Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-fMJHnkaUS4LGrMzBTfehyFhkUM.roa
File: 1-fMJHnkaUS4LGrMzBTfehyFhkUM.roa (raw, json)
Hash identifier: b3J4I+PmBBgpsa8zLDtnnZ3A+39hcl5ZsQM1AXW3NuA=
Subject key identifier: F9:F3:09:1E:79:1A:51:2E:0B:1A:B3:33:05:37:DE:87:21:61:91:43
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B16968DF96E2ADEA3D2C156DC49A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-fMJHnkaUS4LGrMzBTfehyFhkUM.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 92.61.98.0/24 maxlen: 24
92.61.96.0/24 maxlen: 24
92.61.99.0/24 maxlen: 24
92.61.100.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b1:69:68:df:96:e2:ad:ea:3d:2c:15:6d:c4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9f3091e791a512e0b1ab3330537de8721619143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:a6:de:2e:f6:dc:f8:8a:30:73:09:22:02:
de:f6:e1:b7:b8:35:7e:50:5b:76:2d:48:50:8d:4c:
82:c1:30:47:c8:d4:54:ca:89:85:51:16:a6:e9:eb:
d5:4a:b1:45:fa:96:f1:fd:04:85:13:6d:c5:c7:d3:
a0:a9:43:e8:77:f6:21:71:fb:4e:ea:34:e7:26:69:
bc:a0:c7:32:4a:08:c9:d2:4d:0c:73:96:d4:44:b7:
32:d9:7f:70:79:7c:f1:48:68:f0:71:ef:bd:5b:cf:
ce:28:18:96:af:8f:87:12:cc:fb:ef:5a:88:36:72:
f3:15:70:c0:39:e1:ed:03:34:ef:1d:b5:54:c2:7e:
ec:44:2a:2f:bd:3f:2b:de:bd:81:0e:ee:0d:8f:43:
a2:79:b1:04:34:27:7b:47:6e:6f:7e:c3:9c:3c:2b:
e0:ae:39:b2:c6:91:ee:8b:26:a7:31:70:e5:1f:7f:
50:40:da:86:ad:8c:e4:55:22:f1:45:ec:1e:fd:5c:
a6:72:47:7d:ab:be:99:60:7f:f1:fb:12:03:fa:52:
47:70:16:56:4b:7f:c6:1b:73:fd:54:7e:6e:e0:87:
c7:fd:6e:3f:a2:95:d3:b2:26:43:4a:37:5f:8b:d5:
09:b4:b5:8e:3e:4e:6b:60:71:13:da:f7:29:6f:08:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:09:1E:79:1A:51:2E:0B:1A:B3:33:05:37:DE:87:21:61:91:43
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-fMJHnkaUS4LGrMzBTfehyFhkUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.96.0/24
92.61.98.0-92.61.101.255
Signature Algorithm: sha256WithRSAEncryption
c4:88:25:99:4a:2c:ad:2c:d4:a2:08:f9:e3:fc:09:86:da:a8:
e0:c5:f5:dc:ac:d3:ff:4e:9a:a2:ab:9a:ca:8b:2f:e5:7b:0f:
2e:e4:36:d5:c7:3d:b0:18:f6:9e:81:03:bb:9d:4e:fe:b8:18:
b7:57:ac:a8:5f:9e:d3:9c:c0:28:db:9c:45:1b:26:3c:5c:b2:
b9:27:27:da:1c:e2:34:f0:9e:42:e9:65:3a:ce:0c:a9:ae:ae:
1c:a6:c8:50:4a:76:14:33:1f:b7:19:1c:89:8b:f5:fd:79:15:
42:9e:22:76:92:8f:48:d3:45:05:dd:1d:e4:60:b9:0a:f9:98:
8d:17:33:10:19:d3:20:cb:1f:93:8b:22:85:bd:05:c2:fb:ab:
7c:2e:c1:4c:a1:d2:0d:02:1d:4f:8e:2f:6b:43:ff:6e:41:7c:
e5:39:a0:02:17:d0:ac:b5:fd:42:73:c9:99:f3:cc:5c:dc:41:
fe:1a:b9:14:cd:6d:7c:6e:fc:65:da:73:a7:85:9f:58:e2:99:
0a:26:fb:25:0c:8a:d4:3a:4c:dc:13:03:d8:6b:09:b7:f3:d8:
41:0f:ff:16:b2:63:4c:41:42:21:47:7b:79:30:d8:ec:e3:ad:
56:03:c3:dd:96:d5:f7:1f:84:e9:d0:2b:38:38:e6:6b:d4:40:
10:82:24:7b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFALFpaN+W4q3qPSwVbcSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjQwMTAxMTIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWYzMDkxZTc5MWE1MTJlMGIxYWIzMzMwNTM3ZGU4NzIxNjE5MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPGm3i723PiKMHMJIgLe9uG3uDV+
UFt2LUhQjUyCwTBHyNRUyomFURam6evVSrFF+pbx/QSFE23Fx9OgqUPod/YhcftO
6jTnJmm8oMcySgjJ0k0Mc5bURLcy2X9weXzxSGjwce+9W8/OKBiWr4+HEsz771qI
NnLzFXDAOeHtAzTvHbVUwn7sRCovvT8r3r2BDu4Nj0OiebEENCd7R25vfsOcPCvg
rjmyxpHuiyanMXDlH39QQNqGrYzkVSLxRewe/Vymckd9q76ZYH/x+xID+lJHcBZW
S3/GG3P9VH5u4IfH/W4/opXTsiZDSjdfi9UJtLWOPk5rYHET2vcpbwj1eQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPnzCR55GlEuCxqzMwU33ochYZFDMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvMS1mTUpIbmthVVM0TEdyTXpCVGZlaHlGaGtVTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDQvOThhNWVkLTkwNWUtNGJmYS05MTU0LWYxYzMzYWEyZmQ1
MC8xL1pCbDFXRHNsQTJMSUZROWpyYk1LRDJvTWI4TS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAFw9YDAM
AwQBXD1iAwQBXD1kMA0GCSqGSIb3DQEBCwUAA4IBAQDEiCWZSiytLNSiCPnj/AmG
2qjgxfXcrNP/Tpqiq5rKiy/lew8u5DbVxz2wGPaegQO7nU7+uBi3V6yoX57TnMAo
25xFGyY8XLK5JyfaHOI08J5C6WU6zgyprq4cpshQSnYUMx+3GRyJi/X9eRVCniJ2
ko9I00UF3R3kYLkK+ZiNFzMQGdMgyx+TiyKFvQXC+6t8LsFModINAh1Pji9rQ/9u
QXzlOaACF9Cstf1Cc8mZ88xc3EH+GrkUzW18bvxl2nOnhZ9Y4pkKJvslDIrUOkzc
EwPYawm389hBD/8WsmNMQUIhR3t5MNjs461WA8PdltX3H4Tp0Cs4OOZr1EAQgiR7
Generated at Wed Jan 3 07:14:54 2024 by rpki-client on console-fra.rpki-client.org