Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/K9pNsbx2fbjN6a-52Z3gIfxaoDs.roa
File: K9pNsbx2fbjN6a-52Z3gIfxaoDs.roa (raw, json)
Hash identifier: Zh4j8tkXX2aWs4Qo0L3Ca8cYUQSuVdkuHeGuIPlEHzY=
Subject key identifier: 2B:DA:4D:B1:BC:76:7D:B8:CD:E9:AF:B9:D9:9D:E0:21:FC:5A:A0:3B
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 01869D838B600A57DD653FD4CBBDC0A1E69C
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/K9pNsbx2fbjN6a-52Z3gIfxaoDs.roa
Signing time: Wed 01 Mar 2023 14:11:29 +0000
ROA not before: Wed 01 Mar 2023 14:11:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44424
IP address blocks: 92.43.56.0/21 maxlen: 24
92.43.56.0/22 maxlen: 22
92.43.62.0/23 maxlen: 23
92.43.60.0/22 maxlen: 22
2a03:76e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:83:8b:60:0a:57:dd:65:3f:d4:cb:bd:c0:a1:e6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Mar 1 14:11:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bda4db1bc767db8cde9afb9d99de021fc5aa03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:9f:2b:e9:3d:1e:9a:81:ee:c3:b5:a5:3e:
4f:84:92:09:ab:b3:c0:d9:70:3a:ba:c9:27:02:82:
4a:5c:44:78:3f:25:fe:d8:f5:bc:95:d8:60:ee:d4:
3d:f0:d1:18:f8:c7:44:0c:7f:10:22:ff:b5:ab:04:
e2:0d:cc:27:27:b4:3a:1d:56:f1:ed:2a:8a:e6:f0:
d1:5f:be:09:8a:b6:2c:bb:26:5d:79:47:e6:fb:7b:
44:aa:a5:f6:1b:da:15:83:6b:6c:bf:f6:6a:98:89:
13:e0:7d:fd:9a:ab:d6:50:dc:a7:20:38:1f:50:92:
97:4c:01:0c:2d:39:7b:37:37:39:7a:0e:86:ea:7d:
f5:ad:65:e3:aa:e8:6b:7c:62:5a:14:e7:c4:28:14:
3d:e0:a2:f4:02:06:19:64:04:85:a2:25:46:f8:b1:
f3:4b:dc:d9:33:1b:c8:f1:1f:f1:fc:67:f4:bf:b9:
33:12:e1:9f:76:bf:89:39:d1:66:e4:54:cd:d5:e7:
86:fb:87:b5:34:68:29:35:87:e7:86:0e:3d:33:21:
26:14:41:81:10:2a:23:d9:87:79:2e:28:f1:8a:23:
fa:5a:e8:18:52:19:33:3a:d3:38:41:1f:f1:4e:e6:
82:02:0b:33:b2:6e:10:04:44:2e:d1:ea:c5:80:80:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:4D:B1:BC:76:7D:B8:CD:E9:AF:B9:D9:9D:E0:21:FC:5A:A0:3B
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/K9pNsbx2fbjN6a-52Z3gIfxaoDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.56.0/21
IPv6:
2a03:76e0::/32
Signature Algorithm: sha256WithRSAEncryption
85:09:51:ab:82:9f:50:73:5e:9b:a5:99:4a:db:c1:1a:2c:e0:
3d:0a:3e:d2:bb:cf:a4:7e:6e:2c:e9:20:5e:31:6d:b3:95:25:
2c:6e:d5:6f:99:f1:9b:a2:f4:1f:84:56:66:31:41:e2:c4:d7:
a1:b8:9b:69:2f:5d:90:0d:aa:50:73:91:2e:c1:e6:03:2a:66:
8a:d4:30:fe:fe:e6:51:ef:bd:5d:18:1c:ce:54:4d:1a:78:52:
c8:4a:55:45:ba:ac:61:83:cd:a9:c2:cd:8a:e4:41:9e:4c:18:
51:17:dc:37:d6:06:47:a5:ef:34:ab:d7:aa:48:f0:f2:d2:a9:
ee:08:4f:3f:a8:d0:43:33:4c:67:fd:d5:62:6f:5a:a4:76:b2:
3b:b4:b1:26:46:d4:85:49:1d:df:24:6a:53:90:71:b2:88:2f:
e0:69:1d:b9:2c:a6:7a:c9:fb:08:51:2f:a0:5f:fc:d6:c6:eb:
db:66:9b:4d:f3:5e:fd:af:f7:f2:a2:ab:09:ae:13:73:d8:29:
b1:33:9b:ee:8f:29:c4:a6:af:48:51:38:b8:76:ca:10:69:eb:
c5:94:b8:63:45:f8:dd:66:4e:a3:56:fe:02:81:69:9c:36:80:
10:8a:45:16:79:20:a8:ac:24:05:af:6f:7d:c0:09:b6:47:80:
9b:c2:61:da
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYadg4tgClfdZT/Uy73AoeacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx
MDc4YjYwHhcNMjMwMzAxMTQxMTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmRhNGRiMWJjNzY3ZGI4Y2RlOWFmYjlkOTlkZTAyMWZjNWFhMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0KfK+k9HpqB7sO1pT5PhJIJq7PA
2XA6usknAoJKXER4PyX+2PW8ldhg7tQ98NEY+MdEDH8QIv+1qwTiDcwnJ7Q6HVbx
7SqK5vDRX74JirYsuyZdeUfm+3tEqqX2G9oVg2tsv/ZqmIkT4H39mqvWUNynIDgf
UJKXTAEMLTl7Nzc5eg6G6n31rWXjquhrfGJaFOfEKBQ94KL0AgYZZASFoiVG+LHz
S9zZMxvI8R/x/Gf0v7kzEuGfdr+JOdFm5FTN1eeG+4e1NGgpNYfnhg49MyEmFEGB
ECoj2Yd5LijxiiP6WugYUhkzOtM4QR/xTuaCAgszsm4QBEQu0erFgIAYHwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCvaTbG8dn24zemvudmd4CH8WqA7MB8GA1UdIwQY
MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt
MjJkMTA2MzVmMGM0LzEvSzlwTnNieDJmYmpONmEtNTJaM2dJZnhhb0RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0
LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXCs4MA0E
AgACMAcDBQAqA3bgMA0GCSqGSIb3DQEBCwUAA4IBAQCFCVGrgp9Qc16bpZlK28Ea
LOA9Cj7Su8+kfm4s6SBeMW2zlSUsbtVvmfGbovQfhFZmMUHixNehuJtpL12QDapQ
c5EuweYDKmaK1DD+/uZR771dGBzOVE0aeFLISlVFuqxhg82pws2K5EGeTBhRF9w3
1gZHpe80q9eqSPDy0qnuCE8/qNBDM0xn/dVib1qkdrI7tLEmRtSFSR3fJGpTkHGy
iC/gaR25LKZ6yfsIUS+gX/zWxuvbZptN8179r/fyoqsJrhNz2CmxM5vujynEpq9I
UTi4dsoQaevFlLhjRfjdZk6jVv4CgWmcNoAQikUWeSCorCQFr299wAm2R4CbwmHa
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:49 2024 by rpki-client on console-fra.rpki-client.org