Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/nGgx0ocYt3pLpC5iFZYMGaSCimw.roa
File: nGgx0ocYt3pLpC5iFZYMGaSCimw.roa (raw, json)
Hash identifier: OWuFf9OfAMIO/ibiGPzRUNKEX5kTC44r5SUJOag4yFw=
Subject key identifier: 9C:68:31:D2:87:18:B7:7A:4B:A4:2E:62:15:96:0C:19:A4:82:8A:6C
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 018BAB57C6DA037D863D594255486776BCE5
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/nGgx0ocYt3pLpC5iFZYMGaSCimw.roa
Signing time: Tue 07 Nov 2023 19:52:18 +0000
ROA not before: Tue 07 Nov 2023 19:52:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202651
IP address blocks: 91.192.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:57:c6:da:03:7d:86:3d:59:42:55:48:67:76:bc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Nov 7 19:52:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6831d28718b77a4ba42e6215960c19a4828a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:f1:94:b4:44:89:03:28:7b:64:22:ff:7e:
9e:31:d6:41:02:1e:6f:e1:2c:7b:44:12:1a:af:7a:
25:f9:26:d5:28:ae:c6:4e:24:7d:82:4e:57:2f:57:
27:35:7c:47:3b:89:a1:7c:b7:38:29:63:8e:53:df:
85:62:d4:8d:eb:3e:35:fd:ae:c9:7e:4c:80:3f:25:
08:d8:e1:ad:96:ea:1e:a4:cb:70:50:c1:3f:5d:84:
7a:86:40:57:cd:aa:3e:50:cb:ee:d9:09:e5:78:fe:
f3:61:c8:a8:d1:df:3d:81:70:48:6d:87:19:d2:2b:
e5:e4:3d:6e:f8:ec:68:9b:14:e9:72:88:2b:b0:90:
eb:95:6e:65:56:ba:d8:5b:2b:ed:24:f2:1e:44:00:
d8:29:86:34:cc:22:9b:70:51:2d:e8:07:9d:9c:d9:
c4:67:2c:b1:b5:00:13:b0:10:06:39:79:30:62:54:
2f:0c:1b:df:a5:dc:63:f0:72:17:60:99:53:86:00:
fb:2f:91:1f:7b:b3:69:26:80:53:f0:1a:64:53:6a:
ae:86:38:5a:98:c1:6a:22:3b:6a:ea:81:88:b5:e8:
c2:6d:ca:3f:2e:0d:7e:e5:9c:e6:1c:63:d6:48:f0:
b2:21:b8:fd:c6:5a:ec:ef:e4:eb:46:10:1c:cd:6d:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:31:D2:87:18:B7:7A:4B:A4:2E:62:15:96:0C:19:A4:82:8A:6C
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/nGgx0ocYt3pLpC5iFZYMGaSCimw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:cc:50:ed:2b:a7:5b:c9:f2:e6:8c:69:91:b0:8f:c5:ec:92:
ab:ed:6c:d2:3e:64:ed:b1:86:4f:02:96:1f:b7:6a:c6:7d:3c:
77:bd:8a:b9:14:f5:eb:ea:aa:f5:b1:85:bc:1d:3d:db:d2:d2:
b9:00:e0:12:bb:75:90:cb:c2:f8:4a:1b:8c:da:bb:06:ab:32:
e5:b2:54:7e:4b:09:77:01:5e:64:a2:0a:87:da:34:fa:41:e2:
a2:f5:96:6c:f6:ef:2d:05:9a:1b:ac:37:46:d9:11:82:da:b0:
e1:99:6c:fb:9e:70:dc:67:cb:3e:09:21:ae:c9:d4:17:20:c5:
64:44:a2:c4:6a:f1:3d:23:0b:5e:dc:26:96:64:fe:bf:6f:7f:
33:a5:25:47:d3:ce:c4:aa:8d:b2:07:d1:ac:b8:9b:a0:c5:70:
b4:50:ac:44:6a:08:03:83:87:a1:6c:b1:93:58:2c:48:50:f6:
fa:b8:64:c2:b7:47:36:4b:43:98:7f:12:9e:e8:ef:dc:52:ed:
cc:c1:5f:e6:c9:0c:c5:be:d5:a2:b2:18:6a:e1:81:e1:8a:74:
68:1a:46:fb:65:b7:06:5f:75:7c:f1:f6:94:42:6a:f9:b7:39:
20:f3:56:fd:64:3b:c4:11:0c:2a:d3:f2:48:e1:4c:7c:12:47:
83:f9:15:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYurV8baA32GPVlCVUhndrzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjMxMTA3MTk1MjE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzY4MzFkMjg3MThiNzdhNGJhNDJlNjIxNTk2MGMxOWE0ODI4YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVvxlLREiQMoe2Qi/36eMdZBAh5v
4Sx7RBIar3ol+SbVKK7GTiR9gk5XL1cnNXxHO4mhfLc4KWOOU9+FYtSN6z41/a7J
fkyAPyUI2OGtluoepMtwUME/XYR6hkBXzao+UMvu2QnleP7zYcio0d89gXBIbYcZ
0ivl5D1u+OxomxTpcogrsJDrlW5lVrrYWyvtJPIeRADYKYY0zCKbcFEt6AednNnE
ZyyxtQATsBAGOXkwYlQvDBvfpdxj8HIXYJlThgD7L5Efe7NpJoBT8BpkU2quhjha
mMFqIjtq6oGItejCbco/Lg1+5ZzmHGPWSPCyIbj9xlrs7+TrRhAczW3hbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxoMdKHGLd6S6QuYhWWDBmkgopsMB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvbkdneDBvY1l0M3BMcEM1aUZaWU1HYVNDaW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8AGMA0G
CSqGSIb3DQEBCwUAA4IBAQDSzFDtK6dbyfLmjGmRsI/F7JKr7WzSPmTtsYZPApYf
t2rGfTx3vYq5FPXr6qr1sYW8HT3b0tK5AOASu3WQy8L4ShuM2rsGqzLlslR+Swl3
AV5kogqH2jT6QeKi9ZZs9u8tBZobrDdG2RGC2rDhmWz7nnDcZ8s+CSGuydQXIMVk
RKLEavE9Iwte3CaWZP6/b38zpSVH087Eqo2yB9GsuJugxXC0UKxEaggDg4ehbLGT
WCxIUPb6uGTCt0c2S0OYfxKe6O/cUu3MwV/myQzFvtWishhq4YHhinRoGkb7ZbcG
X3V88faUQmr5tzkg81b9ZDvEEQwq0/JI4Ux8EkeD+RWI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org