Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/1--TSAhzWBdNaXhZMnushF56bGSQ.roa
File: 1--TSAhzWBdNaXhZMnushF56bGSQ.roa (raw, json)
Hash identifier: vlKy9zru805Xw+iQ/KzTefBcCyoXZaWlvxKd0pcOY7M=
Subject key identifier: FB:E4:D2:02:1C:D6:05:D3:5A:5E:16:4C:9E:EB:21:17:9E:9B:19:24
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 0185710C07F4F7F61263DC870FAD3B399222
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/1--TSAhzWBdNaXhZMnushF56bGSQ.roa
Signing time: Mon 02 Jan 2023 05:54:51 +0000
ROA not before: Mon 02 Jan 2023 05:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39668
IP address blocks: 92.87.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:07:f4:f7:f6:12:63:dc:87:0f:ad:3b:39:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Jan 2 05:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbe4d2021cd605d35a5e164c9eeb21179e9b1924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:58:d0:e2:b3:b3:4f:99:20:f8:4e:cd:92:
3c:cd:ae:ea:56:69:8d:16:8e:95:89:52:d8:1e:3e:
5d:18:55:af:62:ec:bf:26:9c:62:b4:da:7b:f5:b1:
24:fd:8c:44:f6:d4:aa:34:3f:85:40:2c:79:d1:71:
6e:d4:50:6f:07:03:89:79:40:59:a8:d4:e3:d6:fc:
86:66:fa:1f:25:f5:8d:44:cb:67:91:d5:ac:af:49:
b9:61:b5:dc:31:59:d7:91:ab:b9:8e:e8:89:f0:66:
80:94:70:d3:a5:ca:42:48:33:35:0d:6b:83:02:96:
3e:0f:72:a7:e6:cb:05:a4:cf:61:f7:45:a9:74:eb:
76:1c:0f:0c:b0:43:c8:59:e0:13:98:4e:68:8b:48:
62:d5:36:ed:70:22:db:4b:df:57:42:40:6b:75:da:
f4:6b:32:4f:10:c0:28:34:14:b0:71:22:e7:91:e2:
39:d5:c3:59:52:52:15:bb:0b:02:41:38:24:4e:6a:
c0:eb:5b:89:f5:40:0d:3c:8e:55:74:14:8d:c6:35:
4d:ee:8c:86:ba:7c:8e:f0:a1:cb:37:7d:5f:f7:16:
cc:5f:5e:e3:c5:fb:a3:9e:0f:e5:d8:0f:aa:7b:23:
02:01:dc:ba:4d:c4:fe:19:7c:ce:52:3f:bb:73:36:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:D2:02:1C:D6:05:D3:5A:5E:16:4C:9E:EB:21:17:9E:9B:19:24
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/1--TSAhzWBdNaXhZMnushF56bGSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.87.105.0/24
Signature Algorithm: sha256WithRSAEncryption
73:28:9c:e6:5b:f6:0a:6f:7a:2d:96:b3:6f:4e:45:c1:9d:48:
3c:42:46:f0:5e:63:86:91:b3:dc:d3:4a:7f:da:0c:b0:00:e5:
da:d4:9d:b8:d5:67:db:0b:98:bb:5b:95:15:7a:1f:4b:ef:03:
0f:1f:d1:6f:76:de:6d:41:ae:22:56:60:6b:ce:6f:7b:ec:43:
b0:13:8d:e9:e8:80:11:b4:73:88:64:e7:48:02:6b:96:f2:3d:
e0:dc:19:d1:93:97:86:d7:c4:e5:e9:3f:2d:94:2a:cd:01:3d:
7f:75:50:a5:2d:59:d3:ac:ec:dd:75:7b:af:e6:96:3c:08:a5:
7a:d7:19:82:c0:eb:a3:78:39:2a:0b:a6:9f:92:43:ca:d4:98:
cb:10:54:1d:2c:be:93:fb:c6:93:fe:c1:c0:b1:65:82:4b:3a:
e2:5c:6c:93:9c:67:77:9b:12:88:9f:63:ca:1b:38:49:23:97:
7c:05:17:28:08:28:58:4a:6c:9b:69:aa:1a:c6:5c:7f:ff:96:
8a:ce:ba:58:6b:4c:57:bc:59:d9:16:2f:d2:0d:ef:d5:3e:a8:
8c:e5:6d:3f:55:15:08:eb:5d:35:fa:49:0f:82:6b:b3:6c:da:
63:e3:cb:99:7a:0b:7c:a4:7b:5a:5e:c9:59:f9:90:a4:81:a7:
a4:9c:7f:c8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxDAf09/YSY9yHD607OZIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWEyYjg4NGM3MDY3ZjU4ZmZmMDQwYTFmMDZlMGRmMWU4
MGFiM2UwHhcNMjMwMTAyMDU1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmU0ZDIwMjFjZDYwNWQzNWE1ZTE2NGM5ZWViMjExNzllOWIxOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMtY0OKzs0+ZIPhOzZI8za7qVmmN
Fo6ViVLYHj5dGFWvYuy/JpxitNp79bEk/YxE9tSqND+FQCx50XFu1FBvBwOJeUBZ
qNTj1vyGZvofJfWNRMtnkdWsr0m5YbXcMVnXkau5juiJ8GaAlHDTpcpCSDM1DWuD
ApY+D3Kn5ssFpM9h90WpdOt2HA8MsEPIWeATmE5oi0hi1TbtcCLbS99XQkBrddr0
azJPEMAoNBSwcSLnkeI51cNZUlIVuwsCQTgkTmrA61uJ9UANPI5VdBSNxjVN7oyG
unyO8KHLN31f9xbMX17jxfujng/l2A+qeyMCAdy6TcT+GXzOUj+7czam+QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvk0gIc1gXTWl4WTJ7rIReemxkkMB8GA1UdIwQY
MBaAFFvqK4hMcGf1j/8ECh8G4N8egKs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1vcmlFeHdaX1dQX3dRS0h3YmczeDZBcXo0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMzM0ZjgtZGFjZS00OTdmLWE1YTMt
ODE0ZTgwOTA0YmU0LzEvMS0tVFNBaHpXQmROYVhoWk1udXNoRjU2YkdTUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjQvMzMzNGY4LWRhY2UtNDk3Zi1hNWEzLTgxNGU4MDkwNGJl
NC8xL1ctb3JpRXh3Wl9XUF93UUtId2JnM3g2QXF6NC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFxXaTAN
BgkqhkiG9w0BAQsFAAOCAQEAcyic5lv2Cm96LZazb05FwZ1IPEJG8F5jhpGz3NNK
f9oMsADl2tSduNVn2wuYu1uVFXofS+8DDx/Rb3bebUGuIlZga85ve+xDsBON6eiA
EbRziGTnSAJrlvI94NwZ0ZOXhtfE5ek/LZQqzQE9f3VQpS1Z06zs3XV7r+aWPAil
etcZgsDro3g5Kgumn5JDytSYyxBUHSy+k/vGk/7BwLFlgks64lxsk5xnd5sSiJ9j
yhs4SSOXfAUXKAgoWEpsm2mqGsZcf/+Wis66WGtMV7xZ2RYv0g3v1T6ojOVtP1UV
COtdNfpJD4Jrs2zaY+PLmXoLfKR7Wl7JWfmQpIGnpJx/yA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:35 2024 by rpki-client on console-ams.rpki-client.org