Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uom6AVzEKbCR4-WbyXMDu_P9dkY.roa
File: uom6AVzEKbCR4-WbyXMDu_P9dkY.roa (raw, json)
Hash identifier: QQYomw+x6MJfuSeM5XQqDMddZ1Kp9wUfsdCBXj0x0s8=
Subject key identifier: BA:89:BA:01:5C:C4:29:B0:91:E3:E5:9B:C9:73:03:BB:F3:FD:76:46
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018977C59FA2AE2F339E93A3CE900B76E6C1
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uom6AVzEKbCR4-WbyXMDu_P9dkY.roa
Signing time: Fri 21 Jul 2023 09:26:27 +0000
ROA not before: Fri 21 Jul 2023 09:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 92.61.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 05:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:c5:9f:a2:ae:2f:33:9e:93:a3:ce:90:0b:76:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 21 09:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba89ba015cc429b091e3e59bc97303bbf3fd7646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:61:eb:e6:5e:47:25:1c:21:cf:50:4d:d4:
8d:67:dc:cb:ea:a5:fe:51:84:c8:65:8d:cf:16:15:
3c:bb:85:34:ba:8a:de:35:1f:42:0a:cd:51:29:6a:
a0:6b:d3:47:e6:ba:91:91:29:2f:91:5a:bf:7e:00:
9a:6f:bc:e0:ac:d1:e0:73:51:ca:c6:df:0e:a7:cf:
c5:6a:23:e8:37:36:c9:80:91:93:c5:fa:10:f7:4a:
37:9c:1b:2c:44:a5:ae:c9:31:45:88:31:3d:cc:fd:
01:30:d9:60:d7:0e:48:48:d4:ef:79:4e:7c:01:85:
90:aa:65:78:0f:57:ed:3f:f0:07:07:bc:88:3a:96:
a1:1f:4e:e5:a8:af:97:4a:b8:6e:40:91:8d:cf:92:
ce:10:f1:08:dd:ca:f2:cd:09:e2:ed:bc:bc:78:d3:
a1:55:99:31:eb:83:90:f4:e1:a7:9e:09:f5:3c:14:
bb:06:8e:11:38:86:a3:5e:9c:5c:9b:7e:6a:99:b5:
e4:2d:33:f2:e0:c1:9f:3d:11:af:71:ca:c6:f2:b0:
5f:e7:4a:d3:b3:60:da:26:a7:ed:a2:85:ca:1d:45:
a2:9b:1b:12:0f:31:3e:42:55:0b:42:24:dc:89:94:
8f:b1:e3:73:35:b9:2c:1f:82:00:9e:03:b2:ea:e5:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:89:BA:01:5C:C4:29:B0:91:E3:E5:9B:C9:73:03:BB:F3:FD:76:46
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uom6AVzEKbCR4-WbyXMDu_P9dkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
76:22:2e:45:60:0c:75:45:c9:6f:9f:02:2b:5c:eb:89:82:2b:
b5:dc:b3:aa:b6:f8:43:e8:70:31:f8:65:53:66:b9:79:3c:8f:
c6:24:06:9d:96:3b:c1:8c:56:2d:55:e8:9c:d6:e0:53:3e:a3:
fa:94:06:6a:d5:d4:a5:61:26:2f:fb:16:ff:f4:02:b2:35:f4:
05:eb:04:a5:ec:da:1e:28:ff:8b:95:e5:a2:b6:e2:60:73:31:
f1:32:88:f9:4e:01:aa:56:6a:d4:cf:e2:60:d3:9c:d9:d4:59:
1c:37:57:51:ba:d6:5f:b2:74:1b:a1:be:fe:37:f2:96:95:41:
f0:28:69:60:95:b4:83:a8:cb:6e:c1:67:a6:cd:fa:eb:94:4c:
ff:2d:73:e6:43:e7:d1:e8:ca:55:eb:d3:22:eb:2b:83:20:ed:
0a:9a:d8:7f:9f:1a:4d:29:aa:36:2e:43:ae:55:b9:75:67:cd:
12:80:ba:54:8c:bb:cc:83:06:26:58:34:39:a1:90:87:26:19:
af:cf:2c:d3:17:cd:52:a1:c1:f9:2d:31:e9:1e:47:bd:e5:d1:
66:48:9b:86:cd:e9:3e:4b:1d:53:f4:d5:7e:41:d7:74:50:88:
e7:34:2e:cd:34:a3:e8:a2:c6:da:ce:3f:08:4f:c8:24:81:e6:
e6:b0:69:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYl3xZ+iri8znpOjzpALdubBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjMwNzIxMDkyNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTg5YmEwMTVjYzQyOWIwOTFlM2U1OWJjOTczMDNiYmYzZmQ3NjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirJh6+ZeRyUcIc9QTdSNZ9zL6qX+
UYTIZY3PFhU8u4U0uoreNR9CCs1RKWqga9NH5rqRkSkvkVq/fgCab7zgrNHgc1HK
xt8Op8/FaiPoNzbJgJGTxfoQ90o3nBssRKWuyTFFiDE9zP0BMNlg1w5ISNTveU58
AYWQqmV4D1ftP/AHB7yIOpahH07lqK+XSrhuQJGNz5LOEPEI3cryzQni7by8eNOh
VZkx64OQ9OGnngn1PBS7Bo4ROIajXpxcm35qmbXkLTPy4MGfPRGvccrG8rBf50rT
s2DaJqftooXKHUWimxsSDzE+QlULQiTciZSPseNzNbksH4IAngOy6uVBdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqJugFcxCmwkePlm8lzA7vz/XZGMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvdW9tNkFWekVLYkNSNC1XYnlYTUR1X1A5ZGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD1mMA0G
CSqGSIb3DQEBCwUAA4IBAQB2Ii5FYAx1RclvnwIrXOuJgiu13LOqtvhD6HAx+GVT
Zrl5PI/GJAadljvBjFYtVeic1uBTPqP6lAZq1dSlYSYv+xb/9AKyNfQF6wSl7Noe
KP+LleWituJgczHxMoj5TgGqVmrUz+Jg05zZ1FkcN1dRutZfsnQbob7+N/KWlUHw
KGlglbSDqMtuwWemzfrrlEz/LXPmQ+fR6MpV69Mi6yuDIO0Kmth/nxpNKao2LkOu
Vbl1Z80SgLpUjLvMgwYmWDQ5oZCHJhmvzyzTF81SocH5LTHpHke95dFmSJuGzek+
Sx1T9NV+Qdd0UIjnNC7NNKPoosbazj8IT8gkgebmsGk0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org