Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/G7BqgcXg5jJnm58ANIId3MMgR8w.roa
File: G7BqgcXg5jJnm58ANIId3MMgR8w.roa (raw, json)
Hash identifier: obiwNKICPVDWmFXnBkOA97RzCoBs+uV3xaI/pkNiiYc=
Subject key identifier: 1B:B0:6A:81:C5:E0:E6:32:67:9B:9F:00:34:82:1D:DC:C3:20:47:CC
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01856C4A70EAF87931DAAF8F9B3C0B4E272F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/G7BqgcXg5jJnm58ANIId3MMgR8w.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204287
IP address blocks: 87.239.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:70:ea:f8:79:31:da:af:8f:9b:3c:0b:4e:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb06a81c5e0e632679b9f0034821ddcc32047cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:95:50:77:c9:28:f3:c8:eb:1c:43:35:fc:
7d:6f:67:28:03:8a:44:6b:fc:69:47:82:37:0d:b8:
4f:55:5e:c4:d0:8e:da:2f:31:c1:c0:21:9f:d1:cc:
c7:82:c5:a6:64:4e:0c:e4:e6:13:04:88:29:2a:fb:
66:5e:4e:d7:89:32:51:ae:f7:14:93:24:38:1e:7a:
c3:cd:8b:89:ad:59:61:e2:b5:1a:1f:fd:c1:75:30:
6b:6f:66:d6:0f:0e:61:92:4c:cd:ea:b5:b8:97:4a:
c0:13:4c:8b:ba:11:d8:96:3f:a8:d5:90:6c:63:e1:
de:13:b7:78:98:24:83:9d:c4:0b:26:dc:d1:98:a6:
f4:33:4b:bf:fa:7e:12:fe:5a:2c:a1:d7:c8:7a:89:
90:aa:4e:2f:67:ed:ea:83:72:35:dc:01:69:4f:0f:
cf:f5:31:27:bf:40:31:bf:8c:56:6f:b0:b7:4f:90:
61:e7:7c:51:d9:ed:77:3a:b2:c3:ad:32:eb:cc:d8:
0f:c5:99:81:93:56:e8:87:c5:15:13:79:f5:fc:19:
3e:09:0e:f0:96:7f:4b:c3:86:1c:b4:8f:fa:5a:84:
3b:23:dd:13:5a:cd:0a:47:bf:68:9d:40:11:96:ee:
21:41:4c:7b:43:a0:1d:a6:82:77:32:5b:b8:04:67:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B0:6A:81:C5:E0:E6:32:67:9B:9F:00:34:82:1D:DC:C3:20:47:CC
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/G7BqgcXg5jJnm58ANIId3MMgR8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:aa:49:2f:a5:70:c0:31:93:09:d0:c9:1c:a5:08:85:ab:0e:
85:6f:85:f7:94:be:7b:29:fe:68:f7:80:ce:14:fd:dc:3b:9c:
0e:2e:b6:16:a9:e3:05:4c:4c:55:a3:46:4c:9c:26:ff:04:3a:
ff:7a:ff:2f:78:c7:e5:93:7f:9a:2d:23:b8:4f:bb:48:20:03:
51:12:ae:55:cd:90:6e:cf:bd:c0:ef:57:07:7b:97:f9:b0:ce:
85:28:19:87:df:08:1f:ac:ff:a3:eb:cc:2e:5f:8c:a9:d6:a4:
ae:1d:24:b4:82:5a:77:2d:13:a9:39:e3:36:52:36:61:34:49:
e6:97:99:68:b2:51:43:a3:5c:09:d1:eb:84:5c:b2:83:d4:49:
3c:38:cf:d6:f3:e9:09:38:08:1c:60:70:b4:dd:2f:1d:30:75:
92:8a:fd:e7:f9:41:a8:a8:37:79:f7:f3:fb:4a:1c:ca:2d:26:
6e:59:c4:26:fa:3f:36:e0:cd:2e:b7:89:96:d7:f1:47:9f:2a:
4b:17:89:3e:6e:00:9c:10:82:b6:29:ed:f6:1a:77:83:89:22:
e4:be:4c:ea:57:0c:e5:a3:8a:73:c0:e3:4f:cb:74:c4:dd:60:
32:86:93:83:8c:a1:9e:6a:f7:45:66:56:8a:51:8a:74:a6:3a:
a1:99:33:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsSnDq+Hkx2q+PmzwLTicvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjMwMTAxMDc0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmIwNmE4MWM1ZTBlNjMyNjc5YjlmMDAzNDgyMWRkY2MzMjA0N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHSVUHfJKPPI6xxDNfx9b2coA4pE
a/xpR4I3DbhPVV7E0I7aLzHBwCGf0czHgsWmZE4M5OYTBIgpKvtmXk7XiTJRrvcU
kyQ4HnrDzYuJrVlh4rUaH/3BdTBrb2bWDw5hkkzN6rW4l0rAE0yLuhHYlj+o1ZBs
Y+HeE7d4mCSDncQLJtzRmKb0M0u/+n4S/losodfIeomQqk4vZ+3qg3I13AFpTw/P
9TEnv0Axv4xWb7C3T5Bh53xR2e13OrLDrTLrzNgPxZmBk1boh8UVE3n1/Bk+CQ7w
ln9Lw4YctI/6WoQ7I90TWs0KR79onUARlu4hQUx7Q6AdpoJ3Mlu4BGe/UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuwaoHF4OYyZ5ufADSCHdzDIEfMMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvRzdCcWdjWGc1akpubTU4QU5JSWQzTU1nUjh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+/4MA0G
CSqGSIb3DQEBCwUAA4IBAQALqkkvpXDAMZMJ0MkcpQiFqw6Fb4X3lL57Kf5o94DO
FP3cO5wOLrYWqeMFTExVo0ZMnCb/BDr/ev8veMflk3+aLSO4T7tIIANREq5VzZBu
z73A71cHe5f5sM6FKBmH3wgfrP+j68wuX4yp1qSuHSS0glp3LROpOeM2UjZhNEnm
l5loslFDo1wJ0euEXLKD1Ek8OM/W8+kJOAgcYHC03S8dMHWSiv3n+UGoqDd59/P7
ShzKLSZuWcQm+j824M0ut4mW1/FHnypLF4k+bgCcEIK2Ke32GneDiSLkvkzqVwzl
o4pzwONPy3TE3WAyhpODjKGeavdFZlaKUYp0pjqhmTPi
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:28 2024 by rpki-client on console-fra.rpki-client.org