Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/HeFYbx5EBSz1KEDjw_Kx5C9HOlI.roa
File: HeFYbx5EBSz1KEDjw_Kx5C9HOlI.roa (raw, json)
Hash identifier: FiV+O4Sj441pFxn6jv3TRT55Q4M6SLaFLYinzOpbxak=
Subject key identifier: 1D:E1:58:6F:1E:44:05:2C:F5:28:40:E3:C3:F2:B1:E4:2F:47:3A:52
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01905F4690DAAEC41BE1BD2CAE023194AB32
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/HeFYbx5EBSz1KEDjw_Kx5C9HOlI.roa
Signing time: Fri 28 Jun 2024 14:36:18 +0000
ROA not before: Fri 28 Jun 2024 14:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214625
IP address blocks: 92.60.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 14:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:46:90:da:ae:c4:1b:e1:bd:2c:ae:02:31:94:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jun 28 14:36:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1de1586f1e44052cf52840e3c3f2b1e42f473a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:e6:d2:50:55:31:fb:3f:09:82:a5:c5:fc:
c9:cf:4f:5c:fe:1b:8f:1e:a8:88:74:5f:0a:1c:f0:
3d:70:a1:41:47:8f:95:9f:bc:bb:1a:23:b2:ff:d1:
61:31:6e:5e:1b:7e:99:7b:39:05:67:65:65:22:7e:
a9:a1:27:e3:81:ae:18:dd:e6:4a:51:78:ad:d4:0f:
5c:8c:d9:4f:7f:b0:58:7d:9c:e7:33:0e:6f:a1:bb:
16:b0:64:29:12:f4:8b:3c:d6:4e:e7:20:76:cd:d7:
7b:32:a8:e2:c4:ff:56:fe:da:0f:ff:2a:c2:16:1a:
ec:13:96:a8:53:fe:4e:f0:a7:0a:4d:98:e3:e7:02:
c7:bf:a5:93:f2:7f:9d:e8:41:d5:57:fe:ed:ad:54:
ff:fd:12:7c:b1:a9:e2:ff:84:aa:3a:fa:90:90:fe:
50:65:a0:07:a0:11:25:8a:97:b7:94:fb:83:c5:ee:
41:50:7c:e6:60:33:89:d3:1b:a7:36:a9:e9:15:a5:
fe:8c:dc:39:7b:a8:39:3f:61:4c:66:15:7f:52:f0:
36:de:ad:01:f1:29:02:45:6a:e1:89:7e:14:b1:17:
59:aa:f1:5d:e9:14:71:84:47:8e:34:6b:50:28:54:
7b:c9:d3:45:96:e4:60:10:94:f3:e0:f8:76:da:e3:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:58:6F:1E:44:05:2C:F5:28:40:E3:C3:F2:B1:E4:2F:47:3A:52
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/HeFYbx5EBSz1KEDjw_Kx5C9HOlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.69.0/24
Signature Algorithm: sha256WithRSAEncryption
31:68:01:fb:f7:7a:3b:da:d1:b2:00:76:40:92:c0:d0:4b:7c:
b3:ed:7f:a3:24:5f:60:c2:d6:f1:6d:91:a3:e1:04:86:57:1c:
71:38:93:79:b7:57:e4:30:19:17:f1:60:c8:78:cc:6e:20:da:
1d:48:8e:ef:fb:c9:27:8e:be:25:a3:82:6a:4b:89:73:cd:03:
5f:cb:78:71:3c:65:82:2e:d4:5f:48:5a:f7:d0:44:5a:fb:69:
21:ad:ec:31:02:6b:73:5b:f3:c5:7f:1c:5b:33:00:88:d9:dd:
48:97:f1:3a:ac:03:21:1f:64:a4:7b:8b:27:0b:44:47:d2:15:
4a:12:f3:75:cd:db:0f:9b:18:3e:3a:b0:89:af:59:27:ed:7a:
d0:23:20:21:96:63:89:82:a7:49:ba:2e:ab:f5:7b:3a:29:0c:
d8:6c:37:5a:3b:08:90:7f:c2:7b:32:54:14:b1:1c:8c:87:a7:
63:5b:08:96:d3:ac:5a:7e:42:b8:97:89:46:b2:7b:17:00:78:
6e:11:6b:45:dc:9e:f8:aa:6d:9d:c0:ff:6a:c7:00:e8:86:b6:
ac:ee:0c:ce:91:c1:29:61:db:a5:35:67:f9:59:eb:58:13:ff:
0f:09:f8:7f:6e:e8:81:71:e1:72:90:93:99:e8:02:2e:b8:01:
3c:f3:54:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBfRpDarsQb4b0srgIxlKsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjQwNjI4MTQzNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGUxNTg2ZjFlNDQwNTJjZjUyODQwZTNjM2YyYjFlNDJmNDczYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP7m0lBVMfs/CYKlxfzJz09c/huP
HqiIdF8KHPA9cKFBR4+Vn7y7GiOy/9FhMW5eG36ZezkFZ2VlIn6poSfjga4Y3eZK
UXit1A9cjNlPf7BYfZznMw5vobsWsGQpEvSLPNZO5yB2zdd7MqjixP9W/toP/yrC
FhrsE5aoU/5O8KcKTZjj5wLHv6WT8n+d6EHVV/7trVT//RJ8sani/4SqOvqQkP5Q
ZaAHoBElipe3lPuDxe5BUHzmYDOJ0xunNqnpFaX+jNw5e6g5P2FMZhV/UvA23q0B
8SkCRWrhiX4UsRdZqvFd6RRxhEeONGtQKFR7ydNFluRgEJTz4Ph22uPRHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB3hWG8eRAUs9ShA48PyseQvRzpSMB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvSGVGWWJ4NUVCU3oxS0VEandfS3g1QzlIT2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxFMA0G
CSqGSIb3DQEBCwUAA4IBAQAxaAH793o72tGyAHZAksDQS3yz7X+jJF9gwtbxbZGj
4QSGVxxxOJN5t1fkMBkX8WDIeMxuINodSI7v+8knjr4lo4JqS4lzzQNfy3hxPGWC
LtRfSFr30ERa+2khrewxAmtzW/PFfxxbMwCI2d1Il/E6rAMhH2Ske4snC0RH0hVK
EvN1zdsPmxg+OrCJr1kn7XrQIyAhlmOJgqdJui6r9Xs6KQzYbDdaOwiQf8J7MlQU
sRyMh6djWwiW06xafkK4l4lGsnsXAHhuEWtF3J74qm2dwP9qxwDohras7gzOkcEp
YdulNWf5WetYE/8PCfh/buiBceFykJOZ6AIuuAE881R3
Generated at Wed Nov 6 18:35:52 2024 by rpki-client on console-fra.rpki-client.org