Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/Ki47oOqzpWn5LNwgJbuCekFK4nQ.roa
File: Ki47oOqzpWn5LNwgJbuCekFK4nQ.roa (raw, json)
Hash identifier: 2tPg3FaQ5V9hHBbRK2OFOFDb/crt3+RgsF36/7wm7PY=
Subject key identifier: 2A:2E:3B:A0:EA:B3:A5:69:F9:2C:DC:20:25:BB:82:7A:41:4A:E2:74
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 01856BEED59402ED75C8EFA565CCC810C458
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/Ki47oOqzpWn5LNwgJbuCekFK4nQ.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44424
IP address blocks: 92.43.56.0/22 maxlen: 22
92.43.56.0/21 maxlen: 21
92.43.62.0/23 maxlen: 23
92.43.60.0/22 maxlen: 22
2a03:76e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Mar 2023 14:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d5:94:02:ed:75:c8:ef:a5:65:cc:c8:10:c4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a2e3ba0eab3a569f92cdc2025bb827a414ae274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:b7:0d:05:1c:ba:5f:4e:32:5c:13:83:2f:
36:4d:4c:26:5b:ca:00:70:b8:89:5f:54:fd:4f:b5:
91:fa:49:d2:fe:8d:bb:99:8d:63:60:16:53:2d:90:
61:9f:04:1f:17:29:94:e3:ba:03:1c:f5:97:56:a9:
f0:32:90:66:dc:43:28:e7:20:c9:06:b7:f6:20:71:
67:fc:c1:25:ea:84:86:43:09:53:4a:29:0e:99:79:
82:43:6b:e1:78:1d:0e:61:98:03:2f:b8:21:8d:7a:
64:3a:77:87:20:84:58:63:74:08:4e:cb:f1:ab:07:
f2:2a:38:24:5a:99:7a:6f:5d:82:47:b7:36:9b:50:
c2:c0:95:ab:4a:9e:ad:fc:07:20:d6:42:45:74:19:
05:98:66:c4:b8:cf:04:63:6e:13:12:e2:d1:b0:ab:
ee:ac:b7:33:e5:88:3f:f5:81:e0:df:cf:b0:e2:15:
4a:23:31:6b:c1:59:a9:e4:66:0e:7c:1a:86:93:55:
8d:00:fe:e2:1a:02:92:7a:11:14:53:53:f7:58:30:
50:ca:3f:6a:2d:2d:3c:29:6c:d5:88:a1:9b:25:4c:
83:e6:b5:7d:d4:3b:ad:2a:b3:ff:3a:2b:9d:c4:00:
27:9b:1b:7d:bc:b6:18:db:9f:89:11:20:ee:55:a2:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:3B:A0:EA:B3:A5:69:F9:2C:DC:20:25:BB:82:7A:41:4A:E2:74
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/Ki47oOqzpWn5LNwgJbuCekFK4nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.56.0/21
IPv6:
2a03:76e0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:17:6e:17:1d:f5:98:79:07:41:a3:38:09:91:d2:35:2d:72:
df:e5:d9:5c:a4:5d:73:13:e9:78:11:30:17:84:c2:f5:9b:20:
07:5b:f4:7c:e7:46:cd:07:9f:12:f5:b3:7a:f0:11:4e:79:b4:
bf:77:40:2a:83:6a:e8:71:d7:9c:02:5c:96:2c:49:9d:39:39:
8e:ec:ce:78:ac:ca:db:40:e2:fa:45:b9:e4:5a:a0:7c:a9:a2:
f1:a5:e9:ff:dc:27:d2:b8:ca:8b:c1:a3:1e:c8:6f:d7:5c:e9:
95:3f:e9:4d:42:72:5b:bc:15:3a:bf:a5:f8:b2:c6:2f:f9:43:
28:e5:9f:3f:ed:97:17:4a:3c:4a:20:a0:ef:4d:d4:a4:e6:83:
78:66:ad:fc:1f:44:6f:17:a1:df:28:fc:a2:cc:b1:1f:45:2b:
32:86:81:49:1e:2a:3d:36:db:60:2e:d6:ab:b9:b3:cc:3e:64:
89:03:f1:d4:60:9d:55:6a:f3:0e:20:65:7e:42:0e:ca:e5:a9:
32:9b:fa:dd:68:05:3c:81:2f:fb:d0:70:6a:a5:46:21:a1:56:
e7:66:c5:0a:de:89:8e:12:78:69:5d:2b:4b:a5:f0:7f:1f:eb:
d1:f7:d4:8b:c5:03:82:fa:1c:89:f3:63:1f:59:ad:72:72:92:
75:52:65:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVr7tWUAu11yO+lZczIEMRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx
MDc4YjYwHhcNMjMwMTAxMDYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTJlM2JhMGVhYjNhNTY5ZjkyY2RjMjAyNWJiODI3YTQxNGFlMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/23DQUcul9OMlwTgy82TUwmW8oA
cLiJX1T9T7WR+knS/o27mY1jYBZTLZBhnwQfFymU47oDHPWXVqnwMpBm3EMo5yDJ
Brf2IHFn/MEl6oSGQwlTSikOmXmCQ2vheB0OYZgDL7ghjXpkOneHIIRYY3QITsvx
qwfyKjgkWpl6b12CR7c2m1DCwJWrSp6t/Acg1kJFdBkFmGbEuM8EY24TEuLRsKvu
rLcz5Yg/9YHg38+w4hVKIzFrwVmp5GYOfBqGk1WNAP7iGgKSehEUU1P3WDBQyj9q
LS08KWzViKGbJUyD5rV91DutKrP/OiudxAAnmxt9vLYY25+JESDuVaLfLwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCouO6Dqs6Vp+SzcICW7gnpBSuJ0MB8GA1UdIwQY
MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt
MjJkMTA2MzVmMGM0LzEvS2k0N29PcXpwV241TE53Z0pidUNla0ZLNG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0
LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXCs4MA0E
AgACMAcDBQAqA3bgMA0GCSqGSIb3DQEBCwUAA4IBAQCMF24XHfWYeQdBozgJkdI1
LXLf5dlcpF1zE+l4ETAXhML1myAHW/R850bNB58S9bN68BFOebS/d0Aqg2rocdec
AlyWLEmdOTmO7M54rMrbQOL6RbnkWqB8qaLxpen/3CfSuMqLwaMeyG/XXOmVP+lN
QnJbvBU6v6X4ssYv+UMo5Z8/7ZcXSjxKIKDvTdSk5oN4Zq38H0RvF6HfKPyizLEf
RSsyhoFJHio9NttgLtarubPMPmSJA/HUYJ1VavMOIGV+Qg7K5akym/rdaAU8gS/7
0HBqpUYhoVbnZsUK3omOEnhpXStLpfB/H+vR99SLxQOC+hyJ82MfWa1ycpJ1UmUX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:33 2024 by rpki-client on console-ams.rpki-client.org