Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/DBuQ8EfvTbV14IOfN5ACuk19tIQ.roa
File: DBuQ8EfvTbV14IOfN5ACuk19tIQ.roa (raw, json)
Hash identifier: k+L5vrDgiZILw4Q2Bctk5JNG/CnGQMNpTxirOA7kVj4=
Subject key identifier: 0C:1B:90:F0:47:EF:4D:B5:75:E0:83:9F:37:90:02:BA:4D:7D:B4:84
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 01856C25E04AECFDB69AEB1A9E30CF211559
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/DBuQ8EfvTbV14IOfN5ACuk19tIQ.roa
Signing time: Sun 01 Jan 2023 07:04:59 +0000
ROA not before: Sun 01 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29075
IP address blocks: 91.226.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e0:4a:ec:fd:b6:9a:eb:1a:9e:30:cf:21:15:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jan 1 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c1b90f047ef4db575e0839f379002ba4d7db484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:e0:d4:4e:8a:e7:a1:03:aa:38:63:75:93:
cf:0d:e7:91:c4:4c:99:7d:d2:ea:6d:ec:2f:9a:69:
ea:eb:eb:18:b1:ec:1e:24:58:ef:e1:07:ca:7f:a5:
98:6f:60:9f:d9:13:ab:98:bb:18:49:69:65:23:9a:
97:af:2f:7c:59:84:33:b4:0c:61:0b:1f:19:98:2c:
3d:b4:a7:27:d0:9c:2e:11:33:69:bd:85:c8:63:1d:
51:e8:a7:a1:0d:b2:bb:e3:17:42:20:77:47:1a:c8:
cf:a5:7d:59:d9:85:dc:32:49:1b:0c:c8:8c:1b:c5:
40:0b:fd:d8:60:6f:de:5a:39:0a:44:2c:94:79:e6:
5b:eb:af:b3:5e:de:00:0c:67:a0:c9:47:04:4d:71:
a1:f0:26:01:1d:3f:f2:f9:00:10:85:10:09:b7:71:
9c:58:7f:fa:43:f1:65:d1:fc:43:2d:e1:3b:0e:53:
62:03:e3:11:15:f3:71:5f:39:67:61:f9:95:e3:29:
17:5a:08:97:22:f7:d4:49:ae:65:19:48:f9:2c:7b:
c4:33:5c:fd:e8:3b:20:5c:f1:44:5b:62:f9:60:10:
ff:95:b6:8e:fb:c5:d2:c2:d1:7a:b1:2d:57:14:f8:
63:03:7e:33:72:9f:18:fd:8d:57:1c:b5:bc:d9:f6:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1B:90:F0:47:EF:4D:B5:75:E0:83:9F:37:90:02:BA:4D:7D:B4:84
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/DBuQ8EfvTbV14IOfN5ACuk19tIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:df:14:bc:b1:82:1a:17:57:c0:5f:e3:2c:d7:c8:0a:f3:52:
6e:73:1f:aa:03:8c:9c:cd:55:ea:4a:67:f7:ba:94:6f:5e:65:
24:e1:30:14:8f:1f:42:14:1d:3b:fa:ae:0b:e5:d7:1a:26:19:
43:93:07:96:49:72:ab:bf:fc:ef:79:ad:53:5c:2a:50:64:03:
8a:00:7b:2c:80:d2:69:6a:7b:e2:4a:08:f0:2e:2a:c7:14:76:
a8:48:02:cd:d1:32:49:c8:4d:6e:df:ef:e5:e6:25:29:69:59:
e7:c9:55:8a:3f:da:c8:01:fc:bc:96:53:04:b5:03:c5:e1:41:
a7:fa:fa:56:53:e8:5f:33:e0:a4:7b:9c:63:29:3f:e4:78:32:
3b:d9:3b:cf:1c:42:ba:46:51:3c:1c:4a:24:d6:c9:d2:df:97:
e7:71:9c:ea:bb:02:d5:aa:75:a8:43:df:fb:79:8b:f3:7f:e7:
dd:3c:36:91:c0:2e:26:8b:35:0a:f0:5d:aa:c0:6f:33:be:d7:
52:97:e6:66:f0:64:9a:fa:1f:3f:46:0f:8f:bb:79:79:67:34:
7a:4a:d2:7d:12:75:92:2c:d0:70:5b:80:10:11:f7:22:2e:89:
b1:f1:90:f0:c6:89:02:2d:54:30:ac:ca:8d:ca:2f:2b:ad:93:
66:f3:c1:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsJeBK7P22musanjDPIRVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh
ZDAxYzUwHhcNMjMwMTAxMDcwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzFiOTBmMDQ3ZWY0ZGI1NzVlMDgzOWYzNzkwMDJiYTRkN2RiNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcfg1E6K56EDqjhjdZPPDeeRxEyZ
fdLqbewvmmnq6+sYseweJFjv4QfKf6WYb2Cf2ROrmLsYSWllI5qXry98WYQztAxh
Cx8ZmCw9tKcn0JwuETNpvYXIYx1R6KehDbK74xdCIHdHGsjPpX1Z2YXcMkkbDMiM
G8VAC/3YYG/eWjkKRCyUeeZb66+zXt4ADGegyUcETXGh8CYBHT/y+QAQhRAJt3Gc
WH/6Q/Fl0fxDLeE7DlNiA+MRFfNxXzlnYfmV4ykXWgiXIvfUSa5lGUj5LHvEM1z9
6DsgXPFEW2L5YBD/lbaO+8XSwtF6sS1XFPhjA34zcp8Y/Y1XHLW82fbXLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwbkPBH7021deCDnzeQArpNfbSEMB8GA1UdIwQY
MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt
MjRiNjc2YjU2NzgzLzEvREJ1UThFZnZUYlYxNElPZk41QUN1azE5dElRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz
LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+JiMA0G
CSqGSIb3DQEBCwUAA4IBAQAO3xS8sYIaF1fAX+Ms18gK81Jucx+qA4yczVXqSmf3
upRvXmUk4TAUjx9CFB07+q4L5dcaJhlDkweWSXKrv/zvea1TXCpQZAOKAHssgNJp
anviSgjwLirHFHaoSALN0TJJyE1u3+/l5iUpaVnnyVWKP9rIAfy8llMEtQPF4UGn
+vpWU+hfM+Cke5xjKT/keDI72TvPHEK6RlE8HEok1snS35fncZzquwLVqnWoQ9/7
eYvzf+fdPDaRwC4mizUK8F2qwG8zvtdSl+Zm8GSa+h8/Rg+Pu3l5ZzR6StJ9EnWS
LNBwW4AQEfciLomx8ZDwxokCLVQwrMqNyi8rrZNm88FB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:34 2024 by rpki-client on console-fra.rpki-client.org