Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/rNMqO3nA9vDvUbpK8rpXr5u_Zfo.roa
File: rNMqO3nA9vDvUbpK8rpXr5u_Zfo.roa (raw, json)
Hash identifier: WQpaRWtojxPLp0wFDQdQWaGX8q+CpQHBvZhBm1TbYxE=
Subject key identifier: AC:D3:2A:3B:79:C0:F6:F0:EF:51:BA:4A:F2:BA:57:AF:9B:BF:65:FA
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 01856BDC7E9CE15667F75A253C94A89D090B
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/rNMqO3nA9vDvUbpK8rpXr5u_Zfo.roa
Signing time: Sun 01 Jan 2023 05:44:50 +0000
ROA not before: Sun 01 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.239.93.0/24 maxlen: 24
185.239.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:7e:9c:e1:56:67:f7:5a:25:3c:94:a8:9d:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Jan 1 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acd32a3b79c0f6f0ef51ba4af2ba57af9bbf65fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:99:58:cd:8c:25:b4:f6:cb:94:9e:6b:60:
38:27:8b:fd:ff:bf:b4:65:e0:f5:90:b3:11:4f:c2:
80:db:b8:42:3d:7b:c1:41:93:28:92:5c:3e:ab:b1:
da:eb:fc:79:de:96:95:02:bc:51:3b:e4:2d:f1:6f:
9d:3b:a6:76:0e:24:0f:9d:92:8f:40:5e:a5:f1:e5:
5e:96:25:60:94:a3:19:5e:23:6d:b5:c3:b3:61:c5:
3e:39:72:fa:fc:c8:46:de:b7:d9:53:0a:eb:ed:9e:
c9:a5:53:4d:3f:9b:3e:2a:f4:9d:e5:14:05:77:55:
40:fe:1e:49:67:b1:ab:1e:75:fc:ea:6e:33:69:86:
02:f0:3e:2e:bd:55:32:ef:ad:74:a1:7d:e4:78:03:
73:f6:84:b5:e1:6e:f5:64:2e:8b:b2:6c:f7:6c:18:
72:f3:56:8e:f6:5f:df:8b:4a:7c:01:72:d3:5e:ad:
61:42:4d:9f:ec:18:86:61:a0:51:1f:b3:73:a8:dc:
02:7d:8e:55:9c:48:c1:94:12:92:af:7c:b7:29:bb:
53:0e:39:38:8a:90:91:2f:7a:af:31:b6:cd:57:c5:
72:8c:40:14:a2:da:98:a4:3d:5e:35:b3:6c:0b:b5:
26:bb:96:63:97:53:1e:1d:2b:ea:ff:a4:aa:bb:5d:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:2A:3B:79:C0:F6:F0:EF:51:BA:4A:F2:BA:57:AF:9B:BF:65:FA
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/rNMqO3nA9vDvUbpK8rpXr5u_Zfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.92.0/22
Signature Algorithm: sha256WithRSAEncryption
42:01:de:cc:44:76:51:d0:77:a8:8a:0f:ad:76:33:49:db:75:
ce:1e:c4:0a:e8:2b:af:49:9d:3d:f7:f7:72:8a:5c:fd:55:33:
c7:27:c3:40:77:c1:e7:2e:2b:96:c5:a1:86:06:a9:90:78:db:
89:8c:6b:73:a8:74:50:50:15:30:02:d6:a8:6a:d3:35:14:46:
41:c9:a9:22:54:61:ba:9a:aa:a2:c2:d0:f4:07:35:8f:c9:07:
77:ae:cf:16:5e:dd:e5:78:63:b4:d7:dc:41:36:28:1c:2c:48:
b9:26:98:d3:d7:21:ce:a4:fa:2b:a0:ad:0f:65:52:22:57:22:
8a:bd:48:fb:84:67:c5:55:8f:cb:70:41:f4:e0:c7:c9:3a:46:
ca:6d:2b:8e:b9:ce:6a:11:c6:a1:41:01:79:97:69:f4:d4:22:
61:32:cb:a9:cb:7d:15:49:8a:11:5f:5f:be:59:d9:41:9b:0e:
ed:02:5b:0b:f0:5f:b9:12:10:62:fe:2e:d3:88:69:63:9a:66:
cb:aa:07:d9:c3:5d:4e:7b:3a:14:de:6f:0c:ba:6e:92:71:34:
47:e4:87:61:65:ae:6a:6b:80:c9:06:88:57:ff:c1:96:0f:67:
e2:75:18:9c:9a:89:34:74:8a:ff:aa:96:e3:9a:89:13:57:ce:
9c:f4:2e:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3H6c4VZn91olPJSonQkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDUyM2Y4ODExZWJlNWFhMzU5ODUxMWE0OGYzYmFmMDAw
MWE4ZTgwHhcNMjMwMTAxMDU0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2QzMmEzYjc5YzBmNmYwZWY1MWJhNGFmMmJhNTdhZjliYmY2NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbeZWM2MJbT2y5Sea2A4J4v9/7+0
ZeD1kLMRT8KA27hCPXvBQZMoklw+q7Ha6/x53paVArxRO+Qt8W+dO6Z2DiQPnZKP
QF6l8eVeliVglKMZXiNttcOzYcU+OXL6/MhG3rfZUwrr7Z7JpVNNP5s+KvSd5RQF
d1VA/h5JZ7GrHnX86m4zaYYC8D4uvVUy7610oX3keANz9oS14W71ZC6Lsmz3bBhy
81aO9l/fi0p8AXLTXq1hQk2f7BiGYaBRH7NzqNwCfY5VnEjBlBKSr3y3KbtTDjk4
ipCRL3qvMbbNV8VyjEAUotqYpD1eNbNsC7Umu5Zjl1MeHSvq/6Squ11Y5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzTKjt5wPbw71G6SvK6V6+bv2X6MB8GA1UdIwQY
MBaAFFBFI/iBHr5ao1mFEaSPO68AAajoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUt
YmYzZjYyYjk1ZjEwLzEvck5NcU8zbkE5dkR2VWJwSzhycFhyNXVfWmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUtYmYzZjYyYjk1ZjEw
LzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue9cMA0G
CSqGSIb3DQEBCwUAA4IBAQBCAd7MRHZR0Heoig+tdjNJ23XOHsQK6CuvSZ099/dy
ilz9VTPHJ8NAd8HnLiuWxaGGBqmQeNuJjGtzqHRQUBUwAtaoatM1FEZByakiVGG6
mqqiwtD0BzWPyQd3rs8WXt3leGO019xBNigcLEi5JpjT1yHOpPoroK0PZVIiVyKK
vUj7hGfFVY/LcEH04MfJOkbKbSuOuc5qEcahQQF5l2n01CJhMsupy30VSYoRX1++
WdlBmw7tAlsL8F+5EhBi/i7TiGljmmbLqgfZw11OezoU3m8Mum6ScTRH5IdhZa5q
a4DJBohX/8GWD2fidRicmok0dIr/qpbjmokTV86c9C5f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org