Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/eBvZBhoEZFJCz5Hp3uSNTPlIFEA.roa
File: eBvZBhoEZFJCz5Hp3uSNTPlIFEA.roa (raw, json)
Hash identifier: fZBiXSJAOmQEqh4f6+CfmNEHCBcwmZ0KDjBHAnkRaJ4=
Subject key identifier: 78:1B:D9:06:1A:04:64:52:42:CF:91:E9:DE:E4:8D:4C:F9:48:14:40
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019088BF0583DA37146723B39977818A3A99
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/eBvZBhoEZFJCz5Hp3uSNTPlIFEA.roa
Signing time: Sat 06 Jul 2024 15:52:18 +0000
ROA not before: Sat 06 Jul 2024 15:52:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199524
IP address blocks: 91.188.250.0/24 maxlen: 24
91.188.251.0/24 maxlen: 24
91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:bf:05:83:da:37:14:67:23:b3:99:77:81:8a:3a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jul 6 15:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=781bd9061a04645242cf91e9dee48d4cf9481440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:bd:42:2e:99:e7:0d:0d:6a:ac:bb:00:a1:
48:75:69:00:6b:b3:83:78:2e:32:fd:df:e7:8c:19:
c3:80:9d:21:25:3f:f6:4b:7c:a0:71:c4:c9:bb:8c:
9b:80:07:97:3b:dd:a5:61:f5:fb:4f:35:b1:5a:6f:
5e:a4:1e:d5:ed:ea:fe:5f:54:9b:29:b6:ca:b8:eb:
0c:9a:5d:71:5e:0a:94:86:ed:3c:91:b8:21:9e:db:
31:b0:fc:26:48:bd:fc:31:a3:d8:e2:ab:6f:c8:e2:
dc:c3:07:37:5b:a0:76:de:63:80:d0:b1:3d:64:37:
c0:5a:1e:3e:d3:ef:f4:15:6b:4d:36:f0:73:61:51:
cb:c7:cb:e4:25:12:b2:be:c1:ed:20:9f:cd:ad:de:
90:e3:0f:52:15:d9:ed:77:db:ff:c5:39:90:5d:31:
89:85:b6:dc:75:cc:2c:9e:e2:c6:28:9c:ca:b6:10:
4d:53:ab:d2:e4:78:a2:6e:19:a3:fe:ad:c8:49:96:
e3:ae:83:c9:35:01:f8:63:55:6c:a1:6e:bb:91:b9:
39:39:a6:a2:42:d9:21:cb:61:03:51:59:af:d2:f5:
db:c4:ab:07:ee:7c:e2:f5:c9:e8:68:7a:8f:bd:ee:
be:21:1d:9b:6b:0a:c7:8d:5f:98:22:0d:76:c4:17:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1B:D9:06:1A:04:64:52:42:CF:91:E9:DE:E4:8D:4C:F9:48:14:40
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/eBvZBhoEZFJCz5Hp3uSNTPlIFEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.250.0/23
91.202.245.0-91.202.247.255
Signature Algorithm: sha256WithRSAEncryption
c8:54:ba:a1:ef:a1:60:2a:82:16:bc:c2:19:54:b3:99:32:bc:
bd:f2:94:ca:bc:b6:a7:68:e1:05:ff:03:43:62:22:27:82:c4:
d3:01:07:56:46:3a:08:5e:7f:3e:8e:3c:3d:b3:b9:e4:c6:01:
99:97:90:10:01:69:b2:f9:bd:e1:30:ed:5f:31:d0:af:1d:fa:
f2:7b:79:1d:ff:b2:68:2c:83:df:de:7d:12:8a:3a:ed:e6:d8:
43:2d:50:1b:11:2f:10:3d:af:dd:56:a5:19:b2:13:d8:05:84:
0d:84:01:c7:21:a7:f0:29:2b:ec:86:33:fc:47:da:bc:ee:6f:
9b:53:81:4e:29:b2:f9:46:b7:04:57:c0:c8:53:c2:37:9d:98:
b3:56:99:00:94:cb:bc:a9:12:e0:6d:96:02:99:70:b0:9e:ec:
87:66:e8:e0:f2:3f:ee:81:32:5b:cc:19:77:a9:2e:a4:d0:05:
fa:e3:4a:41:ae:43:3f:fd:65:2b:af:7d:93:92:40:f5:5b:0f:
09:fb:7a:4b:a6:06:96:11:4c:d1:d7:dc:2a:8e:20:55:61:65:
c9:ca:b2:71:13:fc:b5:f2:93:53:1a:c1:4a:15:c3:6a:1e:a6:
75:7d:67:f0:58:a9:9e:cd:9c:15:51:b8:4f:e6:c4:19:1a:fa:
16:1b:83:f5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZCIvwWD2jcUZyOzmXeBijqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjQwNzA2MTU1MjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODFiZDkwNjFhMDQ2NDUyNDJjZjkxZTlkZWU0OGQ0Y2Y5NDgxNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso29Qi6Z5w0Naqy7AKFIdWkAa7OD
eC4y/d/njBnDgJ0hJT/2S3ygccTJu4ybgAeXO92lYfX7TzWxWm9epB7V7er+X1Sb
KbbKuOsMml1xXgqUhu08kbghntsxsPwmSL38MaPY4qtvyOLcwwc3W6B23mOA0LE9
ZDfAWh4+0+/0FWtNNvBzYVHLx8vkJRKyvsHtIJ/Nrd6Q4w9SFdntd9v/xTmQXTGJ
hbbcdcwsnuLGKJzKthBNU6vS5Hiibhmj/q3ISZbjroPJNQH4Y1VsoW67kbk5Oaai
Qtkhy2EDUVmv0vXbxKsH7nzi9cnoaHqPve6+IR2bawrHjV+YIg12xBevFwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHgb2QYaBGRSQs+R6d7kjUz5SBRAMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvZUJ2WkJob0VaRkpDejVIcDN1U05UUGxJRkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBW7z6MAwD
BABbyvUDBANbyvAwDQYJKoZIhvcNAQELBQADggEBAMhUuqHvoWAqgha8whlUs5ky
vL3ylMq8tqdo4QX/A0NiIieCxNMBB1ZGOghefz6OPD2zueTGAZmXkBABabL5veEw
7V8x0K8d+vJ7eR3/smgsg9/efRKKOu3m2EMtUBsRLxA9r91WpRmyE9gFhA2EAcch
p/ApK+yGM/xH2rzub5tTgU4psvlGtwRXwMhTwjedmLNWmQCUy7ypEuBtlgKZcLCe
7Idm6ODyP+6BMlvMGXepLqTQBfrjSkGuQz/9ZSuvfZOSQPVbDwn7ekumBpYRTNHX
3CqOIFVhZcnKsnET/LXyk1MawUoVw2oepnV9Z/BYqZ7NnBVRuE/mxBka+hYbg/U=
-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org