Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/f6l4Y_uLnWnjRIlol8RCnRMliks.roa
File: f6l4Y_uLnWnjRIlol8RCnRMliks.roa (raw, json)
Hash identifier: Vp7QYsAvk/k9npr6Z4EMdZ4stahOashPn1BW8rJeKio=
Subject key identifier: 7F:A9:78:63:FB:8B:9D:69:E3:44:89:68:97:C4:42:9D:13:25:8A:4B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEBABDB46B41EA4EA31787DB0C1AC5
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/f6l4Y_uLnWnjRIlol8RCnRMliks.roa
Signing time: Sun 01 Jan 2023 06:04:45 +0000
ROA not before: Sun 01 Jan 2023 06:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42401
IP address blocks: 91.192.88.0/22 maxlen: 22
91.192.89.0/24 maxlen: 24
91.192.90.0/24 maxlen: 24
91.192.91.0/24 maxlen: 24
91.192.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ba:bd:b4:6b:41:ea:4e:a3:17:87:db:0c:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa97863fb8b9d69e344896897c4429d13258a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:9a:11:58:f5:26:d2:d2:e1:29:78:b5:7f:
46:c4:bd:87:a1:c2:6f:ae:4d:f6:7a:61:d4:77:5b:
5c:5b:e6:33:b2:b7:e9:36:ec:7a:65:b0:17:d2:53:
55:57:ba:e0:7f:dd:92:f4:32:fb:01:3b:61:03:c3:
69:cb:21:36:f4:e6:60:87:5d:8d:a6:bc:3e:08:95:
c9:ce:af:72:56:50:61:82:5d:7e:6f:53:64:61:0d:
20:f5:c6:ce:7a:9c:71:6c:c8:2f:8c:3e:22:ec:89:
53:19:2a:c3:0d:3f:6a:92:b7:72:df:fe:e1:76:f4:
db:c6:52:f0:25:2d:40:d7:35:ea:14:43:11:c6:35:
5d:d6:f1:bd:8f:4a:1b:0d:7a:f1:38:de:0c:e9:ca:
22:f3:5e:0e:c0:91:11:27:2f:91:0c:51:e6:39:a4:
28:44:dd:78:f1:5b:53:83:52:09:30:b2:fc:a3:ba:
d0:94:ac:03:9e:fd:15:9d:ae:9c:8e:1b:42:d9:9a:
a6:38:59:1b:dd:68:5b:b7:ea:3a:31:df:f6:51:2d:
3f:19:37:35:7a:22:6a:3b:78:77:43:05:0e:5d:85:
a6:54:0a:fb:c2:22:02:ff:ba:36:7e:72:0c:8b:fe:
63:76:e3:ec:67:57:1f:4e:14:7d:d7:82:44:40:27:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:78:63:FB:8B:9D:69:E3:44:89:68:97:C4:42:9D:13:25:8A:4B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/f6l4Y_uLnWnjRIlol8RCnRMliks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:bc:7c:83:66:be:11:d0:0f:e6:32:49:a9:d9:df:c2:52:01:
1b:f3:89:07:35:2f:a8:26:62:5a:50:02:ee:d7:bf:50:75:d7:
87:c6:bd:83:e2:f1:05:8b:3a:2c:0c:9a:aa:98:5d:9d:6b:4c:
b4:7c:18:9a:ef:40:b9:a6:64:ea:ef:ff:80:70:70:f7:78:10:
98:d9:5f:1c:90:37:b9:86:ab:fb:00:2e:cb:ef:38:a3:66:6a:
06:57:42:1d:57:32:6f:c0:7a:9a:8c:4a:38:8d:0f:22:2c:4c:
10:ad:ef:06:f2:6a:d1:ad:40:66:bc:b3:13:f4:ad:19:8a:b3:
34:fe:96:e9:c2:b1:e5:5f:d1:51:4e:09:f7:52:11:60:9a:5b:
13:7f:d9:fc:ec:61:cc:cc:ed:1e:ec:1b:a1:e0:34:48:c9:a3:
54:72:20:6e:2a:c0:c2:3b:5d:46:5e:35:88:e5:eb:f2:3e:e5:
37:32:e1:7a:75:d5:25:84:38:f8:42:35:c7:02:1f:83:75:78:
bf:75:00:cc:f7:3e:66:f6:f5:2d:b3:a5:2b:86:a4:45:51:23:
99:4b:1f:80:b3:21:8b:7b:fc:d6:92:8c:3d:e9:dd:9e:6c:c8:
52:49:cd:d7:11:9f:43:71:4d:30:f1:cd:4f:35:e9:ef:76:d9:
6b:df:c3:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7rq9tGtB6k6jF4fbDBrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmE5Nzg2M2ZiOGI5ZDY5ZTM0NDg5Njg5N2M0NDI5ZDEzMjU4YTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF+aEVj1JtLS4Sl4tX9GxL2HocJv
rk32emHUd1tcW+YzsrfpNux6ZbAX0lNVV7rgf92S9DL7ATthA8NpyyE29OZgh12N
prw+CJXJzq9yVlBhgl1+b1NkYQ0g9cbOepxxbMgvjD4i7IlTGSrDDT9qkrdy3/7h
dvTbxlLwJS1A1zXqFEMRxjVd1vG9j0obDXrxON4M6coi814OwJERJy+RDFHmOaQo
RN148VtTg1IJMLL8o7rQlKwDnv0Vna6cjhtC2ZqmOFkb3Whbt+o6Md/2US0/GTc1
eiJqO3h3QwUOXYWmVAr7wiIC/7o2fnIMi/5jduPsZ1cfThR914JEQCevLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+peGP7i51p40SJaJfEQp0TJYpLMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvZjZsNFlfdUxuV25qUklsb2w4UkNuUk1saWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8BYMA0G
CSqGSIb3DQEBCwUAA4IBAQBNvHyDZr4R0A/mMkmp2d/CUgEb84kHNS+oJmJaUALu
179QddeHxr2D4vEFizosDJqqmF2da0y0fBia70C5pmTq7/+AcHD3eBCY2V8ckDe5
hqv7AC7L7zijZmoGV0IdVzJvwHqajEo4jQ8iLEwQre8G8mrRrUBmvLMT9K0ZirM0
/pbpwrHlX9FRTgn3UhFgmlsTf9n87GHMzO0e7Buh4DRIyaNUciBuKsDCO11GXjWI
5evyPuU3MuF6ddUlhDj4QjXHAh+DdXi/dQDM9z5m9vUts6UrhqRFUSOZSx+AsyGL
e/zWkow96d2ebMhSSc3XEZ9DcU0w8c1PNenvdtlr38Nm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org