Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/1-1mPUxSJI04bTgSYdS8Fj_LkXo.roa
File: 1-1mPUxSJI04bTgSYdS8Fj_LkXo.roa (raw, json)
Hash identifier: PJ6VPvC1LZ873eTpmy3gePDFFjqCBO4CIswaZ2c/QPY=
Subject key identifier: D7:ED:66:3D:4C:52:24:8D:38:6D:38:12:61:D4:BC:16:3F:CB:91:7A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 01856ED4C8E3F8C0AB9497A6CA61219B6059
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/1-1mPUxSJI04bTgSYdS8Fj_LkXo.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49711
IP address blocks: 176.118.152.0/21 maxlen: 21
91.220.250.0/24 maxlen: 24
91.215.176.0/22 maxlen: 22
2001:67c:57c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c8:e3:f8:c0:ab:94:97:a6:ca:61:21:9b:60:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7ed663d4c52248d386d381261d4bc163fcb917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:b0:1f:74:af:b0:93:eb:03:f0:76:7b:0e:
a1:a2:1d:1d:f9:ba:aa:63:e3:f4:9a:0b:a2:36:87:
06:a9:e4:7d:d1:53:7a:90:79:de:50:23:d1:32:7b:
76:50:58:3d:6f:0b:e2:ef:b2:7c:d0:b2:53:5a:c0:
a5:d1:4d:49:23:e8:0c:ba:4b:ee:2d:2c:89:b6:ab:
cf:5d:81:82:1b:6c:c8:1b:b3:31:68:75:c7:4d:68:
08:fb:66:f4:8b:2f:dc:e8:32:71:e2:e9:54:64:cc:
72:dc:5e:6c:ce:1d:eb:d5:11:74:8c:87:d1:4c:0e:
0f:54:ff:4d:b4:10:05:e3:51:0f:ab:85:60:8e:0f:
39:2a:33:75:f3:2c:fc:87:5e:a8:d9:bc:49:42:e1:
1b:85:71:55:5e:eb:9a:b0:ff:54:06:64:25:70:df:
55:bc:97:cc:95:4f:e9:86:e3:36:af:82:d1:f3:1c:
49:c2:d0:ed:87:e1:22:6a:34:d8:15:7c:d1:f0:35:
7a:4d:be:2b:44:03:26:37:ce:2c:fe:25:e7:24:74:
20:47:01:d8:1f:e6:c0:74:25:7b:6b:6c:ff:30:28:
60:b3:0d:86:52:1e:fa:78:7c:4e:1c:33:d9:26:5e:
27:7c:03:1b:42:c2:89:c0:5c:81:6e:ec:0a:df:d9:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:ED:66:3D:4C:52:24:8D:38:6D:38:12:61:D4:BC:16:3F:CB:91:7A
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/1-1mPUxSJI04bTgSYdS8Fj_LkXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.176.0/22
91.220.250.0/24
176.118.152.0/21
IPv6:
2001:67c:57c::/48
Signature Algorithm: sha256WithRSAEncryption
74:7c:c4:86:44:f0:f3:2e:cb:aa:49:67:39:0b:9f:86:f4:ff:
4a:5e:a5:12:4c:5c:77:13:24:ea:82:6e:da:2f:41:bb:79:ac:
be:2d:ca:59:c8:7b:f1:60:1d:c6:21:58:55:f0:fe:ff:b0:ad:
5c:6a:46:15:b2:49:0a:73:9e:be:5f:06:42:ab:ce:3b:ef:03:
71:38:e4:b9:22:3b:06:1f:87:90:0e:46:e7:a9:cb:23:5d:e2:
bd:2f:a0:c6:0d:95:aa:42:aa:89:23:50:e5:05:76:c0:bc:b5:
32:21:d0:72:fa:c7:94:ea:cf:64:06:91:9b:cd:68:13:f0:4e:
2a:a8:8e:1e:42:28:e5:75:0c:21:a2:c5:87:3b:02:00:7f:4b:
33:f8:08:12:b7:1f:79:0a:39:c7:b5:59:08:60:b3:40:26:be:
fc:db:96:ea:2c:e7:dd:83:de:ca:71:c9:dc:33:bf:03:5e:11:
b6:42:d2:90:4f:6f:ec:16:36:04:86:b8:43:82:02:83:89:71:
89:c6:cf:5f:8a:2a:4b:3d:34:2e:b9:38:fe:cf:23:9e:25:ac:
27:fa:44:e7:eb:1b:fc:4e:8e:90:14:00:1a:a1:de:6f:2d:fa:
b4:ce:3e:df:03:33:b3:37:8b:3e:cd:1b:e7:b1:1e:6e:47:4b:
66:84:c2:3d
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVu1Mjj+MCrlJemymEhm2BZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1
YTQ0OWEwHhcNMjMwMTAxMTkzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2VkNjYzZDRjNTIyNDhkMzg2ZDM4MTI2MWQ0YmMxNjNmY2I5MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPuwH3SvsJPrA/B2ew6hoh0d+bqq
Y+P0mguiNocGqeR90VN6kHneUCPRMnt2UFg9bwvi77J80LJTWsCl0U1JI+gMukvu
LSyJtqvPXYGCG2zIG7MxaHXHTWgI+2b0iy/c6DJx4ulUZMxy3F5szh3r1RF0jIfR
TA4PVP9NtBAF41EPq4Vgjg85KjN18yz8h16o2bxJQuEbhXFVXuuasP9UBmQlcN9V
vJfMlU/phuM2r4LR8xxJwtDth+EiajTYFXzR8DV6Tb4rRAMmN84s/iXnJHQgRwHY
H+bAdCV7a2z/MChgsw2GUh76eHxOHDPZJl4nfAMbQsKJwFyBbuwK39nzvQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFNftZj1MUiSNOG04EmHUvBY/y5F6MB8GA1UdIwQY
MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt
NjYyZWM4MThkMjNkLzEvMS0xbVBVeFNKSTA0YlRnU1lkUzhGal9Ma1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk
LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCW9ewAwQA
W9z6AwQDsHaYMA8EAgACMAkDBwAgAQZ8BXwwDQYJKoZIhvcNAQELBQADggEBAHR8
xIZE8PMuy6pJZzkLn4b0/0pepRJMXHcTJOqCbtovQbt5rL4tylnIe/FgHcYhWFXw
/v+wrVxqRhWySQpznr5fBkKrzjvvA3E45LkiOwYfh5AORuepyyNd4r0voMYNlapC
qokjUOUFdsC8tTIh0HL6x5Tqz2QGkZvNaBPwTiqojh5CKOV1DCGixYc7AgB/SzP4
CBK3H3kKOce1WQhgs0Amvvzbluos592D3spxydwzvwNeEbZC0pBPb+wWNgSGuEOC
AoOJcYnGz1+KKks9NC65OP7PI54lrCf6ROfrG/xOjpAUABqh3m8t+rTOPt8DM7M3
iz7NG+exHm5HS2aEwj0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:40 2024 by rpki-client on console-ams.rpki-client.org