Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/DpqPrQAt9ypF509zgjrIfvK3oDw.roa
File: DpqPrQAt9ypF509zgjrIfvK3oDw.roa (raw, json)
Hash identifier: 19FCS5ww2POcwgt6OcZe3AlfLfWXFl62pN2KJlzPcqs=
Subject key identifier: 0E:9A:8F:AD:00:2D:F7:2A:45:E7:4F:73:82:3A:C8:7E:F2:B7:A0:3C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE6680671BBB22F70D41DBB743FFD71
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/DpqPrQAt9ypF509zgjrIfvK3oDw.roa
Signing time: Sun 01 Jan 2023 10:35:17 +0000
ROA not before: Sun 01 Jan 2023 10:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199512
IP address blocks: 213.91.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:68:06:71:bb:b2:2f:70:d4:1d:bb:74:3f:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9a8fad002df72a45e74f73823ac87ef2b7a03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:19:ec:96:0b:0d:2c:ca:94:21:65:dd:4a:
d2:55:d7:7d:87:3d:f1:c5:ec:54:e9:47:13:a6:97:
d7:65:cf:74:b2:40:ff:a2:e0:18:a4:a8:d8:7d:b3:
14:f6:fe:e7:fb:6c:7e:7d:47:ea:de:fa:22:59:56:
c9:51:63:07:55:95:e9:c8:8d:52:fb:5c:a0:06:2a:
fc:fd:84:45:8b:93:8a:9c:e5:27:18:74:84:d4:27:
cb:f5:eb:ab:27:a8:7e:0d:47:f4:96:79:ad:0c:8d:
eb:3c:a6:24:09:b7:b7:70:04:a0:58:c1:76:a0:d0:
08:e5:3b:0b:a8:cd:1f:61:fe:c4:f7:a3:e2:24:e3:
ca:55:e2:f4:3a:7c:38:0f:8c:d8:81:73:03:a3:22:
00:d6:df:68:a8:08:33:a7:40:30:71:eb:4a:49:5d:
0d:fb:e8:da:fa:b5:03:0b:71:bd:78:b1:9e:69:a4:
6d:59:eb:c7:6a:5a:8e:28:cf:7d:f7:79:9f:77:54:
a7:bd:aa:dc:68:36:eb:8d:9e:f7:58:7e:83:d2:b8:
79:45:d7:70:e9:72:58:49:78:8c:0f:72:a8:0b:ac:
20:63:e4:46:b4:63:3b:47:0b:60:50:5c:41:11:1c:
ea:55:1a:8f:b0:6d:8e:72:1d:a4:a2:7a:78:de:d7:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:8F:AD:00:2D:F7:2A:45:E7:4F:73:82:3A:C8:7E:F2:B7:A0:3C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/DpqPrQAt9ypF509zgjrIfvK3oDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:10:c2:a8:a6:4b:71:20:3e:01:4e:82:5d:60:c8:77:49:3f:
5a:60:ac:ad:25:0c:e3:19:21:fd:a9:2b:f3:74:c0:e4:df:67:
eb:56:c2:49:9a:22:8a:cb:b4:c6:bb:8f:16:f9:1b:5c:71:43:
d0:c8:75:ad:ff:dd:4d:3e:bb:2d:13:15:4f:69:dc:6d:69:54:
2d:b2:e5:68:2c:b1:bb:26:4d:88:72:28:28:6d:a7:d3:67:7a:
17:a9:8d:c3:e2:fd:3d:8e:f1:ca:78:2f:8f:70:7b:8c:b1:ad:
22:3c:3c:77:23:69:96:1f:5d:29:e5:02:30:56:82:d3:43:1f:
3a:32:a3:69:01:16:64:76:a5:a4:71:be:4e:01:e8:46:e8:58:
54:86:64:a2:63:03:69:40:74:51:34:8e:97:6f:0c:25:2c:86:
ec:27:32:8b:1a:65:00:ca:ad:b3:b4:da:de:f9:a7:37:55:d9:
fd:30:e9:81:bf:db:a8:f9:ee:1b:f4:ee:df:02:26:7c:1e:16:
0a:89:fe:d0:e4:8f:77:20:16:a0:56:27:91:36:3b:af:f2:52:
b3:08:16:d6:d5:12:c6:86:ae:a1:af:e4:09:f2:fd:85:4c:b1:
bc:40:06:a3:5a:c6:f8:4b:82:f3:67:5f:3e:0a:b8:96:a5:65:
86:4d:e4:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5mgGcbuyL3DUHbt0P/1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMwMTAxMTAzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTlhOGZhZDAwMmRmNzJhNDVlNzRmNzM4MjNhYzg3ZWYyYjdhMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs8Z7JYLDSzKlCFl3UrSVdd9hz3x
xexU6UcTppfXZc90skD/ouAYpKjYfbMU9v7n+2x+fUfq3voiWVbJUWMHVZXpyI1S
+1ygBir8/YRFi5OKnOUnGHSE1CfL9eurJ6h+DUf0lnmtDI3rPKYkCbe3cASgWMF2
oNAI5TsLqM0fYf7E96PiJOPKVeL0Onw4D4zYgXMDoyIA1t9oqAgzp0AwcetKSV0N
++ja+rUDC3G9eLGeaaRtWevHalqOKM9993mfd1SnvarcaDbrjZ73WH6D0rh5Rddw
6XJYSXiMD3KoC6wgY+RGtGM7RwtgUFxBERzqVRqPsG2Och2konp43tf1NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6aj60ALfcqRedPc4I6yH7yt6A8MB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvRHBxUHJRQXQ5eXBGNTA5emdqcklmdkszb0R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VudMA0G
CSqGSIb3DQEBCwUAA4IBAQBdEMKopktxID4BToJdYMh3ST9aYKytJQzjGSH9qSvz
dMDk32frVsJJmiKKy7TGu48W+RtccUPQyHWt/91NPrstExVPadxtaVQtsuVoLLG7
Jk2IcigobafTZ3oXqY3D4v09jvHKeC+PcHuMsa0iPDx3I2mWH10p5QIwVoLTQx86
MqNpARZkdqWkcb5OAehG6FhUhmSiYwNpQHRRNI6XbwwlLIbsJzKLGmUAyq2ztNre
+ac3Vdn9MOmBv9uo+e4b9O7fAiZ8HhYKif7Q5I93IBagVieRNjuv8lKzCBbW1RLG
hq6hr+QJ8v2FTLG8QAajWsb4S4LzZ18+CriWpWWGTeSd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org