Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/8Swe9JFttPx-xxDEqPSccE28Qr4.roa
File: 8Swe9JFttPx-xxDEqPSccE28Qr4.roa (raw, json)
Hash identifier: qMbHOlJWRvQ3vYtvsI4yeRRtUUb+Dw8kudNTH7YWYt0=
Subject key identifier: F1:2C:1E:F4:91:6D:B4:FC:7E:C7:10:C4:A8:F4:9C:70:4D:BC:42:BE
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 01911234EEE011EF1824005E986DE22F0D73
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/8Swe9JFttPx-xxDEqPSccE28Qr4.roa
Signing time: Fri 02 Aug 2024 08:29:04 +0000
ROA not before: Fri 02 Aug 2024 08:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 91.214.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 Aug 2024 16:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:34:ee:e0:11:ef:18:24:00:5e:98:6d:e2:2f:0d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Aug 2 08:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f12c1ef4916db4fc7ec710c4a8f49c704dbc42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:d7:d0:bc:5e:31:4b:11:77:b2:e0:9a:f5:
b1:3f:8f:c0:82:0a:2a:b0:e4:fb:ee:2e:71:21:cd:
bf:74:2f:ff:eb:29:dc:d1:fc:7a:70:36:48:53:da:
60:09:7e:e7:27:6a:46:63:98:a5:2a:ec:ef:f5:74:
21:e6:b2:a0:3a:8e:a6:73:45:ab:89:d1:9d:1a:18:
16:3f:ed:1c:3f:74:c7:15:eb:c5:28:e9:0f:92:bd:
0e:14:1a:e9:77:e7:1f:b1:ce:6c:15:8a:e5:62:17:
66:4e:21:28:71:69:34:19:ab:ed:40:5d:f8:4f:f8:
31:d2:5f:89:15:e1:ac:70:42:5c:eb:26:35:3c:56:
2b:12:e2:1e:fe:a6:bf:cb:46:8c:f7:91:34:22:30:
56:10:ac:2a:3c:7e:38:2d:4f:93:de:b2:6d:c8:28:
7a:0a:60:da:13:8a:82:3e:65:02:98:f7:42:5f:1d:
cc:85:2e:1f:e5:ca:c4:ec:84:77:64:d3:70:c7:75:
55:c8:d9:d5:83:ed:3d:3b:c4:22:bb:08:4f:ce:c4:
ec:c8:29:c7:f5:a9:38:a5:19:36:c2:78:75:65:ba:
49:c1:fe:2b:bd:ae:f5:08:9c:bc:93:64:12:0a:f6:
31:c9:54:05:60:a5:29:a8:23:f1:f0:b3:54:17:58:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:1E:F4:91:6D:B4:FC:7E:C7:10:C4:A8:F4:9C:70:4D:BC:42:BE
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/8Swe9JFttPx-xxDEqPSccE28Qr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.160.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ca:5d:28:a8:bc:fa:98:76:05:fa:4d:e2:34:d5:17:54:35:
6d:e7:a8:82:51:55:bf:f7:6e:b2:08:10:e3:ed:72:4c:45:47:
ca:19:13:bf:f7:14:f6:c3:e3:b9:b5:57:31:1c:ec:54:51:b7:
dd:9e:c4:53:45:b2:6d:c9:74:95:69:0b:1d:53:18:2e:e6:48:
34:0e:b7:97:44:36:04:df:29:f3:f6:35:d6:fa:82:70:da:8c:
a9:91:45:68:7d:36:53:b8:5d:a3:75:42:a7:7b:58:a4:27:3d:
78:ca:45:2c:9e:9d:22:08:2f:59:25:0e:3f:d0:4e:8b:04:48:
6a:1e:61:9c:7c:4a:00:c5:60:11:1d:ca:bd:f0:b7:71:54:4a:
b7:94:44:96:24:fc:48:ad:7d:1e:af:08:9f:f8:5c:9e:f5:7f:
cc:cd:98:7e:aa:94:9f:97:79:40:a9:dc:33:08:f5:be:3a:40:
60:d0:ef:34:66:31:c3:ba:dd:2f:f2:9e:b1:d6:2a:26:6f:54:
ab:c2:e9:7c:e6:97:63:bb:0e:ca:55:1e:97:7b:74:88:88:88:
fb:d7:34:6f:20:a0:98:7c:71:09:04:45:2d:6a:de:80:6f:84:
32:d6:06:53:fb:46:f7:72:b6:34:ec:a3:c3:ee:a3:2e:c4:09:
cb:db:17:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZESNO7gEe8YJABemG3iLw1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTQ0NDUyNTk3MzJhYTY3MzZjMjQ4MjM0NDY1OTQ3ZmMy
Mzc0ZDAwHhcNMjQwODAyMDgyOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTJjMWVmNDkxNmRiNGZjN2VjNzEwYzRhOGY0OWM3MDRkYmM0MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGvX0LxeMUsRd7LgmvWxP4/Aggoq
sOT77i5xIc2/dC//6ync0fx6cDZIU9pgCX7nJ2pGY5ilKuzv9XQh5rKgOo6mc0Wr
idGdGhgWP+0cP3THFevFKOkPkr0OFBrpd+cfsc5sFYrlYhdmTiEocWk0GavtQF34
T/gx0l+JFeGscEJc6yY1PFYrEuIe/qa/y0aM95E0IjBWEKwqPH44LU+T3rJtyCh6
CmDaE4qCPmUCmPdCXx3MhS4f5crE7IR3ZNNwx3VVyNnVg+09O8QiuwhPzsTsyCnH
9ak4pRk2wnh1ZbpJwf4rva71CJy8k2QSCvYxyVQFYKUpqCPx8LNUF1gOAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEsHvSRbbT8fscQxKj0nHBNvEK+MB8GA1UdIwQY
MBaAFBoURFJZcyqmc2wkgjRGWUf8I3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMt
MzgxZjIzZjE4M2Q3LzEvOFN3ZTlKRnR0UHgteHhERXFQU2NjRTI4UXI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMtMzgxZjIzZjE4M2Q3
LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9agMA0G
CSqGSIb3DQEBCwUAA4IBAQBWyl0oqLz6mHYF+k3iNNUXVDVt56iCUVW/926yCBDj
7XJMRUfKGRO/9xT2w+O5tVcxHOxUUbfdnsRTRbJtyXSVaQsdUxgu5kg0DreXRDYE
3ynz9jXW+oJw2oypkUVofTZTuF2jdUKne1ikJz14ykUsnp0iCC9ZJQ4/0E6LBEhq
HmGcfEoAxWARHcq98LdxVEq3lESWJPxIrX0erwif+Fye9X/MzZh+qpSfl3lAqdwz
CPW+OkBg0O80ZjHDut0v8p6x1iomb1Srwul85pdjuw7KVR6Xe3SIiIj71zRvIKCY
fHEJBEUtat6Ab4Qy1gZT+0b3crY07KPD7qMuxAnL2xck
-----END CERTIFICATE-----
Generated at Fri Aug 2 19:17:33 2024 by rpki-client on console-fra.rpki-client.org