Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/3WqE3FkPv85MY7AKMqTZ3RGyxdA.roa
File: 3WqE3FkPv85MY7AKMqTZ3RGyxdA.roa (raw, json)
Hash identifier: YnfsYuTSDQsFSduhIEF6Fmjhl7tFpeHwHv8s4CQD0dM=
Subject key identifier: DD:6A:84:DC:59:0F:BF:CE:4C:63:B0:0A:32:A4:D9:DD:11:B2:C5:D0
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01906D9CEBFC37C21E3BBEAC3E32D42325D4
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/3WqE3FkPv85MY7AKMqTZ3RGyxdA.roa
Signing time: Mon 01 Jul 2024 09:25:18 +0000
ROA not before: Mon 01 Jul 2024 09:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212163
IP address blocks: 92.55.198.0/23 maxlen: 23
92.55.198.0/24 maxlen: 24
92.55.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 10:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:9c:eb:fc:37:c2:1e:3b:be:ac:3e:32:d4:23:25:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jul 1 09:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd6a84dc590fbfce4c63b00a32a4d9dd11b2c5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:c4:56:85:cc:44:12:71:32:d4:9c:35:60:
3a:0e:1a:22:b1:4f:d4:6f:50:61:50:84:ba:bd:41:
3e:7f:29:00:3f:bb:fc:fe:81:7b:3c:84:f2:2b:56:
5f:8c:de:4e:de:6d:94:d4:32:d6:d1:b9:1b:f2:5f:
e8:38:a6:d5:92:b1:50:0d:07:e1:cb:d6:e4:1b:b4:
39:35:a5:68:5d:5b:47:fa:00:59:33:4e:87:ae:07:
4f:7a:cb:2b:28:87:23:8d:6f:8a:04:7e:63:d5:08:
12:19:42:4e:3c:aa:fb:e6:81:93:8e:28:ad:15:be:
50:25:17:31:58:4f:62:6d:4f:57:5c:f1:3a:f3:93:
02:6d:a7:c0:3e:c1:f0:0c:da:41:7c:8e:eb:8b:fc:
b8:af:42:71:b9:81:f5:d9:4e:aa:ba:49:77:19:11:
01:e8:01:eb:13:dc:24:17:7f:17:04:b1:e4:9e:27:
1b:c1:81:50:3e:5d:a5:b1:6b:ea:be:5b:ae:25:99:
ab:dc:82:1a:4a:9e:18:ff:32:73:f2:ef:12:42:e3:
72:8f:87:02:2d:16:0b:80:c6:32:99:bf:0d:4b:1e:
0b:34:cb:b4:d6:83:fd:7b:93:44:d8:0a:59:e4:4d:
f0:10:3b:98:09:79:f9:ae:e4:a1:ce:af:b7:ee:b7:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:84:DC:59:0F:BF:CE:4C:63:B0:0A:32:A4:D9:DD:11:B2:C5:D0
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/3WqE3FkPv85MY7AKMqTZ3RGyxdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.55.198.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:8c:64:b2:ab:cd:32:c3:e9:d9:37:c7:f3:29:ef:45:3b:2c:
d3:7c:bf:7b:25:c0:0e:b7:2b:eb:49:9b:74:4e:92:21:4a:9c:
63:db:37:34:b9:60:69:3d:9c:2d:31:bf:2c:12:c4:d8:0a:51:
af:8d:68:7d:1f:31:cf:a6:e2:0c:6f:d2:32:68:d1:b7:89:27:
13:b2:5e:e1:65:d1:94:b4:cd:68:68:fd:5f:f1:5e:26:b0:e7:
10:d4:82:12:f7:24:80:0d:79:d2:67:92:33:3e:74:28:24:c0:
97:f4:e6:d8:1b:c6:6f:e1:97:07:1d:fd:0d:a3:c8:74:6c:08:
cc:56:d6:85:5b:18:9c:46:f7:1e:ba:67:b4:ab:b5:d2:10:83:
3a:b6:5c:3a:b6:be:29:7e:bf:5c:20:a6:64:59:ae:c1:aa:b8:
67:54:11:cd:91:8c:b0:4e:a8:e0:0e:e2:03:50:77:ca:4e:98:
4c:0a:b9:65:77:03:c4:23:68:be:99:3d:35:02:8e:1b:ee:4a:
a8:77:50:98:d2:10:25:4e:17:fc:d3:17:e6:24:1e:ec:c5:fd:
18:64:f6:38:ae:14:0b:61:1c:09:d1:7e:50:e3:e1:0e:8a:5a:
cf:b3:48:76:ba:81:fb:97:3c:ce:19:bf:da:45:3d:f7:a6:d6:
54:cd:ef:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBtnOv8N8IeO76sPjLUIyXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjQwNzAxMDkyNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDZhODRkYzU5MGZiZmNlNGM2M2IwMGEzMmE0ZDlkZDExYjJjNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcfEVoXMRBJxMtScNWA6DhoisU/U
b1BhUIS6vUE+fykAP7v8/oF7PITyK1ZfjN5O3m2U1DLW0bkb8l/oOKbVkrFQDQfh
y9bkG7Q5NaVoXVtH+gBZM06HrgdPessrKIcjjW+KBH5j1QgSGUJOPKr75oGTjiit
Fb5QJRcxWE9ibU9XXPE685MCbafAPsHwDNpBfI7ri/y4r0JxuYH12U6qukl3GREB
6AHrE9wkF38XBLHknicbwYFQPl2lsWvqvluuJZmr3IIaSp4Y/zJz8u8SQuNyj4cC
LRYLgMYymb8NSx4LNMu01oP9e5NE2ApZ5E3wEDuYCXn5ruShzq+37rdiwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1qhNxZD7/OTGOwCjKk2d0RssXQMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvM1dxRTNGa1B2ODVNWTdBS01xVFozUkd5eGRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXDfGMA0G
CSqGSIb3DQEBCwUAA4IBAQDFjGSyq80yw+nZN8fzKe9FOyzTfL97JcAOtyvrSZt0
TpIhSpxj2zc0uWBpPZwtMb8sEsTYClGvjWh9HzHPpuIMb9IyaNG3iScTsl7hZdGU
tM1oaP1f8V4msOcQ1IIS9ySADXnSZ5IzPnQoJMCX9ObYG8Zv4ZcHHf0No8h0bAjM
VtaFWxicRvceume0q7XSEIM6tlw6tr4pfr9cIKZkWa7BqrhnVBHNkYywTqjgDuID
UHfKTphMCrlldwPEI2i+mT01Ao4b7kqod1CY0hAlThf80xfmJB7sxf0YZPY4rhQL
YRwJ0X5Q4+EOilrPs0h2uoH7lzzOGb/aRT33ptZUze/4
-----END CERTIFICATE-----
Generated at Mon Jul 1 12:40:59 2024 by rpki-client on console-ams.rpki-client.org