Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/RQXLvNMgPAVEIPA_ejxjW39lEXw.roa
File: RQXLvNMgPAVEIPA_ejxjW39lEXw.roa (raw, json)
Hash identifier: YhW18FTdcwZd8wfukEETdfK9mJ/smruw9ImSJxZRj3o=
Subject key identifier: 45:05:CB:BC:D3:20:3C:05:44:20:F0:3F:7A:3C:63:5B:7F:65:11:7C
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 01856C1C94BBC79BAF50BE2AF877685385D3
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/RQXLvNMgPAVEIPA_ejxjW39lEXw.roa
Signing time: Sun 01 Jan 2023 06:54:50 +0000
ROA not before: Sun 01 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49808
IP address blocks: 92.119.92.0/22 maxlen: 24
185.11.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 08:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:94:bb:c7:9b:af:50:be:2a:f8:77:68:53:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Jan 1 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4505cbbcd3203c054420f03f7a3c635b7f65117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:6e:be:0f:05:46:0c:dc:fd:26:75:14:e1:
4a:25:06:8f:6a:a6:38:90:45:dc:13:86:60:5a:bd:
12:9c:3a:f4:47:a7:05:f3:a0:09:52:6b:77:c1:27:
17:c4:db:8e:8b:1b:fb:75:13:b5:53:bf:bd:00:81:
e7:5f:c2:cc:cd:34:52:bf:8c:c3:53:86:dc:cb:4d:
e4:ca:c7:9b:04:17:05:64:e1:a4:fc:c0:67:74:e7:
0e:f4:d4:fa:de:7f:2f:95:67:7a:b9:e4:e0:f3:be:
5c:19:05:67:81:1e:6f:46:36:4a:07:fc:dc:ba:9f:
18:65:d8:10:7c:22:20:e4:f6:bd:a5:fc:46:1b:70:
cf:c3:d1:63:d9:ee:3c:1e:95:c8:83:98:a4:63:b0:
f2:00:ee:25:a8:14:03:e0:4b:fc:ec:89:14:fc:95:
04:24:e4:23:38:8e:e6:e7:b4:e1:db:2b:39:5b:91:
1f:26:87:98:77:42:b4:f2:63:d0:31:2a:d3:75:b4:
09:ae:4c:17:67:dd:01:75:fa:e6:3e:2e:6a:cf:ab:
9a:a9:55:c9:74:11:92:06:83:98:c8:60:82:67:0a:
5f:26:31:b9:63:88:e4:00:28:ed:c0:b4:d7:f3:9a:
99:c1:3c:ba:0e:75:67:bf:5f:9f:31:2c:38:91:b8:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:CB:BC:D3:20:3C:05:44:20:F0:3F:7A:3C:63:5B:7F:65:11:7C
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/RQXLvNMgPAVEIPA_ejxjW39lEXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.92.0/22
185.11.84.0/22
Signature Algorithm: sha256WithRSAEncryption
43:1c:de:41:74:b3:1a:4d:de:25:ca:78:32:3e:a4:4a:62:1e:
c3:98:91:0a:e6:51:33:c4:9b:52:67:49:b5:07:66:52:51:0c:
21:bb:52:c2:83:3a:bb:db:b4:39:28:72:27:02:17:4e:bd:93:
43:ec:ca:4f:47:9e:3f:6e:45:a3:59:22:39:44:79:f3:9d:9e:
f4:b7:02:6d:7d:ce:0c:ec:51:36:6c:c6:51:65:e0:00:e5:8e:
74:4f:dd:e6:9a:e3:61:0f:de:e6:20:09:94:9b:bf:bb:3d:a3:
d8:0f:d5:7b:c0:65:b3:2f:f7:83:2a:45:45:ba:b6:2f:f9:34:
a5:17:cf:ff:47:88:61:bd:93:b9:a3:58:87:94:77:07:09:ae:
7b:1e:e3:af:5d:a5:15:64:8f:2d:a7:c5:2b:2e:44:83:b0:4c:
78:d4:84:52:4c:32:45:0f:4d:74:98:16:48:0b:75:f3:a6:15:
70:e2:3b:63:7e:1e:3e:6d:b9:cc:01:4e:54:83:d7:a5:ee:c2:
69:57:7b:93:49:aa:5c:e0:4f:ba:f8:7c:c1:08:8d:48:06:d6:
eb:b8:68:c9:74:8a:bb:1a:8e:df:a1:ea:46:99:5d:22:a5:e2:
7f:c8:8a:6d:b6:de:2b:e8:30:86:4c:44:7a:87:46:bf:1a:90:
59:a6:8b:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsHJS7x5uvUL4q+HdoU4XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz
NTBjNWYwHhcNMjMwMTAxMDY1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTA1Y2JiY2QzMjAzYzA1NDQyMGYwM2Y3YTNjNjM1YjdmNjUxMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Fuvg8FRgzc/SZ1FOFKJQaPaqY4
kEXcE4ZgWr0SnDr0R6cF86AJUmt3wScXxNuOixv7dRO1U7+9AIHnX8LMzTRSv4zD
U4bcy03kysebBBcFZOGk/MBndOcO9NT63n8vlWd6ueTg875cGQVngR5vRjZKB/zc
up8YZdgQfCIg5Pa9pfxGG3DPw9Fj2e48HpXIg5ikY7DyAO4lqBQD4Ev87IkU/JUE
JOQjOI7m57Th2ys5W5EfJoeYd0K08mPQMSrTdbQJrkwXZ90BdfrmPi5qz6uaqVXJ
dBGSBoOYyGCCZwpfJjG5Y4jkACjtwLTX85qZwTy6DnVnv1+fMSw4kbhFwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEUFy7zTIDwFRCDwP3o8Y1t/ZRF8MB8GA1UdIwQY
MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt
ZTE1OWNkNmYzNjU0LzEvUlFYTHZOTWdQQVZFSVBBX2VqeGpXMzlsRVh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0
LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXHdcAwQC
uQtUMA0GCSqGSIb3DQEBCwUAA4IBAQBDHN5BdLMaTd4lyngyPqRKYh7DmJEK5lEz
xJtSZ0m1B2ZSUQwhu1LCgzq727Q5KHInAhdOvZND7MpPR54/bkWjWSI5RHnznZ70
twJtfc4M7FE2bMZRZeAA5Y50T93mmuNhD97mIAmUm7+7PaPYD9V7wGWzL/eDKkVF
urYv+TSlF8//R4hhvZO5o1iHlHcHCa57HuOvXaUVZI8tp8UrLkSDsEx41IRSTDJF
D010mBZIC3XzphVw4jtjfh4+bbnMAU5Ug9el7sJpV3uTSapc4E+6+HzBCI1IBtbr
uGjJdIq7Go7foepGmV0ipeJ/yIpttt4r6DCGTER6h0a/GpBZpouu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:20 2024 by rpki-client on console-fra.rpki-client.org