0B1hjCBlU8zE
i8q/nxrA1EJYDj+cX3KUlhEYSHL1TvNNqOKR6Rqdepc+3wdV1ENS3Hs/E7hahgFo
UMvsi3m+OIgcAeleW0x4fiBJjfbwJRqDTUO+Q2L4Hio0Fr2IHMpn1TzTYCQG7Pud
SIU8qwIxV2P0DwAT7+1po815Jyyb5zUuZ4lKszwDTmZh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:12 2024 by rpki-client on console-fra.rpki-client.org