Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/L6DpOVqnLrj-UOLvqecoQgeFxcM.roa
File: L6DpOVqnLrj-UOLvqecoQgeFxcM.roa (raw, json)
Hash identifier: 3fWRDKVw9DwHXoqThOTMr/7MhQuq+pblftQn1KgZwlw=
Subject key identifier: 2F:A0:E9:39:5A:A7:2E:B8:FE:50:E2:EF:A9:E7:28:42:07:85:C5:C3
Certificate issuer: /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial: 019305C5124D96F4D7E8C649FEA8AD9AB7F0
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/L6DpOVqnLrj-UOLvqecoQgeFxcM.roa
Signing time: Thu 07 Nov 2024 08:37:01 +0000
ROA not before: Thu 07 Nov 2024 08:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21022
IP address blocks: 91.193.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 18:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c5:12:4d:96:f4:d7:e8:c6:49:fe:a8:ad:9a:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
Validity
Not Before: Nov 7 08:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fa0e9395aa72eb8fe50e2efa9e728420785c5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:1f:12:f6:e5:dc:21:a5:f2:18:29:0f:39:
fa:a1:1c:7d:4e:c7:94:75:c9:8b:81:bd:c0:e5:76:
ff:7d:c1:c8:a0:4b:16:4c:b3:98:17:1d:4b:5e:a7:
8a:45:2c:64:c8:48:1f:3c:30:d0:e8:4d:5a:23:c1:
0e:59:e0:eb:ff:6c:51:ed:45:72:a9:23:9f:f7:c7:
51:93:4c:dc:c4:b8:d6:cf:f6:6c:14:44:f2:8e:b8:
82:09:f8:b6:e2:ab:86:6e:89:ad:fb:5f:f0:4a:55:
4e:e8:d5:61:c1:04:49:e6:58:40:18:01:87:76:f0:
86:75:b3:60:e3:7a:2a:67:de:9d:c2:b4:25:fd:a0:
7d:5d:cc:ee:eb:09:67:f7:4f:a3:29:79:b2:ba:bc:
f1:cc:3b:b7:26:85:14:31:b8:2f:06:ad:6c:74:ab:
91:d2:67:f3:87:32:35:73:73:a9:33:47:9e:44:ee:
99:25:6f:f9:2b:24:a9:d3:54:35:02:c1:c5:97:2a:
f8:b1:7d:e1:1c:89:2f:38:54:c1:14:3e:e1:31:44:
be:42:f5:7e:83:e6:b1:a1:84:b7:73:15:2c:01:84:
3e:eb:16:73:88:ac:de:85:bb:54:1b:63:d5:de:62:
7c:07:7e:d6:92:ff:58:02:a3:2c:48:bc:da:c9:37:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:E9:39:5A:A7:2E:B8:FE:50:E2:EF:A9:E7:28:42:07:85:C5:C3
X509v3 Authority Key Identifier:
keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/L6DpOVqnLrj-UOLvqecoQgeFxcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.24.0/24
Signature Algorithm: sha256WithRSAEncryption
29:74:99:9d:dd:34:bc:ea:ae:c8:ba:a8:1a:b9:80:7e:94:c2:
ea:18:74:57:28:4b:be:7d:e5:8b:0e:c9:48:05:ac:b2:7a:7e:
67:8f:f1:80:cb:3e:79:e7:93:c8:bd:47:77:fd:d1:da:59:fe:
5a:9c:8d:48:88:cb:42:26:b7:ac:55:be:4f:7b:63:5f:1d:80:
c0:b0:7c:94:e3:7b:2d:9d:bc:2a:15:66:df:25:34:a8:c9:11:
62:2c:88:a2:43:86:14:f9:db:98:de:4a:2b:12:b1:56:e9:bf:
dc:87:ea:ee:c1:b5:82:8d:c6:ef:94:e6:5e:1e:3b:e0:a6:87:
45:54:1d:72:a6:c7:25:89:00:cc:ad:a2:22:81:96:fa:fa:c1:
56:d4:f7:00:77:f1:d9:d0:d9:18:34:4a:d3:12:70:d4:35:56:
12:87:39:27:2f:61:e2:f2:ed:8b:8a:36:55:84:46:73:e2:ba:
8d:b4:73:62:34:ed:e0:e9:e6:ab:4c:b1:e1:87:c9:2f:17:48:
da:b8:23:71:9e:34:44:b9:69:16:fe:93:0b:9c:d4:c6:e9:81:
89:c8:81:b6:8b:c2:1a:44:75:e9:80:d4:3b:1b:61:dc:ca:3d:
33:6d:3c:7a:6a:60:59:1a:5c:d0:13:89:24:28:a0:d0:e6:f3:
f2:79:c5:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMFxRJNlvTX6MZJ/qitmrfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTE1YmE4MGQzZWQ3MDQ1MjQ2ODE0ODhhNzJiZTk5MWZh
NjcwZGMwHhcNMjQxMTA3MDgzNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmEwZTkzOTVhYTcyZWI4ZmU1MGUyZWZhOWU3Mjg0MjA3ODVjNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqUfEvbl3CGl8hgpDzn6oRx9TseU
dcmLgb3A5Xb/fcHIoEsWTLOYFx1LXqeKRSxkyEgfPDDQ6E1aI8EOWeDr/2xR7UVy
qSOf98dRk0zcxLjWz/ZsFETyjriCCfi24quGbomt+1/wSlVO6NVhwQRJ5lhAGAGH
dvCGdbNg43oqZ96dwrQl/aB9Xczu6wln90+jKXmyurzxzDu3JoUUMbgvBq1sdKuR
0mfzhzI1c3OpM0eeRO6ZJW/5KySp01Q1AsHFlyr4sX3hHIkvOFTBFD7hMUS+QvV+
g+axoYS3cxUsAYQ+6xZziKzehbtUG2PV3mJ8B37Wkv9YAqMsSLzayTfq5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+g6Tlapy64/lDi76nnKEIHhcXDMB8GA1UdIwQY
MBaAFJeRW6gNPtcEUkaBSIpyvpkfpnDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVGYnFBMC0xd1JTUm9GSWluSy1tUi1tY053LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NzBiZjAtOTE2Ni00ZjYwLWE2MDMt
NzA3YjBhMzhiMWUwLzEvTDZEcE9WcW5McmotVU9MdnFlY29RZ2VGeGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NzBiZjAtOTE2Ni00ZjYwLWE2MDMtNzA3YjBhMzhiMWUw
LzEvbDVGYnFBMC0xd1JTUm9GSWluSy1tUi1tY053LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8EYMA0G
CSqGSIb3DQEBCwUAA4IBAQApdJmd3TS86q7IuqgauYB+lMLqGHRXKEu+feWLDslI
Bayyen5nj/GAyz5555PIvUd3/dHaWf5anI1IiMtCJresVb5Pe2NfHYDAsHyU43st
nbwqFWbfJTSoyRFiLIiiQ4YU+duY3korErFW6b/ch+ruwbWCjcbvlOZeHjvgpodF
VB1ypscliQDMraIigZb6+sFW1PcAd/HZ0NkYNErTEnDUNVYShzknL2Hi8u2LijZV
hEZz4rqNtHNiNO3g6earTLHhh8kvF0jauCNxnjREuWkW/pMLnNTG6YGJyIG2i8Ia
RHXpgNQ7G2Hcyj0zbTx6amBZGlzQE4kkKKDQ5vPyecUY
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:51 2025 by rpki-client