Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/jZ2pJmx3tu5OCrodKnVnIT-V0BY.roa
File: jZ2pJmx3tu5OCrodKnVnIT-V0BY.roa (raw, json)
Hash identifier: XsuinhdoReGlBap8+gwL0J6nDwyP2L9TqSXfQ6+qG6A=
Subject key identifier: 8D:9D:A9:26:6C:77:B6:EE:4E:0A:BA:1D:2A:75:67:21:3F:95:D0:16
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018A050713E16E74942BE747D9F0B8F6257B
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/jZ2pJmx3tu5OCrodKnVnIT-V0BY.roa
Signing time: Thu 17 Aug 2023 19:44:24 +0000
ROA not before: Thu 17 Aug 2023 19:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 18 Aug 2023 16:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:07:13:e1:6e:74:94:2b:e7:47:d9:f0:b8:f6:25:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Aug 17 19:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9da9266c77b6ee4e0aba1d2a7567213f95d016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:e4:81:0c:4f:a3:23:d6:8b:75:c1:80:80:
c8:f7:a3:fb:49:6d:fa:7d:2c:42:30:b5:91:ea:17:
87:13:d2:3b:99:e8:04:e3:13:c1:ef:e6:81:d5:15:
aa:f8:64:8a:ca:0e:79:2c:ab:cd:51:c9:99:4a:5f:
55:64:dd:93:b7:5a:9f:d7:08:57:34:3d:bc:88:fb:
76:ca:11:ea:e8:55:f9:25:f7:a1:24:fd:cf:b4:b5:
8f:14:74:43:6c:49:97:77:12:2d:dc:37:cd:93:59:
83:6a:fb:1b:fd:19:dc:bb:57:22:3e:40:0d:04:2f:
02:04:a8:2c:0f:2c:b3:c9:f7:1c:3d:d8:5b:bf:bc:
cf:e1:b5:78:8f:ab:e0:87:43:ca:53:cf:bd:3b:2c:
6d:8e:e4:33:87:06:13:9d:fe:82:83:1a:b0:a1:5a:
ad:b0:dd:16:7f:63:d4:02:6c:c0:d7:39:f6:aa:54:
58:cc:40:e9:9a:8a:d0:c6:08:1b:d0:78:65:c0:d9:
9e:67:51:9a:07:6b:d6:57:db:18:bc:cd:ea:02:91:
c0:21:90:19:5b:20:20:7a:d7:54:e0:e2:4e:28:29:
05:57:ca:43:59:fb:52:f4:3b:99:40:92:c3:6a:71:
9b:21:64:dc:88:41:82:1c:d0:47:05:ae:f2:cf:3e:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:A9:26:6C:77:B6:EE:4E:0A:BA:1D:2A:75:67:21:3F:95:D0:16
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/jZ2pJmx3tu5OCrodKnVnIT-V0BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:94:02:3c:0f:19:86:23:14:ac:06:9f:0a:87:e2:23:0f:ba:
e1:4e:ee:f0:60:8f:36:3f:35:bd:58:09:42:82:fb:3a:32:f9:
33:6c:65:38:f3:25:b5:92:28:4b:68:b4:db:12:3c:9d:7b:9d:
e2:9b:17:5f:ab:97:91:c7:c5:b5:f6:c8:62:d0:8c:2b:f1:3d:
a6:26:bf:d4:a6:bc:bc:91:23:eb:a1:f5:e0:85:50:f3:15:3c:
b0:08:a1:8c:11:a8:87:f5:48:6c:10:d9:a1:80:55:af:f1:2d:
05:a3:61:b7:1f:2f:74:d1:b8:7e:44:ef:d3:4c:46:1c:9c:64:
f0:b5:57:bc:eb:8e:96:07:8e:9e:8b:ed:4d:88:a2:1d:7e:30:
66:39:75:d1:4e:fe:97:82:01:db:5b:84:48:c7:28:5f:c9:8c:
34:f0:83:8c:5d:8f:34:22:44:74:f5:04:20:6f:e4:da:21:96:
14:fe:e6:a3:ee:2a:cc:a1:ca:7d:84:da:19:bb:6b:05:fe:80:
af:b7:7b:15:1f:83:4b:e2:09:22:13:dd:61:5f:b6:14:a2:53:
95:7d:fd:ad:c2:19:2a:01:f9:50:75:51:20:8f:a4:01:f2:64:
66:2c:40:ca:30:f3:9f:1f:23:a2:01:30:d9:5e:41:87:cf:c1:
bf:3e:4a:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoFBxPhbnSUK+dH2fC49iV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjMwODE3MTk0NDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDlkYTkyNjZjNzdiNmVlNGUwYWJhMWQyYTc1NjcyMTNmOTVkMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nTkgQxPoyPWi3XBgIDI96P7SW36
fSxCMLWR6heHE9I7megE4xPB7+aB1RWq+GSKyg55LKvNUcmZSl9VZN2Tt1qf1whX
ND28iPt2yhHq6FX5JfehJP3PtLWPFHRDbEmXdxIt3DfNk1mDavsb/Rncu1ciPkAN
BC8CBKgsDyyzyfccPdhbv7zP4bV4j6vgh0PKU8+9OyxtjuQzhwYTnf6CgxqwoVqt
sN0Wf2PUAmzA1zn2qlRYzEDpmorQxggb0HhlwNmeZ1GaB2vWV9sYvM3qApHAIZAZ
WyAgetdU4OJOKCkFV8pDWftS9DuZQJLDanGbIWTciEGCHNBHBa7yzz5IEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2dqSZsd7buTgq6HSp1ZyE/ldAWMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvaloycEpteDN0dTVPQ3JvZEtuVm5JVC1WMEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2agMA0G
CSqGSIb3DQEBCwUAA4IBAQBtlAI8DxmGIxSsBp8Kh+IjD7rhTu7wYI82PzW9WAlC
gvs6MvkzbGU48yW1kihLaLTbEjyde53imxdfq5eRx8W19shi0Iwr8T2mJr/Upry8
kSProfXghVDzFTywCKGMEaiH9UhsENmhgFWv8S0Fo2G3Hy900bh+RO/TTEYcnGTw
tVe8646WB46ei+1NiKIdfjBmOXXRTv6XggHbW4RIxyhfyYw08IOMXY80IkR09QQg
b+TaIZYU/uaj7irMocp9hNoZu2sF/oCvt3sVH4NL4gkiE91hX7YUolOVff2twhkq
AflQdVEgj6QB8mRmLEDKMPOfHyOiATDZXkGHz8G/PkrC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org