Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/hUY0DkBxpgUvjA_j79qHUmvm4KE.roa
File: hUY0DkBxpgUvjA_j79qHUmvm4KE.roa (raw, json)
Hash identifier: eFrS2FGss58jGSzqrOpbtOv6MxyR/WkJc3wVU7guUBM=
Subject key identifier: 85:46:34:0E:40:71:A6:05:2F:8C:0F:E3:EF:DA:87:52:6B:E6:E0:A1
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 01856DEF7ABDAA4702760C58AD21215B4E14
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/hUY0DkBxpgUvjA_j79qHUmvm4KE.roa
Signing time: Sun 01 Jan 2023 15:24:48 +0000
ROA not before: Sun 01 Jan 2023 15:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7a:bd:aa:47:02:76:0c:58:ad:21:21:5b:4e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 1 15:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8546340e4071a6052f8c0fe3efda87526be6e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:a7:32:f7:7f:60:5d:ce:10:ac:19:e8:ee:
21:2c:fc:73:28:b5:90:65:f5:f8:e0:72:2b:17:93:
2f:27:fa:0a:38:8c:f3:6d:cf:b1:66:e1:36:2e:c5:
62:55:e6:a3:d3:4a:cf:b8:bf:b3:eb:da:6e:fd:0f:
a2:6e:d7:1d:93:24:99:24:31:c0:f5:91:7d:d1:cf:
13:7a:fe:20:3e:de:0f:de:5f:0a:fc:f4:a4:05:b5:
01:cc:51:d3:33:e4:3c:ab:e7:4e:a5:29:2e:2e:96:
3f:4a:01:fa:38:de:dd:27:39:e9:7a:7c:c3:9f:12:
9d:09:38:1d:0c:c4:8b:b8:e8:b0:eb:36:a6:e3:65:
87:65:e9:0c:6e:db:06:3b:d0:ad:f1:db:0f:c3:27:
c3:90:7c:af:6f:60:de:17:7e:9b:fd:23:ce:b2:a9:
be:ec:94:1a:e7:72:74:0e:73:33:c5:a5:1c:9d:86:
5f:dc:21:60:45:c0:d2:3a:4f:cb:f6:e9:b9:48:ee:
d0:57:1d:e6:6b:77:1c:cd:2a:21:10:df:63:dc:b3:
19:82:c5:76:6a:d8:3b:66:51:c6:dd:0b:ec:be:ee:
24:83:2b:da:fe:af:df:68:53:41:34:1b:86:73:2a:
c6:5e:dc:38:bd:d9:94:e2:a6:44:3e:f6:0f:40:0c:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:34:0E:40:71:A6:05:2F:8C:0F:E3:EF:DA:87:52:6B:E6:E0:A1
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/hUY0DkBxpgUvjA_j79qHUmvm4KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:00:d1:60:65:09:03:92:88:40:c4:ea:79:28:55:7c:fd:2e:
17:4d:db:4e:4c:c6:03:57:d1:cc:b9:73:e5:55:1f:bc:24:1c:
a4:66:8b:e0:64:04:2f:7d:78:c2:9b:4c:f6:06:4a:90:cf:80:
b9:6e:2c:95:14:c5:b0:e1:85:5f:c6:45:e0:5d:2c:0b:84:0d:
41:10:6b:63:db:82:c3:39:2b:18:f6:bc:4d:d5:18:2b:70:d4:
38:55:ef:d0:d0:43:7f:2d:43:b4:52:ec:cf:7c:05:b1:45:aa:
b7:b1:02:7c:76:e9:be:e2:05:1b:8e:29:8f:48:28:5e:8a:6e:
44:eb:ab:97:5a:8c:89:00:6c:c6:11:12:bf:24:0b:e6:a7:f9:
76:23:e0:4a:54:c3:19:c5:fa:22:38:fe:ef:b3:8f:29:e9:fc:
2e:c1:6f:02:3e:b2:d3:8b:9c:55:8e:d8:1e:ab:ab:0b:59:fe:
16:bf:e4:fd:a8:fb:15:55:c9:3f:38:ce:2e:49:62:e0:e7:18:
5e:f4:02:98:df:c5:20:b0:de:a2:99:a0:ec:16:ec:f1:0f:94:
80:68:77:b8:11:d4:25:89:24:57:dc:10:93:ba:e0:c6:f1:5e:
6a:b3:b5:c8:72:3d:f7:71:6b:10:b1:c1:89:ff:e2:93:97:fc:
f3:97:38:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVt73q9qkcCdgxYrSEhW04UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk
ODhhMGQwHhcNMjMwMTAxMTUyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTQ2MzQwZTQwNzFhNjA1MmY4YzBmZTNlZmRhODc1MjZiZTZlMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs22nMvd/YF3OEKwZ6O4hLPxzKLWQ
ZfX44HIrF5MvJ/oKOIzzbc+xZuE2LsViVeaj00rPuL+z69pu/Q+ibtcdkySZJDHA
9ZF90c8Tev4gPt4P3l8K/PSkBbUBzFHTM+Q8q+dOpSkuLpY/SgH6ON7dJznpenzD
nxKdCTgdDMSLuOiw6zam42WHZekMbtsGO9Ct8dsPwyfDkHyvb2DeF36b/SPOsqm+
7JQa53J0DnMzxaUcnYZf3CFgRcDSOk/L9um5SO7QVx3ma3cczSohEN9j3LMZgsV2
atg7ZlHG3Qvsvu4kgyva/q/faFNBNBuGcyrGXtw4vdmU4qZEPvYPQAz9jwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIVGNA5AcaYFL4wP4+/ah1Jr5uChMB8GA1UdIwQY
MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt
MjIyY2ViNmMzNDRjLzEvaFVZMERrQnhwZ1V2akFfajc5cUhVbXZtNEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj
LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9hsAwQA
w0JMMA0GCSqGSIb3DQEBCwUAA4IBAQArANFgZQkDkohAxOp5KFV8/S4XTdtOTMYD
V9HMuXPlVR+8JBykZovgZAQvfXjCm0z2BkqQz4C5biyVFMWw4YVfxkXgXSwLhA1B
EGtj24LDOSsY9rxN1RgrcNQ4Ve/Q0EN/LUO0UuzPfAWxRaq3sQJ8dum+4gUbjimP
SCheim5E66uXWoyJAGzGERK/JAvmp/l2I+BKVMMZxfoiOP7vs48p6fwuwW8CPrLT
i5xVjtgeq6sLWf4Wv+T9qPsVVck/OM4uSWLg5xhe9AKY38UgsN6imaDsFuzxD5SA
aHe4EdQliSRX3BCTuuDG8V5qs7XIcj33cWsQscGJ/+KTl/zzlzi+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:47 2023 by rpki-client on console-ams.rpki-client.org