Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/EWqalpgEYiTjnX1j7CfxZw130S8.roa
File: EWqalpgEYiTjnX1j7CfxZw130S8.roa (raw, json)
Hash identifier: n/qqRa8klZa/WZvxTEgzK0X9+5B5+DcPNC2n9a6uY2U=
Subject key identifier: 11:6A:9A:96:98:04:62:24:E3:9D:7D:63:EC:27:F1:67:0D:77:D1:2F
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 01920B9AD2743B67817ADB34D5623F55BB36
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/EWqalpgEYiTjnX1j7CfxZw130S8.roa
Signing time: Thu 19 Sep 2024 18:45:48 +0000
ROA not before: Thu 19 Sep 2024 18:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 91.214.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Oct 2024 07:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:9a:d2:74:3b:67:81:7a:db:34:d5:62:3f:55:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Sep 19 18:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=116a9a9698046224e39d7d63ec27f1670d77d12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:10:a5:12:d0:ec:f8:ca:d2:c7:ec:fd:64:
28:56:f9:d1:25:78:28:35:c4:7a:f9:e6:7e:71:62:
66:d8:af:bb:fc:56:7b:93:f0:ee:1b:a6:34:08:f0:
3d:57:28:6a:43:51:76:d2:8f:de:85:f9:8f:cb:fe:
c7:37:ad:cb:80:4d:8c:7f:fa:d0:2a:aa:e1:4f:f7:
db:d4:76:b0:38:75:f7:d7:05:f3:db:d3:c2:1f:cd:
f4:d9:2e:95:cc:93:1c:5b:03:06:5a:1f:7c:45:17:
ba:9c:7e:57:d3:79:64:c7:75:ad:66:fa:a7:02:bc:
b1:fc:a3:e2:33:fd:10:6f:59:4e:ff:b9:fe:75:b9:
d6:77:7d:62:6a:be:0b:a2:98:e4:58:b7:79:91:e4:
14:0d:30:7f:cd:0a:bf:88:41:a3:d9:ae:64:3c:0a:
07:3a:3f:44:fb:47:bd:e5:9e:82:27:b4:e5:b1:c7:
1f:c1:d2:e0:3e:9f:1b:bb:50:04:3b:33:f6:00:a3:
8e:22:cb:4f:a7:0c:6c:53:12:91:35:43:02:59:bd:
e8:7c:d4:df:c3:04:38:c2:80:35:56:85:66:d9:64:
df:51:32:a2:99:b3:4e:38:86:6d:3d:f2:96:27:f3:
63:50:c8:c1:c0:ce:40:be:77:71:1d:cf:01:50:82:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6A:9A:96:98:04:62:24:E3:9D:7D:63:EC:27:F1:67:0D:77:D1:2F
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/EWqalpgEYiTjnX1j7CfxZw130S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.160.0/22
Signature Algorithm: sha256WithRSAEncryption
01:56:62:ba:3e:4e:b5:2f:83:c3:dd:76:51:5e:3e:c6:57:52:
0c:3c:15:55:4b:00:26:5b:0a:79:a7:bb:78:27:86:8c:72:4c:
ca:43:84:ef:1e:6c:dd:5a:3e:07:0f:e0:a6:82:8b:ed:23:0c:
b0:76:48:3f:56:3e:27:42:ad:4c:98:52:af:c9:5d:c6:24:77:
bc:6b:ed:ef:87:bf:8c:c8:f9:0d:b1:32:12:b1:d6:77:3a:93:
cf:e4:8a:2b:70:78:0a:63:b0:03:ec:b9:9d:5f:03:75:a0:bb:
8c:48:79:19:97:45:3e:2b:a4:7c:8f:5f:e8:ae:1e:25:54:8b:
6f:49:cc:6b:34:11:dd:36:cd:81:c3:96:1b:ba:77:d6:97:cd:
1b:7e:48:ef:9f:11:d9:cb:6c:64:f5:26:fe:da:c8:69:f5:9d:
2f:d2:51:4c:eb:8b:40:fd:0e:7d:b4:19:26:f4:fb:59:e1:d4:
07:90:e9:62:d3:41:c5:55:5f:dd:d5:fc:56:a1:19:ed:1e:a2:
b9:51:38:16:74:e9:7e:c9:04:c5:db:2c:e4:04:e7:44:a5:68:
58:f3:1f:4c:de:9a:f7:c0:f4:db:d5:58:ab:84:20:e6:29:48:
62:52:9f:b9:39:56:1f:be:fd:b2:80:3f:6d:fc:9e:a2:b3:44:
4a:84:cf:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZILmtJ0O2eBets01WI/Vbs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTQ0NDUyNTk3MzJhYTY3MzZjMjQ4MjM0NDY1OTQ3ZmMy
Mzc0ZDAwHhcNMjQwOTE5MTg0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTZhOWE5Njk4MDQ2MjI0ZTM5ZDdkNjNlYzI3ZjE2NzBkNzdkMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl54QpRLQ7PjK0sfs/WQoVvnRJXgo
NcR6+eZ+cWJm2K+7/FZ7k/DuG6Y0CPA9VyhqQ1F20o/ehfmPy/7HN63LgE2Mf/rQ
KqrhT/fb1HawOHX31wXz29PCH8302S6VzJMcWwMGWh98RRe6nH5X03lkx3WtZvqn
Aryx/KPiM/0Qb1lO/7n+dbnWd31iar4LopjkWLd5keQUDTB/zQq/iEGj2a5kPAoH
Oj9E+0e95Z6CJ7TlsccfwdLgPp8bu1AEOzP2AKOOIstPpwxsUxKRNUMCWb3ofNTf
wwQ4woA1VoVm2WTfUTKimbNOOIZtPfKWJ/NjUMjBwM5AvndxHc8BUIJkywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFqmpaYBGIk4519Y+wn8WcNd9EvMB8GA1UdIwQY
MBaAFBoURFJZcyqmc2wkgjRGWUf8I3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMt
MzgxZjIzZjE4M2Q3LzEvRVdxYWxwZ0VZaVRqblgxajdDZnhadzEzMFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMtMzgxZjIzZjE4M2Q3
LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9agMA0G
CSqGSIb3DQEBCwUAA4IBAQABVmK6Pk61L4PD3XZRXj7GV1IMPBVVSwAmWwp5p7t4
J4aMckzKQ4TvHmzdWj4HD+CmgovtIwywdkg/Vj4nQq1MmFKvyV3GJHe8a+3vh7+M
yPkNsTISsdZ3OpPP5IorcHgKY7AD7LmdXwN1oLuMSHkZl0U+K6R8j1/orh4lVItv
ScxrNBHdNs2Bw5YbunfWl80bfkjvnxHZy2xk9Sb+2shp9Z0v0lFM64tA/Q59tBkm
9PtZ4dQHkOli00HFVV/d1fxWoRntHqK5UTgWdOl+yQTF2yzkBOdEpWhY8x9M3pr3
wPTb1VirhCDmKUhiUp+5OVYfvv2ygD9t/J6is0RKhM9z
-----END CERTIFICATE-----
Generated at Fri Oct 4 10:23:20 2024 by rpki-client on console-ams.rpki-client.org