Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/1mYnJSogiTgx5nSK__c3VvsRrCQ.roa
File: 1mYnJSogiTgx5nSK__c3VvsRrCQ.roa (raw, json)
Hash identifier: BmXg1N1BZpiwx69egP71ZPzXmMqss7oNuXGzyyxTBXk=
Subject key identifier: D6:66:27:25:2A:20:89:38:31:E6:74:8A:FF:F7:37:56:FB:11:AC:24
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0185712796FFA70EE6C364D733ABDDFBB8E3
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/1mYnJSogiTgx5nSK__c3VvsRrCQ.roa
Signing time: Mon 02 Jan 2023 06:24:58 +0000
ROA not before: Mon 02 Jan 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31742
IP address blocks: 91.208.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:96:ff:a7:0e:e6:c3:64:d7:33:ab:dd:fb:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66627252a20893831e6748afff73756fb11ac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:6f:49:8f:33:b7:e7:12:9a:c4:78:67:d4:
d8:30:d1:3a:17:2a:57:f1:1f:93:ff:3c:f7:16:63:
d1:db:1d:8e:d0:2e:e4:74:b9:a3:15:a9:bb:dc:e5:
ae:c3:73:39:dc:31:20:3b:a5:38:61:a2:49:ed:a8:
2f:3c:52:77:8a:93:8e:e3:e0:e1:95:7b:9e:35:c8:
41:da:29:b7:2c:a3:69:37:ef:e2:f9:a0:3c:98:11:
41:62:71:54:a0:6b:90:1e:41:6d:41:35:bd:e2:37:
df:9e:c3:65:8f:5e:15:27:bc:dd:13:c1:60:12:28:
14:c5:87:73:b3:6f:e9:d6:32:df:e9:68:fc:c2:96:
f7:84:bb:06:27:24:b5:62:84:dd:bb:b9:07:07:27:
e7:eb:95:3f:8c:ab:f3:59:4f:b9:dc:0d:ec:10:cb:
4f:38:17:9d:dd:45:17:61:b9:e1:5a:f2:16:2c:a6:
e6:6e:29:67:72:b5:50:ca:df:6b:74:f3:32:6f:ad:
1d:07:b2:e4:53:ff:b3:b3:63:9a:3c:18:2e:0d:82:
08:69:17:62:e3:0f:ad:b7:09:e2:e3:de:b9:2c:55:
fa:57:bc:2b:57:3c:d1:1e:e5:aa:83:5d:a9:2c:d6:
69:e4:f4:19:4f:29:8e:33:ea:be:c0:6e:a2:9f:06:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:27:25:2A:20:89:38:31:E6:74:8A:FF:F7:37:56:FB:11:AC:24
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/1mYnJSogiTgx5nSK__c3VvsRrCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c0:18:3d:15:9f:9f:83:11:99:84:5b:c3:f8:1f:5f:a5:b1:
32:5e:9a:9c:d9:0d:46:15:2f:3d:15:73:c6:58:55:4c:2e:9f:
26:e0:85:d1:b6:f9:8b:ee:c5:cb:cf:5b:4a:78:8a:9c:77:14:
06:1a:b6:0c:7b:8b:aa:71:1e:71:0e:64:d2:c3:7a:5d:9d:d7:
fb:09:e9:14:9f:59:37:d4:18:b1:0a:58:57:c5:78:94:01:0b:
47:6e:58:9c:3f:ad:c7:3c:f1:22:4b:3f:3f:a6:89:9a:da:5e:
7c:2b:ec:57:ba:f1:9d:5b:19:e7:34:6d:c6:7c:9c:68:f4:68:
f2:55:f1:87:8e:ec:40:60:94:3f:f8:95:58:c4:2e:a6:15:81:
4c:b3:d1:22:db:80:49:b9:c6:f5:bb:70:da:01:8f:05:10:dc:
8f:77:2b:8a:b4:04:b8:25:c9:e4:65:75:94:6d:aa:ca:91:57:
e4:8c:67:95:78:f3:25:f3:d6:8a:35:d5:54:a0:bd:c7:c8:3d:
0a:10:b2:aa:ef:06:85:37:6e:89:95:22:64:69:a9:18:c2:ce:
14:57:d2:b9:3c:f9:ff:de:d1:b8:da:76:1e:75:42:07:de:f5:
50:a2:e9:de:98:c0:4a:7b:e1:37:2a:18:94:e9:8c:e9:8f:70:
f7:4e:00:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ5b/pw7mw2TXM6vd+7jjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjMwMTAyMDYyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjY2MjcyNTJhMjA4OTM4MzFlNjc0OGFmZmY3Mzc1NmZiMTFhYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBhvSY8zt+cSmsR4Z9TYMNE6FypX
8R+T/zz3FmPR2x2O0C7kdLmjFam73OWuw3M53DEgO6U4YaJJ7agvPFJ3ipOO4+Dh
lXueNchB2im3LKNpN+/i+aA8mBFBYnFUoGuQHkFtQTW94jffnsNlj14VJ7zdE8Fg
EigUxYdzs2/p1jLf6Wj8wpb3hLsGJyS1YoTdu7kHByfn65U/jKvzWU+53A3sEMtP
OBed3UUXYbnhWvIWLKbmbilncrVQyt9rdPMyb60dB7LkU/+zs2OaPBguDYIIaRdi
4w+ttwni4965LFX6V7wrVzzRHuWqg12pLNZp5PQZTymOM+q+wG6inwZpJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZmJyUqIIk4MeZ0iv/3N1b7EawkMB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvMW1ZbkpTb2dpVGd4NW5TS19fYzNWdnNSckNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9ByMA0G
CSqGSIb3DQEBCwUAA4IBAQBLwBg9FZ+fgxGZhFvD+B9fpbEyXpqc2Q1GFS89FXPG
WFVMLp8m4IXRtvmL7sXLz1tKeIqcdxQGGrYMe4uqcR5xDmTSw3pdndf7CekUn1k3
1BixClhXxXiUAQtHblicP63HPPEiSz8/poma2l58K+xXuvGdWxnnNG3GfJxo9Gjy
VfGHjuxAYJQ/+JVYxC6mFYFMs9Ei24BJucb1u3DaAY8FENyPdyuKtAS4JcnkZXWU
barKkVfkjGeVePMl89aKNdVUoL3HyD0KELKq7waFN26JlSJkaakYws4UV9K5PPn/
3tG42nYedUIH3vVQounemMBKe+E3KhiU6Yzpj3D3TgB2
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:28 2024 by rpki-client on console-ams.rpki-client.org