Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5n9D9iyejob0dA8hQR-aDSgWg-Q.roa
File: 5n9D9iyejob0dA8hQR-aDSgWg-Q.roa (raw, json)
Hash identifier: Pnig7TESRyocnO7cBtk9dkLSwDwoItZCT3AzKnpF6mI=
Subject key identifier: E6:7F:43:F6:2C:9E:8E:86:F4:74:0F:21:41:1F:9A:0D:28:16:83:E4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B6B08C8B728C67BD3CD636F54D75C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5n9D9iyejob0dA8hQR-aDSgWg-Q.roa
Signing time: Tue 02 Jan 2024 12:34:52 +0000
ROA not before: Tue 02 Jan 2024 12:34:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398129
IP address blocks: 92.119.148.0/24 maxlen: 32
185.240.217.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:6b:08:c8:b7:28:c6:7b:d3:cd:63:6f:54:d7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e67f43f62c9e8e86f4740f21411f9a0d281683e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:6e:66:51:70:fb:c4:cb:db:a5:be:3a:59:
48:fb:10:02:4e:e6:a7:a3:ba:e3:60:b8:45:fc:3e:
e6:03:fb:72:0f:f2:2a:d6:52:a4:61:cd:b9:59:bd:
5c:f4:2a:f5:8e:d3:69:93:36:94:d6:5f:6e:a1:bf:
c1:fd:0a:52:be:38:23:78:00:95:a3:2d:60:51:e0:
f2:d6:53:63:49:ad:09:e5:3b:b7:db:51:f4:ac:46:
98:9a:c0:93:60:e9:bf:a6:ec:19:f5:48:eb:1e:83:
32:e6:28:95:e7:c4:e7:a6:cb:a4:d2:67:81:95:8d:
e3:9d:58:39:3a:c8:91:89:58:d6:47:06:20:52:a0:
1b:21:c5:4f:eb:54:e3:f0:ab:37:3b:f9:2d:21:28:
c9:61:81:13:44:be:69:09:09:a9:8d:8f:f3:30:f6:
d8:53:90:f8:37:91:38:a8:23:ee:9c:95:b2:3a:19:
52:af:5d:52:f6:87:d2:a1:a2:84:68:85:04:7f:f7:
0c:38:13:a2:90:da:0b:38:38:30:d5:fd:96:22:b7:
a9:56:cd:e6:78:64:24:62:bc:75:9b:0e:82:a5:34:
c8:30:b0:d4:82:50:2f:45:db:9d:92:e3:54:c3:55:
37:a1:1d:36:73:c7:43:b6:cc:6e:9a:39:78:cf:23:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:43:F6:2C:9E:8E:86:F4:74:0F:21:41:1F:9A:0D:28:16:83:E4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5n9D9iyejob0dA8hQR-aDSgWg-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.148.0/24
185.240.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ab:90:9e:b4:ce:1b:02:2e:9a:4a:0a:75:38:d1:b6:b5:a1:
62:12:76:f8:09:70:58:68:16:b5:7a:e4:2e:ce:75:63:3d:bb:
95:e1:47:7a:a6:c5:64:7c:69:6b:13:e8:28:8e:47:d6:fa:7d:
98:9e:40:e7:7c:12:5d:dc:05:78:2f:1f:2f:f6:4b:7b:b7:dd:
84:95:b5:c8:da:7b:c7:cc:34:d4:c4:84:b9:83:33:1c:7c:40:
12:2c:0d:3f:10:32:9a:c6:d3:75:56:c2:80:b8:6d:1e:3e:ec:
8c:96:04:94:81:d7:4e:8b:46:e6:bb:f4:1f:a9:70:c8:b7:74:
ec:cc:6d:ac:e7:6a:96:b9:f7:67:e2:2b:0c:9b:e3:42:26:7d:
40:0a:a7:b1:56:52:4f:d8:a0:49:17:bc:f5:8e:2f:91:e0:fd:
e5:24:ce:ec:96:99:7a:93:10:66:85:33:7a:80:92:1b:b3:35:
08:43:cb:24:0e:35:fd:09:fe:c1:c1:63:d9:c0:8d:f7:4e:b7:
38:9e:fd:11:30:4f:34:e7:d9:70:1c:21:65:6e:80:4e:30:8c:
13:0b:04:44:f2:02:aa:53:1b:86:43:b5:4e:77:85:0b:28:7d:
2d:6c:ac:5b:b6:c7:40:4e:fe:dd:30:1c:12:fe:4b:e0:9f:08:
80:be:d8:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKK2sIyLcoxnvTzWNvVNdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjQwMTAyMTIzNDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjdmNDNmNjJjOWU4ZTg2ZjQ3NDBmMjE0MTFmOWEwZDI4MTY4M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo5uZlFw+8TL26W+OllI+xACTuan
o7rjYLhF/D7mA/tyD/Iq1lKkYc25Wb1c9Cr1jtNpkzaU1l9uob/B/QpSvjgjeACV
oy1gUeDy1lNjSa0J5Tu321H0rEaYmsCTYOm/puwZ9UjrHoMy5iiV58Tnpsuk0meB
lY3jnVg5OsiRiVjWRwYgUqAbIcVP61Tj8Ks3O/ktISjJYYETRL5pCQmpjY/zMPbY
U5D4N5E4qCPunJWyOhlSr11S9ofSoaKEaIUEf/cMOBOikNoLODgw1f2WIrepVs3m
eGQkYrx1mw6CpTTIMLDUglAvRdudkuNUw1U3oR02c8dDtsxumjl4zyM+EwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOZ/Q/Ysno6G9HQPIUEfmg0oFoPkMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvNW45RDlpeWVqb2IwZEE4aFFSLWFEU2dXZy1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXHeUAwQA
ufDZMA0GCSqGSIb3DQEBCwUAA4IBAQC4q5CetM4bAi6aSgp1ONG2taFiEnb4CXBY
aBa1euQuznVjPbuV4Ud6psVkfGlrE+gojkfW+n2YnkDnfBJd3AV4Lx8v9kt7t92E
lbXI2nvHzDTUxIS5gzMcfEASLA0/EDKaxtN1VsKAuG0ePuyMlgSUgddOi0bmu/Qf
qXDIt3TszG2s52qWufdn4isMm+NCJn1ACqexVlJP2KBJF7z1ji+R4P3lJM7slpl6
kxBmhTN6gJIbszUIQ8skDjX9Cf7BwWPZwI33Trc4nv0RME8059lwHCFlboBOMIwT
CwRE8gKqUxuGQ7VOd4ULKH0tbKxbtsdATv7dMBwS/kvgnwiAvtgD
-----END CERTIFICATE-----
Generated at Fri Jan 5 14:17:38 2024 by rpki-client on console-ams.rpki-client.org