Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/q8rBY0bdErsAqONmboumipW3YRU.roa
File: q8rBY0bdErsAqONmboumipW3YRU.roa (raw, json)
Hash identifier: xOb205N2P46gae9vPHKtpkHZG6HsZVDwB3WvajCpIac=
Subject key identifier: AB:CA:C1:63:46:DD:12:BB:00:A8:E3:66:6E:8B:A6:8A:95:B7:61:15
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 0185728C9D1C754DAE87B6740ABA04FFAB3A
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/q8rBY0bdErsAqONmboumipW3YRU.roa
Signing time: Mon 02 Jan 2023 12:54:55 +0000
ROA not before: Mon 02 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30948
IP address blocks: 91.229.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:9d:1c:75:4d:ae:87:b6:74:0a:ba:04:ff:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Jan 2 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abcac16346dd12bb00a8e3666e8ba68a95b76115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:26:4e:59:47:6e:8f:1e:27:3a:1e:8a:5a:
54:1d:71:22:c3:6b:8d:60:95:4c:fb:29:41:32:f0:
c0:3a:31:cc:2a:37:f5:11:05:7f:e1:da:12:33:a0:
a1:1a:58:fd:58:8b:fd:63:17:a4:93:ea:f8:00:b4:
ab:77:e6:7e:94:24:02:6e:32:f5:02:3f:1a:20:f0:
3b:1b:47:1b:a7:f7:98:df:e6:b6:05:1e:39:f9:59:
9b:d0:cf:6e:87:e6:23:ec:6d:ae:34:fe:fc:5d:d8:
23:4b:21:0b:49:bc:10:2a:bf:ba:00:47:a7:97:c4:
e9:01:d9:88:71:ba:ef:42:b4:7a:85:0a:0a:b2:2e:
99:7a:25:5e:f2:b3:11:07:14:4b:7e:6b:87:df:a7:
d1:96:16:2a:5c:a5:a3:ae:90:c4:44:a7:13:77:83:
31:f1:7d:8c:f9:b8:cd:bf:97:e6:2b:32:1d:63:ea:
47:22:da:ad:12:4e:a6:e8:0c:bd:05:9f:aa:58:4d:
e3:07:d2:55:67:f6:e3:68:9b:fe:ff:5b:e4:34:2c:
6c:a3:b8:6d:11:19:7d:f8:11:0c:06:5a:00:71:2e:
74:b2:03:cf:cb:3c:fc:10:bf:6b:f6:be:68:30:93:
69:d5:23:be:4b:75:22:95:b3:4c:b2:3a:e7:b4:7f:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:C1:63:46:DD:12:BB:00:A8:E3:66:6E:8B:A6:8A:95:B7:61:15
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/q8rBY0bdErsAqONmboumipW3YRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.7.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0d:7f:72:55:c9:e0:61:85:5b:d5:57:47:69:14:ab:ba:06:
f4:d6:ed:6f:39:27:23:5e:51:e3:83:1d:57:cf:d9:65:03:39:
6d:39:fd:dc:83:df:9c:9c:47:a4:b1:a5:d0:03:b2:63:4f:66:
eb:f8:ba:f5:06:32:7d:c7:71:81:aa:23:ca:e4:f7:03:7b:b6:
be:1e:be:44:b1:1b:65:1b:69:7a:d5:1a:a9:5b:a0:28:9d:09:
98:73:5a:07:72:c5:b4:cb:b5:99:13:fa:48:42:ab:b6:72:4b:
a2:b6:5d:f8:fa:ae:2a:6a:84:19:f0:6b:b3:6f:18:c4:b5:c2:
4e:f0:74:f2:8a:b3:91:e8:2e:1d:0a:65:3b:ec:09:51:3f:0b:
97:62:9e:22:6b:7f:38:bf:d2:ae:cf:a8:a0:dd:c3:4d:86:66:
4f:35:76:a5:48:9a:d0:b9:7b:44:34:4b:d6:68:be:c3:29:25:
0c:65:49:3e:7e:bf:7c:38:70:f9:7b:6a:47:45:e6:7e:ed:06:
89:77:83:2a:dc:f6:c1:1e:99:e5:38:09:88:75:9f:3b:00:ed:
2e:30:a3:ee:aa:cc:f0:19:e3:c3:3e:8b:21:a1:22:cd:97:fa:
3a:09:29:b3:ea:39:97:84:1d:75:ba:db:22:85:b4:91:08:f5:
8a:50:05:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyjJ0cdU2uh7Z0CroE/6s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTllOTYxMjJmMjgzODE1YzFhNTZmZWNjMzQ5NDQ3YTI4
ODljZDkwHhcNMjMwMTAyMTI1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmNhYzE2MzQ2ZGQxMmJiMDBhOGUzNjY2ZThiYTY4YTk1Yjc2MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc8mTllHbo8eJzoeilpUHXEiw2uN
YJVM+ylBMvDAOjHMKjf1EQV/4doSM6ChGlj9WIv9Yxekk+r4ALSrd+Z+lCQCbjL1
Aj8aIPA7G0cbp/eY3+a2BR45+Vmb0M9uh+Yj7G2uNP78XdgjSyELSbwQKr+6AEen
l8TpAdmIcbrvQrR6hQoKsi6ZeiVe8rMRBxRLfmuH36fRlhYqXKWjrpDERKcTd4Mx
8X2M+bjNv5fmKzIdY+pHItqtEk6m6Ay9BZ+qWE3jB9JVZ/bjaJv+/1vkNCxso7ht
ERl9+BEMBloAcS50sgPPyzz8EL9r9r5oMJNp1SO+S3UilbNMsjrntH/dLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvKwWNG3RK7AKjjZm6LpoqVt2EVMB8GA1UdIwQY
MBaAFLkZ6WEi8oOBXBpW/sw0lEeiiJzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3Mzgt
NWNlYzM2ZmY4ZTczLzEvcThyQlkwYmRFcnNBcU9ObWJvdW1pcFczWVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3MzgtNWNlYzM2ZmY4ZTcz
LzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+UHMA0G
CSqGSIb3DQEBCwUAA4IBAQBWDX9yVcngYYVb1VdHaRSrugb01u1vOScjXlHjgx1X
z9llAzltOf3cg9+cnEeksaXQA7JjT2br+Lr1BjJ9x3GBqiPK5PcDe7a+Hr5EsRtl
G2l61RqpW6AonQmYc1oHcsW0y7WZE/pIQqu2ckuitl34+q4qaoQZ8GuzbxjEtcJO
8HTyirOR6C4dCmU77AlRPwuXYp4ia384v9Kuz6ig3cNNhmZPNXalSJrQuXtENEvW
aL7DKSUMZUk+fr98OHD5e2pHReZ+7QaJd4Mq3PbBHpnlOAmIdZ87AO0uMKPuqszw
GePDPoshoSLNl/o6CSmz6jmXhB11utsihbSRCPWKUAW2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org