Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/m-suLf331q2R255j6hiVTFKMHro.roa
File: m-suLf331q2R255j6hiVTFKMHro.roa (raw, json)
Hash identifier: 0h2pfokudonyK7g1mkggJsAI+QhQSgQ9i4I70mjuy9k=
Subject key identifier: 9B:EB:2E:2D:FD:F7:D6:AD:91:DB:9E:63:EA:18:95:4C:52:8C:1E:BA
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018F9599EF8489B528A0E11894DC4BAB511E
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/m-suLf331q2R255j6hiVTFKMHro.roa
Signing time: Mon 20 May 2024 10:44:04 +0000
ROA not before: Mon 20 May 2024 10:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.225.225.0/24 maxlen: 24
188.191.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 08:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:99:ef:84:89:b5:28:a0:e1:18:94:dc:4b:ab:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 20 10:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9beb2e2dfdf7d6ad91db9e63ea18954c528c1eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:18:a6:13:c1:39:ef:73:62:59:24:10:25:
48:5e:6b:c6:53:4b:1a:af:4b:34:90:9d:c7:56:21:
d5:cb:4e:36:63:33:a8:96:11:d3:b6:68:a6:3b:67:
5d:ee:b5:e0:6c:c2:47:79:fc:d7:c5:7e:d3:b2:61:
59:fe:66:bf:4d:6d:c4:06:cf:6d:23:f0:05:bc:09:
8a:ec:49:ca:54:ee:0a:03:c7:f5:11:40:28:02:ec:
44:de:67:0a:a4:17:31:2a:08:48:d2:c1:db:db:a0:
ff:fb:5c:c0:6b:ad:41:00:7d:6e:ea:00:49:bc:f7:
59:46:3d:ce:5a:ca:dd:ef:f6:2d:ab:d3:a1:a1:c3:
ed:b5:87:0c:5d:8f:7e:dd:2a:4f:7d:1d:8a:3c:5b:
7b:7d:1f:1c:12:de:61:34:31:b9:30:7e:91:f2:32:
da:ca:e8:f0:62:27:ad:9f:15:93:a4:d2:01:5a:fa:
06:6c:d7:2c:42:7e:5a:cd:6e:57:d4:34:25:21:7a:
16:aa:96:1f:6f:a8:72:e3:da:08:bc:a6:b1:29:9f:
f9:78:a8:2f:16:5b:31:73:6a:df:73:26:5f:e6:fd:
43:4a:11:68:c3:62:7e:ff:8b:44:07:f2:b2:69:e0:
b6:28:86:05:05:96:7e:fa:42:72:cf:9b:12:4a:fb:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:2E:2D:FD:F7:D6:AD:91:DB:9E:63:EA:18:95:4C:52:8C:1E:BA
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/m-suLf331q2R255j6hiVTFKMHro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
188.191.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e2:91:b7:13:8b:c7:2d:bc:aa:6f:61:b4:87:5d:ed:32:7f:
3f:01:a1:0e:2e:c9:e9:5b:8f:39:0a:a9:f2:6f:9d:e4:a4:7f:
e9:4c:94:73:0d:d0:db:72:60:f4:5d:99:a1:f1:58:a6:be:d2:
f2:26:9b:60:6a:e8:1a:ea:58:ce:26:be:cf:4d:0c:2c:84:d2:
c7:92:b2:ac:6f:34:ca:d0:96:00:79:f7:03:a7:e5:62:d0:c7:
e3:15:be:0c:99:83:ca:6d:bf:fd:23:c9:53:d3:52:da:cc:db:
60:cd:00:8a:26:37:a0:cd:6e:81:04:9d:79:ae:fc:af:32:d9:
5a:af:04:90:99:c6:02:7e:84:ae:90:09:19:ee:6d:93:c1:6a:
73:61:51:90:89:5c:bd:9e:4b:f5:e6:00:25:98:ec:54:0a:83:
8a:b5:84:c8:c8:36:57:11:c4:ce:7e:61:f5:cf:f9:85:a7:91:
b0:cc:68:e0:68:35:1a:d7:29:2c:fd:75:91:5b:e5:4b:ac:e9:
91:cc:2a:93:c5:23:90:69:22:45:8e:aa:9c:f7:f8:95:b5:e7:
29:13:c1:42:b7:d9:fc:90:4d:d1:de:ec:d7:aa:be:9f:9b:66:
e3:2e:c2:01:33:d6:97:db:b0:9b:77:11:01:40:08:c5:45:e8:
62:d7:1e:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+Vme+EibUooOEYlNxLq1EeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwNTIwMTA0NDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmViMmUyZGZkZjdkNmFkOTFkYjllNjNlYTE4OTU0YzUyOGMxZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QAYphPBOe9zYlkkECVIXmvGU0sa
r0s0kJ3HViHVy042YzOolhHTtmimO2dd7rXgbMJHefzXxX7TsmFZ/ma/TW3EBs9t
I/AFvAmK7EnKVO4KA8f1EUAoAuxE3mcKpBcxKghI0sHb26D/+1zAa61BAH1u6gBJ
vPdZRj3OWsrd7/Ytq9OhocPttYcMXY9+3SpPfR2KPFt7fR8cEt5hNDG5MH6R8jLa
yujwYietnxWTpNIBWvoGbNcsQn5azW5X1DQlIXoWqpYfb6hy49oIvKaxKZ/5eKgv
Flsxc2rfcyZf5v1DShFow2J+/4tEB/KyaeC2KIYFBZZ++kJyz5sSSvs/2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJvrLi3999atkdueY+oYlUxSjB66MB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvbS1zdUxmMzMxcTJSMjU1ajZoaVZURktNSHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+HhAwQA
vL9rMA0GCSqGSIb3DQEBCwUAA4IBAQBM4pG3E4vHLbyqb2G0h13tMn8/AaEOLsnp
W485Cqnyb53kpH/pTJRzDdDbcmD0XZmh8VimvtLyJptgauga6ljOJr7PTQwshNLH
krKsbzTK0JYAefcDp+Vi0MfjFb4MmYPKbb/9I8lT01LazNtgzQCKJjegzW6BBJ15
rvyvMtlarwSQmcYCfoSukAkZ7m2TwWpzYVGQiVy9nkv15gAlmOxUCoOKtYTIyDZX
EcTOfmH1z/mFp5GwzGjgaDUa1yks/XWRW+VLrOmRzCqTxSOQaSJFjqqc9/iVtecp
E8FCt9n8kE3R3uzXqr6fm2bjLsIBM9aX27CbdxEBQAjFRehi1x70
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org