Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/VQX8lvZIkyVOkStbrzmLMkvdUek.roa
File: VQX8lvZIkyVOkStbrzmLMkvdUek.roa (raw, json)
Hash identifier: K1tuG0Kt6FRRVDeHvVGi9Dd30ds4XeXdg4v4AcsQb7E=
Subject key identifier: 55:05:FC:96:F6:48:93:25:4E:91:2B:5B:AF:39:8B:32:4B:DD:51:E9
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01914689C51782C1EB0659531866336D4DB4
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/VQX8lvZIkyVOkStbrzmLMkvdUek.roa
Signing time: Mon 12 Aug 2024 12:21:59 +0000
ROA not before: Mon 12 Aug 2024 12:21:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214417
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 08:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:89:c5:17:82:c1:eb:06:59:53:18:66:33:6d:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 12 12:21:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5505fc96f64893254e912b5baf398b324bdd51e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:65:6c:03:19:e7:4e:57:1b:92:dd:44:d7:
4c:b4:91:2e:22:e4:6a:9c:92:e8:fb:45:b6:f1:29:
8c:19:37:37:ae:f6:c3:a0:80:aa:4a:61:ac:05:31:
e0:92:e2:54:bb:b1:e5:f7:5c:63:eb:19:ad:32:ff:
64:30:26:18:f9:e7:b8:8d:fa:39:92:2e:db:d4:2f:
1f:01:ea:39:bd:a2:be:f6:ef:f5:21:dd:f0:3f:b5:
7f:07:da:2d:0f:95:68:71:91:0b:6f:1a:b4:91:43:
0f:64:71:4c:27:70:cf:84:c0:2c:f9:ef:d7:e1:22:
05:85:59:b1:cc:ec:03:fb:bf:04:3a:4e:60:f5:18:
aa:5f:57:15:80:54:33:a2:f0:c8:b7:61:3a:fd:9e:
b6:01:9f:6a:a3:bb:0b:b3:18:21:9a:44:d5:b3:d2:
fe:d2:47:c1:4b:86:81:0b:42:86:64:3e:1b:08:10:
68:64:07:eb:38:3a:e5:e7:6b:26:17:07:76:21:d6:
a8:67:9f:2e:2f:dc:ea:fa:22:64:d4:41:5a:0e:f9:
3a:7f:8b:69:c9:82:45:f0:70:89:1e:61:9c:50:c5:
77:77:d5:c0:3a:a4:e4:98:f9:d0:33:75:aa:0d:4f:
1b:ae:15:5b:05:f1:a8:05:fb:29:a4:af:52:89:f8:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:FC:96:F6:48:93:25:4E:91:2B:5B:AF:39:8B:32:4B:DD:51:E9
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/VQX8lvZIkyVOkStbrzmLMkvdUek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e6:07:40:14:78:a2:e1:43:58:1a:1d:2f:11:fe:33:25:de:
fb:f7:9a:79:5d:eb:59:00:82:40:aa:37:80:4e:7e:83:79:78:
d8:3e:04:71:0b:e1:9d:43:46:1c:04:05:72:1b:75:e6:46:33:
f7:9b:12:17:0b:09:f8:43:f6:14:d1:a7:9f:11:79:15:a6:7a:
51:11:6a:97:42:9c:12:d7:d8:f1:e7:a8:b3:37:55:ad:12:85:
6a:42:57:99:4b:76:a7:b5:c9:62:66:d9:b2:7a:8e:19:32:81:
cc:ea:d5:2c:25:e2:4a:42:68:43:c9:99:7b:85:3a:ff:59:1c:
b4:0f:5f:92:b6:08:0f:d0:e6:5e:ff:c1:79:c9:ec:ef:78:51:
af:4f:e4:62:a1:e9:2b:4c:d7:45:4d:07:0d:2f:5c:42:54:10:
f7:d7:52:26:43:89:36:9d:50:b6:ee:c4:86:62:df:33:f9:3d:
05:09:80:3b:a2:43:b9:71:ba:47:8e:1b:2b:65:ed:70:22:d2:
bc:79:e2:16:c7:cf:33:68:e5:c2:a7:ae:34:b8:f6:74:6f:d5:
73:06:96:64:e8:88:5e:1e:dd:79:2e:0a:7b:70:5c:eb:ee:09:
06:b7:b9:63:ab:a4:3b:ad:b8:15:d5:ef:c1:3d:7f:71:77:77:
2c:97:46:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFGicUXgsHrBllTGGYzbU20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQwODEyMTIyMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTA1ZmM5NmY2NDg5MzI1NGU5MTJiNWJhZjM5OGIzMjRiZGQ1MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ohlbAMZ505XG5LdRNdMtJEuIuRq
nJLo+0W28SmMGTc3rvbDoICqSmGsBTHgkuJUu7Hl91xj6xmtMv9kMCYY+ee4jfo5
ki7b1C8fAeo5vaK+9u/1Id3wP7V/B9otD5VocZELbxq0kUMPZHFMJ3DPhMAs+e/X
4SIFhVmxzOwD+78EOk5g9RiqX1cVgFQzovDIt2E6/Z62AZ9qo7sLsxghmkTVs9L+
0kfBS4aBC0KGZD4bCBBoZAfrODrl52smFwd2IdaoZ58uL9zq+iJk1EFaDvk6f4tp
yYJF8HCJHmGcUMV3d9XAOqTkmPnQM3WqDU8brhVbBfGoBfsppK9SifjMGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUF/Jb2SJMlTpErW685izJL3VHpMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvVlFYOGx2WklreVZPa1N0YnJ6bUxNa3ZkVWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCpmMA0G
CSqGSIb3DQEBCwUAA4IBAQC35gdAFHii4UNYGh0vEf4zJd7795p5XetZAIJAqjeA
Tn6DeXjYPgRxC+GdQ0YcBAVyG3XmRjP3mxIXCwn4Q/YU0aefEXkVpnpREWqXQpwS
19jx56izN1WtEoVqQleZS3antcliZtmyeo4ZMoHM6tUsJeJKQmhDyZl7hTr/WRy0
D1+StggP0OZe/8F5yezveFGvT+RioekrTNdFTQcNL1xCVBD311ImQ4k2nVC27sSG
Yt8z+T0FCYA7okO5cbpHjhsrZe1wItK8eeIWx88zaOXCp640uPZ0b9VzBpZk6Ihe
Ht15Lgp7cFzr7gkGt7ljq6Q7rbgV1e/BPX9xd3csl0aS
-----END CERTIFICATE-----
Generated at Thu Aug 15 10:50:42 2024 by rpki-client on console-ams.rpki-client.org