Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/Kz47Rxm8Ku2DpgxwoEUBMRj_ARE.roa
File: Kz47Rxm8Ku2DpgxwoEUBMRj_ARE.roa (raw, json)
Hash identifier: /7eljOZTY0bB3GPU2ZwM5pEizXAWkavBD7aLCnCTyf0=
Subject key identifier: 2B:3E:3B:47:19:BC:2A:ED:83:A6:0C:70:A0:45:01:31:18:FF:01:11
Certificate issuer: /CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Certificate serial: 01857139FA16714B4D6DBC5234701816AAAF
Authority key identifier: 31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/Kz47Rxm8Ku2DpgxwoEUBMRj_ARE.roa
Signing time: Mon 02 Jan 2023 06:45:02 +0000
ROA not before: Mon 02 Jan 2023 06:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 91.244.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:fa:16:71:4b:4d:6d:bc:52:34:70:18:16:aa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Validity
Not Before: Jan 2 06:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b3e3b4719bc2aed83a60c70a045013118ff0111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:9a:68:aa:67:3c:4a:a1:7b:e9:3e:b0:e9:
45:f7:07:8e:77:aa:34:97:66:08:fa:82:9f:bb:e6:
05:4b:43:36:69:64:a8:1b:ac:c2:b7:53:72:2a:d1:
d2:1e:7a:ce:a2:e2:c9:83:4c:f3:e6:ad:8f:e2:2d:
38:87:e2:86:99:5f:af:64:15:61:c9:62:1e:5d:65:
3b:6e:dc:84:2a:53:7f:b7:87:78:48:31:be:a7:d8:
c7:56:95:95:4a:95:27:fb:75:2e:60:ce:01:37:fe:
ee:52:7d:36:f3:94:f6:9b:61:f5:2c:2b:34:07:6b:
37:d4:1c:25:72:d7:a4:bc:f2:c1:83:d5:6c:be:8e:
18:ce:ad:43:12:be:ca:00:84:59:c3:1f:75:f5:7d:
92:6d:b3:3b:0c:c6:f8:de:cb:97:42:63:84:ab:93:
28:45:fa:60:e4:b3:5a:ef:ef:e6:85:b7:62:65:0b:
e0:46:80:12:cf:90:ac:a2:f3:46:6e:a0:fb:9e:fa:
c1:c5:86:1c:ca:e5:33:8b:f9:d3:16:6e:8f:68:f4:
d0:32:ef:94:6a:09:35:54:a1:a2:85:f5:68:62:6e:
dd:76:b6:f4:ad:3f:71:aa:23:fc:48:3d:e9:69:f6:
92:f1:2c:0b:dd:a2:f6:65:b4:f5:a4:c8:91:67:39:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:3B:47:19:BC:2A:ED:83:A6:0C:70:A0:45:01:31:18:FF:01:11
X509v3 Authority Key Identifier:
keyid:31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/Kz47Rxm8Ku2DpgxwoEUBMRj_ARE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.246.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d0:b5:e1:6a:fb:b5:85:a3:a2:dd:7a:dd:fe:f8:1b:78:58:
aa:2f:e4:f3:6a:44:49:b0:ef:95:db:e5:ce:05:07:66:39:8f:
0a:fc:94:70:79:41:b0:c7:e8:ad:67:ee:9a:a1:74:1e:66:d3:
d3:6e:ec:be:60:c3:54:81:cf:01:73:38:3c:cc:76:d9:4c:ea:
98:b0:6d:ea:00:47:43:da:d4:2a:4a:83:d5:b0:d2:fe:17:c7:
89:c2:12:63:b1:15:78:31:35:77:54:7c:29:55:7c:70:9d:03:
34:4b:0c:40:3c:45:29:76:10:2d:d0:b6:04:45:81:85:ea:7c:
a6:f2:c7:fd:27:6a:60:9c:f0:c7:7b:a5:99:59:b0:57:03:8e:
1b:52:70:94:69:2f:2f:93:a0:4e:bd:43:c7:9f:8d:47:44:c4:
ea:ce:71:8f:72:15:74:8b:d0:bf:cc:a6:4f:a1:ad:fc:76:2e:
41:94:ea:72:5f:d5:9a:b6:83:fc:02:96:aa:ec:77:94:26:d7:
e6:08:8b:5e:27:df:5c:ce:e4:fd:1c:7a:22:c5:21:c5:91:ef:
b3:ae:ad:72:01:11:97:c2:f1:04:65:37:ed:03:06:2b:cb:80:
dd:d9:f5:b6:10:27:a9:41:04:6e:d9:8b:82:e3:8c:6a:e6:59:
0b:d6:4b:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOfoWcUtNbbxSNHAYFqqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMDgzYWJkN2Y5Nzk5NjMxYTliYmRhOGEzNGY0NDIzMDFm
YzZlNmYwHhcNMjMwMTAyMDY0NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjNlM2I0NzE5YmMyYWVkODNhNjBjNzBhMDQ1MDEzMTE4ZmYwMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHuaaKpnPEqhe+k+sOlF9weOd6o0
l2YI+oKfu+YFS0M2aWSoG6zCt1NyKtHSHnrOouLJg0zz5q2P4i04h+KGmV+vZBVh
yWIeXWU7btyEKlN/t4d4SDG+p9jHVpWVSpUn+3UuYM4BN/7uUn0285T2m2H1LCs0
B2s31BwlctekvPLBg9Vsvo4Yzq1DEr7KAIRZwx919X2SbbM7DMb43suXQmOEq5Mo
Rfpg5LNa7+/mhbdiZQvgRoASz5CsovNGbqD7nvrBxYYcyuUzi/nTFm6PaPTQMu+U
agk1VKGihfVoYm7ddrb0rT9xqiP8SD3pafaS8SwL3aL2ZbT1pMiRZzmvqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCs+O0cZvCrtg6YMcKBFATEY/wERMB8GA1UdIwQY
MBaAFDEIOr1/l5ljGpu9qKNPRCMB/G5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVFnNnZYLVhtV01hbTcyb28wOUVJd0g4Ym04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNjdlYWQtZjI2YS00YjEyLTlhYmIt
ZjFkNjU5N2FiYTdlLzEvS3o0N1J4bThLdTJEcGd4d29FVUJNUmpfQVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNjdlYWQtZjI2YS00YjEyLTlhYmItZjFkNjU5N2FiYTdl
LzEvTVFnNnZYLVhtV01hbTcyb28wOUVJd0g4Ym04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/T2MA0G
CSqGSIb3DQEBCwUAA4IBAQAU0LXhavu1haOi3Xrd/vgbeFiqL+TzakRJsO+V2+XO
BQdmOY8K/JRweUGwx+itZ+6aoXQeZtPTbuy+YMNUgc8Bczg8zHbZTOqYsG3qAEdD
2tQqSoPVsNL+F8eJwhJjsRV4MTV3VHwpVXxwnQM0SwxAPEUpdhAt0LYERYGF6nym
8sf9J2pgnPDHe6WZWbBXA44bUnCUaS8vk6BOvUPHn41HRMTqznGPchV0i9C/zKZP
oa38di5BlOpyX9WatoP8Apaq7HeUJtfmCIteJ99czuT9HHoixSHFke+zrq1yARGX
wvEEZTftAwYry4Dd2fW2ECepQQRu2YuC44xq5lkL1kuS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:07 2024 by rpki-client on console-ams.rpki-client.org