Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/i5ZlPin4Iza_TRizQO6Ie2Gcwqo.roa
File: i5ZlPin4Iza_TRizQO6Ie2Gcwqo.roa (raw, json)
Hash identifier: t3pDlr7uv9xz2yjAXBygms/reEeCpFOOSB83FxJPJXI=
Subject key identifier: 8B:96:65:3E:29:F8:23:36:BF:4D:18:B3:40:EE:88:7B:61:9C:C2:AA
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 01856F5499C0D9A09CE0A7EC6551A3191C66
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/i5ZlPin4Iza_TRizQO6Ie2Gcwqo.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1273
IP address blocks: 91.199.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:99:c0:d9:a0:9c:e0:a7:ec:65:51:a3:19:1c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b96653e29f82336bf4d18b340ee887b619cc2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:c2:b4:8f:9c:67:29:b7:98:e7:5a:c9:9d:
f7:4b:10:80:5e:d9:a9:bf:52:28:0a:e4:df:e1:12:
b3:3d:da:b7:df:22:5d:d2:37:e5:02:34:e2:03:83:
67:8d:76:cc:d7:e8:d6:b2:fa:5f:e9:d3:43:5f:0a:
5d:2f:da:3e:c9:d7:80:d6:9b:02:7f:51:b6:8b:66:
3a:db:b6:00:d9:a6:b3:cc:dd:fb:f9:b7:1a:a6:97:
db:5b:b8:9c:ba:bc:7c:63:94:8d:f2:b5:5e:48:ee:
76:a3:74:0e:6d:b0:f0:40:70:cc:f8:be:68:bc:48:
1f:11:e0:be:c4:87:f0:fd:bf:8a:07:0d:e7:35:89:
81:22:69:be:52:4e:41:24:f5:b0:7f:90:6c:2e:cb:
71:e7:48:22:59:bd:75:9d:2b:86:26:1f:85:75:9e:
69:0f:16:d3:e3:ac:f4:92:fb:6a:97:1c:32:74:85:
d7:88:35:d5:3b:34:a5:39:3f:1d:90:7a:44:2d:f7:
84:84:d0:c7:44:d8:c9:b9:af:68:d5:72:14:89:5d:
14:d1:90:6a:bf:da:72:90:2a:32:eb:dc:9d:e8:57:
88:4c:08:dd:01:65:aa:fa:56:c4:b9:01:cf:e3:bd:
48:d5:e2:d0:ed:60:f8:51:e8:11:93:4c:f5:cc:62:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:65:3E:29:F8:23:36:BF:4D:18:B3:40:EE:88:7B:61:9C:C2:AA
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/i5ZlPin4Iza_TRizQO6Ie2Gcwqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.74.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:2e:cc:b6:cf:e8:ed:c4:65:4c:cf:6c:a4:26:4c:38:e2:
c2:26:89:9e:f2:4e:87:c9:f2:4c:2b:a8:eb:95:b4:49:6b:8a:
40:03:4a:2c:d5:8a:67:68:9d:21:d3:45:d0:43:b2:04:b6:91:
2a:0e:ff:ef:3e:01:eb:78:4f:43:55:69:c1:f7:e6:d1:38:7f:
fc:45:44:89:f1:00:fd:0b:38:5e:d0:e0:61:3c:82:5f:10:67:
ef:ff:28:55:df:20:65:2e:04:13:a0:cb:a0:3b:5b:b7:58:d4:
80:cb:eb:b1:1e:fe:79:00:f9:b1:73:3a:98:66:b5:cb:52:4d:
6f:9b:eb:9b:4d:da:f9:a5:9e:b4:34:af:c7:13:91:76:99:76:
ac:45:14:b1:ab:da:76:90:4e:de:fe:d4:ad:28:69:b4:d4:b6:
08:96:a1:fb:72:84:95:53:05:8f:a9:ba:a6:f7:8c:96:48:59:
7b:6d:25:3e:01:93:72:7c:96:fa:ee:7c:32:a9:27:c6:d1:6e:
2c:83:1b:b2:99:86:09:45:c3:cc:da:c0:2f:cb:87:de:34:a9:
f1:2a:f2:57:42:e6:3d:84:9d:06:73:5f:40:35:40:25:5b:05:
b9:0e:14:5e:55:cd:e8:9b:49:6f:cb:02:a9:bf:e9:e1:80:a3:
ef:27:62:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVJnA2aCc4KfsZVGjGRxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OGM4ZjIwYzkzOWFhYTljODBjY2U2YTBkMTU2NzE4M2Nh
MWM1OTkwHhcNMjMwMTAxMjE1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yjk2NjUzZTI5ZjgyMzM2YmY0ZDE4YjM0MGVlODg3YjYxOWNjMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RDCtI+cZym3mOdayZ33SxCAXtmp
v1IoCuTf4RKzPdq33yJd0jflAjTiA4NnjXbM1+jWsvpf6dNDXwpdL9o+ydeA1psC
f1G2i2Y627YA2aazzN37+bcappfbW7icurx8Y5SN8rVeSO52o3QObbDwQHDM+L5o
vEgfEeC+xIfw/b+KBw3nNYmBImm+Uk5BJPWwf5BsLstx50giWb11nSuGJh+FdZ5p
DxbT46z0kvtqlxwydIXXiDXVOzSlOT8dkHpELfeEhNDHRNjJua9o1XIUiV0U0ZBq
v9pykCoy69yd6FeITAjdAWWq+lbEuQHP471I1eLQ7WD4UegRk0z1zGL3ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuWZT4p+CM2v00Ys0DuiHthnMKqMB8GA1UdIwQY
MBaAFBeMjyDJOaqpyAzOag0VZxg8ocWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZWRkOWEtZmI3Mi00M2Q3LWIyNTIt
NGNkMTFlOGI3NDk3LzEvaTVabFBpbjRJemFfVFJpelFPNkllMkdjd3FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83ZWRkOWEtZmI3Mi00M2Q3LWIyNTItNGNkMTFlOGI3NDk3
LzEvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dKMA0G
CSqGSIb3DQEBCwUAA4IBAQCTwC7Mts/o7cRlTM9spCZMOOLCJome8k6HyfJMK6jr
lbRJa4pAA0os1YpnaJ0h00XQQ7IEtpEqDv/vPgHreE9DVWnB9+bROH/8RUSJ8QD9
Czhe0OBhPIJfEGfv/yhV3yBlLgQToMugO1u3WNSAy+uxHv55APmxczqYZrXLUk1v
m+ubTdr5pZ60NK/HE5F2mXasRRSxq9p2kE7e/tStKGm01LYIlqH7coSVUwWPqbqm
94yWSFl7bSU+AZNyfJb67nwyqSfG0W4sgxuymYYJRcPM2sAvy4feNKnxKvJXQuY9
hJ0Gc19ANUAlWwW5DhReVc3om0lvywKpv+nhgKPvJ2Jr
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:33 2024 by rpki-client on console-fra.rpki-client.org