Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fTQEqk9KjV_0IuABLiLoEV9kULk.roa
File: fTQEqk9KjV_0IuABLiLoEV9kULk.roa (raw, json)
Hash identifier: sLoAG3mrVnf4sEGNOHIIfprTzWi1PY7Y0foTQPh9wbs=
Subject key identifier: 7D:34:04:AA:4F:4A:8D:5F:F4:22:E0:01:2E:22:E8:11:5F:64:50:B9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018C693E18CB12A3B7F278A6C7B35C101E3A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fTQEqk9KjV_0IuABLiLoEV9kULk.roa
Signing time: Thu 14 Dec 2023 16:52:06 +0000
ROA not before: Thu 14 Dec 2023 16:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216326
IP address blocks: 92.52.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:3e:18:cb:12:a3:b7:f2:78:a6:c7:b3:5c:10:1e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 14 16:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d3404aa4f4a8d5ff422e0012e22e8115f6450b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:e2:47:9c:0d:2a:67:e7:16:31:f2:04:14:
05:6f:7f:2b:d4:6a:ae:8a:be:aa:88:16:af:9c:83:
14:f7:d6:a0:c1:d3:42:7b:ad:51:a6:79:5e:11:16:
c0:ff:98:a0:25:b5:70:8c:1c:9c:07:75:5d:2b:5a:
98:be:1c:ab:d8:d1:06:ff:99:bf:a6:f0:0e:f5:0d:
4f:41:ca:ad:27:a2:d9:75:84:87:31:cf:ca:57:60:
8a:23:bb:b2:cb:40:fa:e2:aa:3d:95:da:c7:9a:d0:
e6:28:ab:da:f5:a2:06:30:83:d8:23:bd:e5:30:e4:
8f:5d:00:7c:fb:41:9b:8b:a9:4e:a1:0f:42:19:34:
79:77:f9:37:dc:51:12:68:59:15:d9:ae:ce:41:5a:
1c:a7:5b:64:d7:08:02:6b:a9:87:c5:34:71:69:0f:
cc:a0:50:cb:b9:91:71:a9:84:6e:d6:e8:b7:bf:54:
80:29:1c:f4:d0:19:21:96:b7:eb:aa:d9:b1:1d:90:
01:e8:89:31:04:37:c9:ac:af:9f:d9:ce:44:0c:2e:
31:3a:94:dd:4c:64:8c:54:e8:0e:61:7b:50:d4:18:
68:a9:cc:df:94:ba:55:70:32:4a:a5:d6:ca:4b:2d:
30:60:03:67:ea:2c:87:9e:b4:f9:cf:2d:1a:4e:d0:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:04:AA:4F:4A:8D:5F:F4:22:E0:01:2E:22:E8:11:5F:64:50:B9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fTQEqk9KjV_0IuABLiLoEV9kULk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b6:ee:18:d8:b5:11:a9:6e:7e:4b:9a:ef:c9:8f:f6:bd:f2:
ce:e8:07:55:cd:0b:ef:06:b0:9d:b6:b4:ba:05:da:05:1d:0e:
30:30:62:ca:47:6b:f7:3b:47:b0:43:6d:0d:00:de:4b:91:78:
c2:b6:21:d2:f7:0d:82:74:c7:10:69:3d:29:37:34:59:dd:19:
04:ce:bb:66:cf:a8:c8:a1:f2:d7:c0:6c:4f:26:53:b3:ff:d2:
82:b7:7a:52:35:b3:ae:92:13:4b:65:0f:62:8d:e4:c5:26:94:
e5:b6:84:6a:1e:97:27:fe:e2:47:4d:cd:89:d4:99:a3:18:e0:
77:75:b9:d4:32:3c:e1:20:3c:9e:af:60:26:a6:ee:52:27:14:
ef:cc:5d:06:fb:f8:12:c9:9b:f2:2e:b5:c1:6a:31:3b:6e:ca:
2f:da:0b:f9:7c:9d:c6:17:b6:41:15:d7:b8:ab:44:3e:f7:35:
ba:bc:4b:2a:67:31:a4:6c:c9:7b:11:1e:0f:75:a0:97:ac:ea:
a3:f5:96:0b:fe:7e:94:6c:95:3b:de:ce:ac:1e:28:1a:3c:f9:
c1:ca:1a:22:e2:49:05:ef:a1:48:90:25:dd:b8:28:c0:c0:17:
01:e4:3d:44:62:94:09:bc:e5:ab:bb:a9:dc:4d:ca:3c:ac:2b:
e8:38:8a:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxpPhjLEqO38nimx7NcEB46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMxMjE0MTY1MjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDM0MDRhYTRmNGE4ZDVmZjQyMmUwMDEyZTIyZTgxMTVmNjQ1MGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkXiR5wNKmfnFjHyBBQFb38r1Gqu
ir6qiBavnIMU99agwdNCe61RpnleERbA/5igJbVwjBycB3VdK1qYvhyr2NEG/5m/
pvAO9Q1PQcqtJ6LZdYSHMc/KV2CKI7uyy0D64qo9ldrHmtDmKKva9aIGMIPYI73l
MOSPXQB8+0Gbi6lOoQ9CGTR5d/k33FESaFkV2a7OQVocp1tk1wgCa6mHxTRxaQ/M
oFDLuZFxqYRu1ui3v1SAKRz00BkhlrfrqtmxHZAB6IkxBDfJrK+f2c5EDC4xOpTd
TGSMVOgOYXtQ1BhoqczflLpVcDJKpdbKSy0wYANn6iyHnrT5zy0aTtCCuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH00BKpPSo1f9CLgAS4i6BFfZFC5MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZlRRRXFrOUtqVl8wSXVBQkxpTG9FVjlrVUxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDTaMA0G
CSqGSIb3DQEBCwUAA4IBAQAvtu4Y2LURqW5+S5rvyY/2vfLO6AdVzQvvBrCdtrS6
BdoFHQ4wMGLKR2v3O0ewQ20NAN5LkXjCtiHS9w2CdMcQaT0pNzRZ3RkEzrtmz6jI
ofLXwGxPJlOz/9KCt3pSNbOukhNLZQ9ijeTFJpTltoRqHpcn/uJHTc2J1JmjGOB3
dbnUMjzhIDyer2Ampu5SJxTvzF0G+/gSyZvyLrXBajE7bsov2gv5fJ3GF7ZBFde4
q0Q+9zW6vEsqZzGkbMl7ER4PdaCXrOqj9ZYL/n6UbJU73s6sHigaPPnByhoi4kkF
76FIkCXduCjAwBcB5D1EYpQJvOWru6ncTco8rCvoOIrk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org