Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/Yk8pDkOe-zuijMR18oBzEFif-ZE.roa
File: Yk8pDkOe-zuijMR18oBzEFif-ZE.roa (raw, json)
Hash identifier: +xwUFzuFBrQJvmYTDzbDirkpHjPvKa5Ys5BSySiCp0Y=
Subject key identifier: 62:4F:29:0E:43:9E:FB:3B:A2:8C:C4:75:F2:80:73:10:58:9F:F9:91
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01895EC3E3A432BC3D6BFA521C17F9BEA9E1
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/Yk8pDkOe-zuijMR18oBzEFif-ZE.roa
Signing time: Sun 16 Jul 2023 12:54:03 +0000
ROA not before: Sun 16 Jul 2023 12:54:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47344
IP address blocks: 91.202.249.0/24 maxlen: 24
91.202.248.0/24 maxlen: 24
91.202.248.0/22 maxlen: 22
91.202.251.0/24 maxlen: 24
91.202.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:c3:e3:a4:32:bc:3d:6b:fa:52:1c:17:f9:be:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jul 16 12:54:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=624f290e439efb3ba28cc475f2807310589ff991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:00:d2:d7:01:fb:70:72:c4:dd:78:84:67:
6b:18:66:25:4b:7c:78:55:e0:45:23:47:51:47:3a:
68:8a:b5:2f:57:8b:f4:02:e6:92:b6:42:f3:e5:37:
a3:b2:7b:91:74:c7:e8:6b:05:da:c1:f8:ef:82:4b:
10:9d:8e:cf:65:4c:53:86:4a:00:49:d5:34:97:d1:
f8:f4:a8:89:25:ae:72:9d:94:a1:d1:28:b7:33:55:
38:17:19:38:59:50:dd:4a:89:00:fa:d3:70:5f:ce:
8f:2a:b5:4c:35:cc:f4:6b:1e:c2:b4:ef:36:ae:ae:
1f:de:6e:9f:b4:67:4c:5a:b9:5d:0d:19:2c:c4:d0:
ca:8e:37:f0:7a:a5:10:6c:0a:00:26:00:77:eb:48:
c1:b8:f3:f6:55:b8:81:c9:15:94:b7:dd:a5:a2:f3:
f7:b6:96:4c:3c:fc:f5:4c:be:3f:42:81:18:aa:cf:
1a:bb:58:7f:82:65:a2:03:b4:c7:08:29:81:5a:b1:
c1:f6:bb:9c:97:b0:7d:69:1a:de:d8:31:f6:c8:8d:
c1:f3:fc:64:e6:11:b3:bf:5d:bb:86:c5:1a:f7:a5:
fb:f4:f4:56:e5:c5:c6:df:2b:c9:ad:a2:06:c2:0c:
ab:3f:37:41:69:18:49:48:09:14:fd:cd:e9:86:f0:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4F:29:0E:43:9E:FB:3B:A2:8C:C4:75:F2:80:73:10:58:9F:F9:91
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/Yk8pDkOe-zuijMR18oBzEFif-ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.248.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e4:77:6b:c1:33:2e:35:ce:e8:86:43:83:b6:04:da:42:45:
8b:f3:69:32:dc:04:34:59:f9:76:fb:6d:d6:25:d9:79:c2:f0:
09:b9:f7:7c:81:c2:d5:36:c3:a5:4b:65:83:d7:a9:c4:eb:09:
dd:b1:f8:af:69:a8:e7:44:8a:42:00:d2:57:f8:40:9f:c8:7f:
a9:63:d0:28:5e:04:42:29:3e:64:0c:1c:ef:e5:7b:26:12:92:
b3:c6:b2:ec:7b:5b:88:27:3e:d5:47:0c:96:9a:10:34:0d:7b:
e1:c2:04:17:d4:35:18:36:e2:e0:3f:9f:c3:51:86:30:94:7a:
34:41:7d:c6:4a:ff:cd:3d:e1:7e:b2:61:6b:7a:ec:21:9d:7d:
92:76:b4:74:ec:47:6a:c3:d7:f8:61:fc:d7:d6:87:e0:6c:88:
12:b9:c3:c1:7a:df:c6:44:a5:ac:4e:9b:d8:04:59:84:39:51:
65:1b:3d:c6:e5:f1:60:86:fb:fb:c4:27:16:5d:81:b4:d9:ef:
51:a1:0e:be:0b:10:bc:ba:31:3e:9c:e2:46:f2:ae:34:ca:69:
b2:e4:d9:d8:a8:d0:c3:a2:d1:6b:ec:88:f3:d5:0a:c6:c3:87:
1d:1f:35:b8:3a:99:7c:08:26:c0:7f:58:d6:5a:1b:fa:6b:87:
f7:00:64:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlew+OkMrw9a/pSHBf5vqnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjMwNzE2MTI1NDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjRmMjkwZTQzOWVmYjNiYTI4Y2M0NzVmMjgwNzMxMDU4OWZmOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvccA0tcB+3ByxN14hGdrGGYlS3x4
VeBFI0dRRzpoirUvV4v0AuaStkLz5TejsnuRdMfoawXawfjvgksQnY7PZUxThkoA
SdU0l9H49KiJJa5ynZSh0Si3M1U4Fxk4WVDdSokA+tNwX86PKrVMNcz0ax7CtO82
rq4f3m6ftGdMWrldDRksxNDKjjfweqUQbAoAJgB360jBuPP2VbiByRWUt92lovP3
tpZMPPz1TL4/QoEYqs8au1h/gmWiA7THCCmBWrHB9rucl7B9aRre2DH2yI3B8/xk
5hGzv127hsUa96X79PRW5cXG3yvJraIGwgyrPzdBaRhJSAkU/c3phvBzjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJPKQ5Dnvs7oozEdfKAcxBYn/mRMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvWWs4cERrT2UtenVpak1SMThvQnpFRmlmLVpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8r4MA0G
CSqGSIb3DQEBCwUAA4IBAQAT5HdrwTMuNc7ohkODtgTaQkWL82ky3AQ0Wfl2+23W
Jdl5wvAJufd8gcLVNsOlS2WD16nE6wndsfivaajnRIpCANJX+ECfyH+pY9AoXgRC
KT5kDBzv5XsmEpKzxrLse1uIJz7VRwyWmhA0DXvhwgQX1DUYNuLgP5/DUYYwlHo0
QX3GSv/NPeF+smFreuwhnX2SdrR07Edqw9f4YfzX1ofgbIgSucPBet/GRKWsTpvY
BFmEOVFlGz3G5fFghvv7xCcWXYG02e9RoQ6+CxC8ujE+nOJG8q40ymmy5NnYqNDD
otFr7Ijz1QrGw4cdHzW4Opl8CCbAf1jWWhv6a4f3AGSU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org