Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/BDmO0FmdGok5TfW33Jyz211QXGQ.roa
File: BDmO0FmdGok5TfW33Jyz211QXGQ.roa (raw, json)
Hash identifier: u+2RoQDzwNlIVrgKaXcpG0lvxFgvL4m3/KfPwPeqYeA=
Subject key identifier: 04:39:8E:D0:59:9D:1A:89:39:4D:F5:B7:DC:9C:B3:DB:5D:50:5C:64
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018B68CE5B8880E21AD1BEFADCBEBE799C91
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/BDmO0FmdGok5TfW33Jyz211QXGQ.roa
Signing time: Wed 25 Oct 2023 21:47:15 +0000
ROA not before: Wed 25 Oct 2023 21:47:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 91.221.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:ce:5b:88:80:e2:1a:d1:be:fa:dc:be:be:79:9c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Oct 25 21:47:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04398ed0599d1a89394df5b7dc9cb3db5d505c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:77:09:19:74:44:02:57:de:1f:a1:26:07:
75:9c:74:1d:18:92:13:7b:32:8a:1a:95:96:9b:01:
1b:9f:b1:01:bf:f4:6c:fd:84:fc:b2:70:33:5c:e9:
1f:26:f8:2f:c1:b1:7b:a3:88:a2:9a:81:b1:af:54:
74:81:8b:19:d5:c2:98:b1:cf:a3:06:54:d5:47:3f:
a4:be:c4:b9:2f:1a:bc:7e:8b:50:3c:1e:78:dd:c3:
c4:60:8a:ef:8a:e4:03:47:22:82:3a:8d:4b:28:69:
d8:86:ac:eb:7a:b9:76:80:ca:a0:81:05:9a:0f:9e:
de:5b:ca:d8:62:b2:7c:ea:6b:d4:a8:7a:0a:c8:f0:
1c:bd:a4:3d:c7:ff:1c:45:b0:27:59:fd:e7:f9:a5:
c1:3a:6f:e2:78:19:86:bb:92:4b:32:04:f5:fd:c5:
99:48:21:d3:69:d5:09:09:41:fa:df:9c:23:76:8f:
e3:dc:c0:80:41:1e:ab:d0:51:2b:40:8d:7c:e1:39:
91:05:e9:49:e1:7f:9e:d9:fb:b5:91:66:26:7e:36:
b3:f7:e0:43:d2:c3:49:0e:40:af:4d:1f:36:82:a4:
18:d5:f0:2b:2b:b3:d3:f8:59:09:7e:94:2e:dc:fb:
3c:35:65:b7:3e:c4:26:57:c3:c0:39:8a:83:08:fb:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:8E:D0:59:9D:1A:89:39:4D:F5:B7:DC:9C:B3:DB:5D:50:5C:64
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/BDmO0FmdGok5TfW33Jyz211QXGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:18:e6:de:a5:aa:fe:3d:88:0d:aa:9a:82:6c:1c:51:85:ce:
f1:97:c4:cf:46:36:36:f2:9a:17:6c:66:24:83:e9:ca:97:68:
67:96:c7:a0:54:09:e9:a8:b0:c3:87:86:5d:f9:bb:91:3e:ce:
83:9c:ca:81:f5:39:bf:1b:ce:a2:15:1f:76:06:4c:3a:f7:6f:
eb:f9:37:8a:2e:8f:2b:ec:ca:19:a4:f5:5e:7e:0d:43:dc:20:
87:20:ba:af:96:70:99:20:fc:ac:ad:29:03:a9:0d:33:4a:1b:
27:de:f1:a2:e9:27:0c:b2:33:99:b6:bf:28:55:0f:85:b8:71:
f1:13:a8:50:a5:d5:10:33:41:33:b6:a7:ab:81:7c:6d:e8:03:
44:f5:5e:28:93:3d:8e:56:f3:55:32:b7:4f:7f:64:5a:7e:e9:
a6:29:b8:7f:f5:30:6f:f4:7c:12:7b:3c:04:44:a7:e7:55:ac:
68:8c:e2:4f:91:65:5b:d0:ff:3a:c7:5b:73:e6:b5:30:e5:7f:
0c:5d:35:d0:d2:c1:dc:b1:6a:66:48:62:5a:41:46:43:fb:5a:
67:f3:3e:9c:4b:a0:db:b0:ae:ff:7b:c6:b2:97:4c:97:3a:fd:
e8:f9:e3:19:d4:64:46:bc:c7:91:1d:fd:6a:0e:a8:ed:76:09:
14:74:f5:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtozluIgOIa0b763L6+eZyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjMxMDI1MjE0NzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDM5OGVkMDU5OWQxYTg5Mzk0ZGY1YjdkYzljYjNkYjVkNTA1YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEx3CRl0RAJX3h+hJgd1nHQdGJIT
ezKKGpWWmwEbn7EBv/Rs/YT8snAzXOkfJvgvwbF7o4iimoGxr1R0gYsZ1cKYsc+j
BlTVRz+kvsS5Lxq8fotQPB543cPEYIrviuQDRyKCOo1LKGnYhqzrerl2gMqggQWa
D57eW8rYYrJ86mvUqHoKyPAcvaQ9x/8cRbAnWf3n+aXBOm/ieBmGu5JLMgT1/cWZ
SCHTadUJCUH635wjdo/j3MCAQR6r0FErQI184TmRBelJ4X+e2fu1kWYmfjaz9+BD
0sNJDkCvTR82gqQY1fArK7PT+FkJfpQu3Ps8NWW3PsQmV8PAOYqDCPvn/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQ5jtBZnRqJOU31t9ycs9tdUFxkMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvQkRtTzBGbWRHb2s1VGZXMzNKeXoyMTFRWEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW93oMA0G
CSqGSIb3DQEBCwUAA4IBAQCKGObepar+PYgNqpqCbBxRhc7xl8TPRjY28poXbGYk
g+nKl2hnlsegVAnpqLDDh4Zd+buRPs6DnMqB9Tm/G86iFR92Bkw692/r+TeKLo8r
7MoZpPVefg1D3CCHILqvlnCZIPysrSkDqQ0zShsn3vGi6ScMsjOZtr8oVQ+FuHHx
E6hQpdUQM0EztqergXxt6ANE9V4okz2OVvNVMrdPf2RafummKbh/9TBv9HwSezwE
RKfnVaxojOJPkWVb0P86x1tz5rUw5X8MXTXQ0sHcsWpmSGJaQUZD+1pn8z6cS6Db
sK7/e8ayl0yXOv3o+eMZ1GRGvMeRHf1qDqjtdgkUdPXL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org