Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/FmajNGE9is3-0oQ9jTBOdycWPcs.roa
File: FmajNGE9is3-0oQ9jTBOdycWPcs.roa (raw, json)
Hash identifier: 6aQc8+RAxFbMcP+eJNrwGbQljQYCUhZ95YdIa10oEbg=
Subject key identifier: 16:66:A3:34:61:3D:8A:CD:FE:D2:84:3D:8D:30:4E:77:27:16:3D:CB
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 018572E81D253F72075AA40FAE74E883CC9D
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/FmajNGE9is3-0oQ9jTBOdycWPcs.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1d:25:3f:72:07:5a:a4:0f:ae:74:e8:83:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1666a334613d8acdfed2843d8d304e7727163dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:79:10:d0:27:7d:3e:2f:71:e4:eb:73:e3:
9a:46:ae:81:94:1f:2a:48:12:16:52:51:62:b4:a9:
54:ef:44:29:2f:9c:fe:3b:5b:88:4e:5a:54:55:6a:
72:12:81:86:64:3b:e0:fc:00:e2:c1:f9:4c:60:8e:
15:ec:25:16:be:0e:4c:87:5d:b1:af:fd:1d:b1:f9:
49:73:7f:10:df:92:ee:cf:32:24:99:1e:dc:1c:4f:
d0:f4:ea:43:6b:57:43:33:d2:df:7d:ec:a0:7d:66:
be:77:8e:8e:4e:a2:79:59:bc:64:59:56:76:78:3b:
65:a0:4f:2f:4a:81:3e:71:20:ec:39:9c:4e:7b:e3:
04:90:c6:93:bc:6d:17:22:f0:3f:7f:e2:61:0d:af:
1f:fe:8a:b1:68:e5:e1:60:9e:35:7d:3a:c6:d2:42:
94:cb:90:79:1b:68:72:d4:c0:15:ed:54:f8:2d:2c:
36:11:f3:2b:9d:8b:65:1d:cc:cf:c3:1c:f8:c4:f9:
a7:44:fb:e8:c1:a8:93:0a:dc:0a:b0:7a:8a:c9:37:
cb:d4:cb:a2:65:82:88:ae:8b:e5:d2:73:7a:1d:59:
89:ee:6d:b2:54:8f:cb:81:97:33:85:38:ab:af:88:
0c:51:b4:3d:7b:cd:e9:06:2a:50:a2:f2:38:3f:dc:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:A3:34:61:3D:8A:CD:FE:D2:84:3D:8D:30:4E:77:27:16:3D:CB
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/FmajNGE9is3-0oQ9jTBOdycWPcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
be:39:d3:f9:b8:2d:91:1a:99:72:f7:d1:c8:40:46:09:e9:97:
f8:c3:97:cc:f6:f8:28:1f:21:0d:ae:b7:d7:bf:4e:ed:ab:c8:
32:98:7d:c0:73:31:0b:b5:d3:aa:cc:32:ae:16:7a:44:cc:74:
1d:10:00:51:b5:66:1a:a2:30:84:53:03:4a:88:02:10:01:ae:
e6:7f:82:f8:da:a3:09:95:d2:b3:e6:52:7f:ae:46:09:a7:d5:
4e:14:30:02:f4:a8:73:52:c7:58:ff:f9:43:ef:d7:95:0f:49:
2c:0e:d1:e7:d2:6e:1c:73:2b:54:e8:4c:d5:d0:dc:a8:3a:cd:
a6:d6:a9:3e:e8:db:f6:4b:16:b6:09:ad:91:43:7c:44:00:4f:
e1:b4:0e:38:2f:b9:e0:ef:64:08:1d:78:f7:82:b4:57:cb:80:
81:c0:67:61:f1:78:89:47:f6:a2:f6:7b:59:db:a9:a7:27:a7:
9f:cc:7e:8c:98:d1:ea:3d:ee:56:ee:c8:30:32:5f:21:da:fd:
d9:bf:02:5b:86:a3:4d:5c:aa:28:5c:f0:81:6b:b5:6c:2b:db:
b4:a5:87:3d:36:3e:6e:aa:cc:4f:19:71:da:5c:9b:d3:97:7f:
ea:5f:d2:72:2b:86:cf:84:1b:54:27:36:10:2c:d1:4d:39:be:
d7:31:d4:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6B0lP3IHWqQPrnTog8ydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz
ZTdmNzQwHhcNMjMwMTAyMTQzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjY2YTMzNDYxM2Q4YWNkZmVkMjg0M2Q4ZDMwNGU3NzI3MTYzZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljh5ENAnfT4vceTrc+OaRq6BlB8q
SBIWUlFitKlU70QpL5z+O1uITlpUVWpyEoGGZDvg/ADiwflMYI4V7CUWvg5Mh12x
r/0dsflJc38Q35LuzzIkmR7cHE/Q9OpDa1dDM9LffeygfWa+d46OTqJ5WbxkWVZ2
eDtloE8vSoE+cSDsOZxOe+MEkMaTvG0XIvA/f+JhDa8f/oqxaOXhYJ41fTrG0kKU
y5B5G2hy1MAV7VT4LSw2EfMrnYtlHczPwxz4xPmnRPvowaiTCtwKsHqKyTfL1Mui
ZYKIrovl0nN6HVmJ7m2yVI/LgZczhTirr4gMUbQ9e83pBipQovI4P9yZEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZmozRhPYrN/tKEPY0wTncnFj3LMB8GA1UdIwQY
MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt
YmMyNWFlNmViMTNjLzEvRm1hak5HRTlpczMtMG9ROWpUQk9keWNXUGNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj
LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFyYMA0G
CSqGSIb3DQEBCwUAA4IBAQC+OdP5uC2RGply99HIQEYJ6Zf4w5fM9vgoHyENrrfX
v07tq8gymH3AczELtdOqzDKuFnpEzHQdEABRtWYaojCEUwNKiAIQAa7mf4L42qMJ
ldKz5lJ/rkYJp9VOFDAC9KhzUsdY//lD79eVD0ksDtHn0m4ccytU6EzV0NyoOs2m
1qk+6Nv2Sxa2Ca2RQ3xEAE/htA44L7ng72QIHXj3grRXy4CBwGdh8XiJR/ai9ntZ
26mnJ6efzH6MmNHqPe5W7sgwMl8h2v3ZvwJbhqNNXKooXPCBa7VsK9u0pYc9Nj5u
qsxPGXHaXJvTl3/qX9JyK4bPhBtUJzYQLNFNOb7XMdSJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:17 2024 by rpki-client on console-fra.rpki-client.org