Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uTFOLz6NbfrkTvM-Hg15vvQa6J4.roa
File: uTFOLz6NbfrkTvM-Hg15vvQa6J4.roa (raw, json)
Hash identifier: bMQIH+Jqy6neacLSqA18F+WUaJAtcYjxXG0Atr8UFmc=
Subject key identifier: B9:31:4E:2F:3E:8D:6D:FA:E4:4E:F3:3E:1E:0D:79:BE:F4:1A:E8:9E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188F6BCECD91AB704F51CA1B576149FC1BD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uTFOLz6NbfrkTvM-Hg15vvQa6J4.roa
Signing time: Mon 26 Jun 2023 08:05:56 +0000
ROA not before: Mon 26 Jun 2023 08:05:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 92.114.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:bc:ec:d9:1a:b7:04:f5:1c:a1:b5:76:14:9f:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 26 08:05:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9314e2f3e8d6dfae44ef33e1e0d79bef41ae89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:79:c9:4a:0d:d5:c5:b3:a1:8e:e5:44:a8:
49:d4:6a:01:5b:bf:6b:52:95:e5:87:5b:3f:c2:c1:
2d:e7:67:5a:f3:f2:d5:34:03:e3:0b:2e:48:6a:81:
36:1d:be:93:62:b4:e2:d8:41:0f:68:43:ce:b2:46:
ef:67:01:07:ab:88:0b:c2:ce:65:93:31:49:ff:78:
47:f0:e7:ef:10:13:00:77:0c:a4:17:62:25:18:2f:
31:ef:da:19:c1:cc:59:34:8f:75:d7:4e:3b:32:87:
d3:48:68:57:43:7d:f9:da:bd:4c:f2:25:a4:40:74:
dc:59:3e:b5:17:8c:b6:96:68:6c:e2:b9:2d:8f:9c:
71:fe:53:b9:07:68:f0:9d:2b:7b:d4:f3:4d:8d:51:
73:bd:7c:32:bf:3a:9d:ac:23:9a:06:b1:a9:01:b8:
4b:89:02:a0:51:b1:f3:c0:d5:36:60:27:89:46:eb:
54:13:13:4f:e0:e7:c5:bc:16:38:0f:eb:05:87:39:
d7:9c:08:e7:6a:df:ec:a4:c1:12:2e:9f:ca:e9:aa:
61:6f:e4:20:f6:76:f5:f4:28:1c:13:e3:67:54:38:
a2:4f:bc:15:40:d9:bd:67:6a:99:cb:7e:25:29:c6:
c8:58:19:92:6c:76:4f:f2:b0:37:2b:38:39:80:e0:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:4E:2F:3E:8D:6D:FA:E4:4E:F3:3E:1E:0D:79:BE:F4:1A:E8:9E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uTFOLz6NbfrkTvM-Hg15vvQa6J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.85.0/24
Signature Algorithm: sha256WithRSAEncryption
22:41:95:c3:d4:f3:d5:53:15:62:d7:e2:dd:eb:72:01:f6:e6:
b3:a6:8e:7a:65:be:53:f9:f5:45:f4:84:e8:a5:76:7b:06:ef:
61:11:94:d4:7a:ef:f0:d8:43:ea:8d:e8:da:50:f7:ce:e2:86:
5d:fb:8e:68:8d:7a:c1:15:a7:46:45:ae:80:34:8a:20:34:f9:
dc:21:93:0f:95:28:51:9c:ac:95:1d:2b:ef:b7:38:57:e4:1e:
aa:89:c1:c2:1b:f2:eb:c5:a2:53:72:b7:77:48:dc:da:3d:99:
a0:17:13:f7:30:17:6e:bd:af:5b:0e:c9:15:02:51:bf:6e:4c:
42:35:8f:8a:2e:21:62:ab:2e:28:8b:ff:87:08:f9:25:04:c2:
4e:fb:91:3a:54:80:0c:4b:c3:65:9d:a3:8b:5e:7b:37:97:5e:
0f:73:55:89:00:21:28:0a:e9:a9:7e:27:d2:dd:8e:18:fa:b6:
e6:58:77:4e:1c:88:fd:39:f0:ea:d6:28:64:2c:c1:4f:5c:ee:
23:f6:0c:7f:05:19:b4:41:48:85:db:61:aa:06:a5:88:06:d4:
44:77:ed:11:24:48:d7:57:6f:65:d2:ea:63:99:d4:b6:68:f8:
af:cf:6f:eb:c1:2f:55:ae:7b:ad:1b:27:cd:93:eb:8a:8e:cf:
04:47:ca:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj2vOzZGrcE9RyhtXYUn8G9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNjI2MDgwNTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTMxNGUyZjNlOGQ2ZGZhZTQ0ZWYzM2UxZTBkNzliZWY0MWFlODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpV5yUoN1cWzoY7lRKhJ1GoBW79r
UpXlh1s/wsEt52da8/LVNAPjCy5IaoE2Hb6TYrTi2EEPaEPOskbvZwEHq4gLws5l
kzFJ/3hH8OfvEBMAdwykF2IlGC8x79oZwcxZNI911047MofTSGhXQ3352r1M8iWk
QHTcWT61F4y2lmhs4rktj5xx/lO5B2jwnSt71PNNjVFzvXwyvzqdrCOaBrGpAbhL
iQKgUbHzwNU2YCeJRutUExNP4OfFvBY4D+sFhznXnAjnat/spMESLp/K6aphb+Qg
9nb19CgcE+NnVDiiT7wVQNm9Z2qZy34lKcbIWBmSbHZP8rA3Kzg5gOB2awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkxTi8+jW365E7zPh4Neb70GuieMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvdVRGT0x6Nk5iZnJrVHZNLUhnMTV2dlFhNko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHJVMA0G
CSqGSIb3DQEBCwUAA4IBAQAiQZXD1PPVUxVi1+Ld63IB9uazpo56Zb5T+fVF9ITo
pXZ7Bu9hEZTUeu/w2EPqjejaUPfO4oZd+45ojXrBFadGRa6ANIogNPncIZMPlShR
nKyVHSvvtzhX5B6qicHCG/LrxaJTcrd3SNzaPZmgFxP3MBduva9bDskVAlG/bkxC
NY+KLiFiqy4oi/+HCPklBMJO+5E6VIAMS8NlnaOLXns3l14Pc1WJACEoCumpfifS
3Y4Y+rbmWHdOHIj9OfDq1ihkLMFPXO4j9gx/BRm0QUiF22GqBqWIBtREd+0RJEjX
V29l0upjmdS2aPivz2/rwS9VrnutGyfNk+uKjs8ER8ps
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:18 2024 by rpki-client on console-ams.rpki-client.org