Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/9MQhTUjWZojKO6-3cTxoObm-wm8.roa
File: 9MQhTUjWZojKO6-3cTxoObm-wm8.roa (raw, json)
Hash identifier: aQNl0k8oS3GQvpHPCAiptNYLuq9VbPPdRmBKQnzEg4A=
Subject key identifier: F4:C4:21:4D:48:D6:66:88:CA:3B:AF:B7:71:3C:68:39:B9:BE:C2:6F
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 01856FF02AA464B8DB4825490A92416A790E
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/9MQhTUjWZojKO6-3cTxoObm-wm8.roa
Signing time: Mon 02 Jan 2023 00:44:48 +0000
ROA not before: Mon 02 Jan 2023 00:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41544
IP address blocks: 195.78.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:2a:a4:64:b8:db:48:25:49:0a:92:41:6a:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Jan 2 00:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4c4214d48d66688ca3bafb7713c6839b9bec26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:f1:dc:42:1a:e7:df:7f:64:42:ea:f4:b6:
1c:35:da:2d:cc:af:80:f2:2d:0f:ec:6a:f9:4b:3b:
60:ea:b9:a1:b6:0d:97:88:d8:a2:1a:01:20:de:96:
5b:e9:e2:b6:0c:54:80:1c:96:f4:47:a8:1a:41:a4:
ed:8b:1c:ed:28:c5:2d:fb:d2:52:8e:5e:a9:a2:ea:
e8:5c:a5:9e:49:22:a1:fe:3c:f3:3d:d7:c4:59:87:
f4:a9:60:fb:f6:ac:ab:94:47:89:8f:5c:4a:c5:5d:
f9:6b:cb:8e:09:03:17:7c:16:60:69:81:76:97:f2:
ce:ec:c3:ee:2f:81:96:ee:73:98:d8:41:47:58:69:
b9:fb:86:66:0a:a8:70:fa:93:d5:ab:64:9e:4a:24:
39:37:98:3a:a2:67:a9:06:99:a1:b5:fc:69:84:a8:
04:ac:b2:75:27:29:d3:45:67:9a:54:9c:24:c6:90:
5a:c5:78:9f:48:cb:62:3f:87:95:48:9e:5b:bf:e1:
1b:27:be:c3:2d:f9:3b:f0:a6:ee:c4:d9:54:aa:43:
e3:2a:12:92:1b:8a:67:da:65:ae:18:4b:f9:2d:7f:
dd:f8:99:37:fb:59:01:c7:23:d5:14:4b:34:dd:68:
cf:b9:00:b5:b7:e6:d7:5a:ba:00:38:a9:2b:85:d9:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C4:21:4D:48:D6:66:88:CA:3B:AF:B7:71:3C:68:39:B9:BE:C2:6F
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/9MQhTUjWZojKO6-3cTxoObm-wm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.92.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:08:27:86:6a:3f:d0:98:ed:5e:a0:81:46:c4:a7:21:cd:df:
81:cb:6e:62:73:39:92:b9:74:be:b6:8b:2c:da:36:53:10:86:
f2:e6:4d:d9:58:34:97:70:b6:95:4d:c0:2a:98:3d:17:2b:df:
1f:0a:f7:4d:07:e0:d9:0a:44:da:70:54:bf:1d:43:f2:9a:8c:
bf:0d:ee:96:34:77:5b:ab:c8:f3:25:20:3c:34:96:06:6e:56:
e8:40:a9:b3:ca:90:fb:f8:51:d8:fe:fb:45:16:65:f2:98:e4:
c4:40:79:09:8b:29:9d:3a:9c:7a:27:b9:35:73:84:b2:2b:62:
cd:2d:13:53:45:0b:a2:b8:fd:30:9e:87:bc:af:d0:9d:28:f3:
71:1f:b3:d7:db:ba:55:7f:35:27:bd:1b:a2:56:54:47:78:89:
d3:af:c8:35:e5:8b:82:c1:f8:ba:2c:d8:b2:0a:bc:4f:c6:d2:
88:27:37:ff:f5:9d:f0:0a:1a:2b:b7:de:eb:de:bc:b1:8e:62:
67:5c:ca:1b:fd:36:b1:95:4a:d9:37:32:2b:59:89:5d:ea:ea:
92:00:70:eb:9c:7a:91:89:4e:d3:17:28:ba:4f:b9:78:6a:3f:
63:b5:19:a6:1e:2c:b4:c3:b8:11:91:bc:61:6a:3f:98:75:36:
e4:ec:f9:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8CqkZLjbSCVJCpJBankOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmJlNjYxZTU3YzE0NjU5YTYwOGU5ZjZiZTYwNWQ2MjUw
MDQ3ZmMwHhcNMjMwMTAyMDA0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGM0MjE0ZDQ4ZDY2Njg4Y2EzYmFmYjc3MTNjNjgzOWI5YmVjMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI3x3EIa599/ZELq9LYcNdotzK+A
8i0P7Gr5Sztg6rmhtg2XiNiiGgEg3pZb6eK2DFSAHJb0R6gaQaTtixztKMUt+9JS
jl6pouroXKWeSSKh/jzzPdfEWYf0qWD79qyrlEeJj1xKxV35a8uOCQMXfBZgaYF2
l/LO7MPuL4GW7nOY2EFHWGm5+4ZmCqhw+pPVq2SeSiQ5N5g6omepBpmhtfxphKgE
rLJ1JynTRWeaVJwkxpBaxXifSMtiP4eVSJ5bv+EbJ77DLfk78KbuxNlUqkPjKhKS
G4pn2mWuGEv5LX/d+Jk3+1kBxyPVFEs03WjPuQC1t+bXWroAOKkrhdmiMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTEIU1I1maIyjuvt3E8aDm5vsJvMB8GA1UdIwQY
MBaAFGAr5mHlfBRlmmCOn2vmBdYlAEf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQt
YmQzYTYzMGVlNWNjLzEvOU1RaFRValdab2pLTzYtM2NUeG9PYm0td204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQtYmQzYTYzMGVlNWNj
LzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw05cMA0G
CSqGSIb3DQEBCwUAA4IBAQC/CCeGaj/QmO1eoIFGxKchzd+By25iczmSuXS+toss
2jZTEIby5k3ZWDSXcLaVTcAqmD0XK98fCvdNB+DZCkTacFS/HUPymoy/De6WNHdb
q8jzJSA8NJYGblboQKmzypD7+FHY/vtFFmXymOTEQHkJiymdOpx6J7k1c4SyK2LN
LRNTRQuiuP0wnoe8r9CdKPNxH7PX27pVfzUnvRuiVlRHeInTr8g15YuCwfi6LNiy
CrxPxtKIJzf/9Z3wChort97r3ryxjmJnXMob/TaxlUrZNzIrWYld6uqSAHDrnHqR
iU7TFyi6T7l4aj9jtRmmHiy0w7gRkbxhaj+YdTbk7PlR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:09 2024 by rpki-client on console-fra.rpki-client.org