Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/mqb8iyBZVxWvbNyJCHiVWFHBZVM.roa
File: mqb8iyBZVxWvbNyJCHiVWFHBZVM.roa (raw, json)
Hash identifier: /4wIF7PTB2ClKQJuUI1LLTA6qIUklS7dvBtTFcNZu0M=
Subject key identifier: 9A:A6:FC:8B:20:59:57:15:AF:6C:DC:89:08:78:95:58:51:C1:65:53
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 0193CF9F961CA792AB03EFA3679907AF8DD0
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/mqb8iyBZVxWvbNyJCHiVWFHBZVM.roa
Signing time: Mon 16 Dec 2024 13:19:22 +0000
ROA not before: Mon 16 Dec 2024 13:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 91.196.32.0/24 maxlen: 24
91.196.33.0/24 maxlen: 24
91.196.34.0/24 maxlen: 24
91.196.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:9f:96:1c:a7:92:ab:03:ef:a3:67:99:07:af:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Dec 16 13:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa6fc8b20595715af6cdc890878955851c16553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:a3:3d:ff:8f:08:12:31:b5:16:1f:6c:9c:
88:64:54:15:fc:92:6a:d7:69:c1:3d:f9:1f:0c:53:
b1:3e:61:69:24:05:1b:a3:dc:60:83:5e:02:12:5e:
0f:61:be:9a:95:ca:78:1d:d0:ab:07:05:1f:8a:b3:
58:f2:c1:26:95:fe:2a:74:f3:dc:89:07:c6:c2:28:
1d:d8:38:a7:7d:b9:c6:ef:f2:f3:29:bf:62:cb:a5:
0f:10:d6:5e:e2:6d:69:a9:0e:9e:f2:27:09:2e:c6:
e0:9c:f2:13:75:6a:90:8d:b6:3e:1f:51:35:16:f1:
0e:9a:f5:77:5e:86:c8:10:15:73:ff:70:ad:ec:bd:
b4:a2:83:00:a5:18:e2:d0:f0:ae:2e:a8:f5:5d:3c:
e0:cb:17:f0:fd:55:21:20:22:2b:71:56:3a:1b:3c:
d7:77:08:97:56:69:b2:c9:46:f6:52:e4:3d:cb:7a:
4c:7b:56:f6:27:57:8c:70:e2:8a:e8:7d:79:74:69:
d1:50:e6:ea:4c:e3:23:37:f3:51:54:94:b0:ff:c3:
83:ee:3c:e0:8e:ba:10:f6:39:69:ee:c7:8f:48:b2:
2f:e6:b0:ae:30:50:c2:74:4d:bd:41:63:fa:5b:5d:
02:d1:c9:ee:05:4a:ce:a7:8d:3d:33:88:22:fa:ea:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A6:FC:8B:20:59:57:15:AF:6C:DC:89:08:78:95:58:51:C1:65:53
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/mqb8iyBZVxWvbNyJCHiVWFHBZVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:03:f4:e9:8b:a6:55:1e:4e:34:21:f7:4c:fb:76:24:e8:4e:
a5:8e:99:d0:57:d7:4e:82:d6:86:23:f0:e8:66:2f:12:62:7b:
f6:c1:ab:70:bf:49:d7:e3:4a:c4:6a:08:6d:83:52:ae:be:ab:
2c:97:dd:60:b6:55:ab:8e:f2:00:c4:5d:b1:0a:94:1e:59:4f:
62:a4:e0:85:74:a1:4f:34:db:d9:36:c9:96:0f:a1:93:92:68:
1a:af:79:6a:dd:e9:de:e4:8e:f3:c6:eb:c6:65:dd:d7:9f:d5:
41:98:17:01:ac:b1:80:4c:ae:85:91:f0:61:87:34:51:37:d4:
5a:ef:d2:33:f9:6e:0b:1f:bb:17:24:72:c7:e4:b1:60:d0:ae:
e0:4e:3b:af:5f:eb:cc:a5:3c:b5:b9:a7:26:85:58:72:cf:85:
2a:2d:01:34:67:04:d0:00:d2:95:9c:7b:4e:05:d4:78:bd:4d:
7e:49:0c:77:a2:1a:92:3e:48:fe:49:38:87:52:8a:69:63:0a:
62:76:e9:2b:ce:6d:f2:02:92:40:69:e1:f1:1a:e9:1a:40:4d:
f4:b9:23:5d:f8:2b:5b:03:d6:47:af:4f:1c:71:35:8b:0c:5e:
50:de:a4:2b:2b:16:3c:10:2d:1c:b9:72:65:83:c3:dc:85:60:
6c:b4:2b:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPPn5Ycp5KrA++jZ5kHr43QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjQxMjE2MTMxOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWE2ZmM4YjIwNTk1NzE1YWY2Y2RjODkwODc4OTU1ODUxYzE2NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzGjPf+PCBIxtRYfbJyIZFQV/JJq
12nBPfkfDFOxPmFpJAUbo9xgg14CEl4PYb6alcp4HdCrBwUfirNY8sEmlf4qdPPc
iQfGwigd2DinfbnG7/LzKb9iy6UPENZe4m1pqQ6e8icJLsbgnPITdWqQjbY+H1E1
FvEOmvV3XobIEBVz/3Ct7L20ooMApRji0PCuLqj1XTzgyxfw/VUhICIrcVY6GzzX
dwiXVmmyyUb2UuQ9y3pMe1b2J1eMcOKK6H15dGnRUObqTOMjN/NRVJSw/8OD7jzg
jroQ9jlp7sePSLIv5rCuMFDCdE29QWP6W10C0cnuBUrOp409M4gi+urI7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqm/IsgWVcVr2zciQh4lVhRwWVTMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvbXFiOGl5QlpWeFd2Yk55SkNIaVZXRkhCWlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8QgMA0G
CSqGSIb3DQEBCwUAA4IBAQA6A/Tpi6ZVHk40IfdM+3Yk6E6ljpnQV9dOgtaGI/Do
Zi8SYnv2watwv0nX40rEaghtg1Kuvqssl91gtlWrjvIAxF2xCpQeWU9ipOCFdKFP
NNvZNsmWD6GTkmgar3lq3ene5I7zxuvGZd3Xn9VBmBcBrLGATK6FkfBhhzRRN9Ra
79Iz+W4LH7sXJHLH5LFg0K7gTjuvX+vMpTy1uacmhVhyz4UqLQE0ZwTQANKVnHtO
BdR4vU1+SQx3ohqSPkj+STiHUoppYwpidukrzm3yApJAaeHxGukaQE30uSNd+Ctb
A9ZHr08ccTWLDF5Q3qQrKxY8EC0cuXJlg8PchWBstCuB
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:16:47 2025 by rpki-client