Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/u91P7wlgDo4hCDsmRpglc7D65wE.roa
File: u91P7wlgDo4hCDsmRpglc7D65wE.roa (raw, json)
Hash identifier: WXJc00oiKe+CkE7b2Y5qzPnrK1ulOU9EhA4ImSr0uN8=
Subject key identifier: BB:DD:4F:EF:09:60:0E:8E:21:08:3B:26:46:98:25:73:B0:FA:E7:01
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018678500D20919797925CCF85894883C11F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/u91P7wlgDo4hCDsmRpglc7D65wE.roa
Signing time: Wed 22 Feb 2023 08:49:17 +0000
ROA not before: Wed 22 Feb 2023 08:49:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:50:0d:20:91:97:97:92:5c:cf:85:89:48:83:c1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 22 08:49:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbdd4fef09600e8e21083b2646982573b0fae701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:36:97:92:44:4b:9e:e9:74:16:31:f9:46:
cf:56:62:10:37:59:ae:9c:3d:48:ae:7f:e8:dd:74:
22:a6:12:61:93:c6:5b:27:30:f7:cd:22:37:26:4e:
d3:b4:d0:cf:e3:e3:f7:f8:7b:cc:f8:fb:f2:80:0b:
55:45:5d:cd:f5:06:c4:08:ec:bb:e7:48:64:09:73:
75:31:ba:e0:9d:19:a8:56:a7:34:f5:4a:21:6c:e9:
b8:c3:74:b0:67:44:10:d0:a9:2e:09:89:16:1d:95:
f4:12:7a:03:da:70:fb:da:f3:d4:84:e2:65:09:72:
fd:d9:c4:ea:b9:f1:db:70:8c:c8:37:f0:7e:29:88:
21:6a:66:bf:a3:19:d1:ee:f4:35:e1:fc:81:95:f6:
cd:77:db:e0:a5:eb:2c:b9:51:5b:a5:88:1f:0b:92:
33:4a:40:2d:98:0d:34:40:43:ef:a4:89:c0:27:55:
6d:70:82:90:53:b8:b6:51:f4:a6:40:b8:7a:8c:c6:
84:07:94:69:61:24:75:c9:be:6e:5c:a3:0f:c3:95:
42:1d:9c:d7:f0:92:51:d8:e2:f1:70:09:31:26:88:
f5:9d:9b:74:2c:ff:32:0d:be:87:3f:90:18:b8:f8:
dc:6e:54:19:0b:25:ae:3a:08:0f:65:20:9d:cb:8a:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:4F:EF:09:60:0E:8E:21:08:3B:26:46:98:25:73:B0:FA:E7:01
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/u91P7wlgDo4hCDsmRpglc7D65wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.252.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ce:9d:40:76:d8:14:9e:be:fd:b0:2c:f2:f9:f5:47:70:26:
94:a9:64:be:e3:95:f8:18:ee:a2:c9:b1:ee:d6:1a:d6:e9:9a:
57:e8:b8:b1:d6:ed:24:3d:f1:73:d9:d8:98:39:8b:b5:91:48:
ca:53:d9:b6:1f:e6:87:57:3c:29:3f:f4:9a:43:eb:57:9d:17:
fe:e6:b8:f1:24:cb:de:3c:b5:de:76:80:f9:bc:e8:a8:d9:27:
a9:55:ff:68:d3:ce:9a:7a:d9:c8:83:44:63:0a:dc:47:0f:14:
cd:c7:6d:36:3f:4e:a0:25:89:da:24:30:cc:63:68:57:c7:a8:
5c:5d:4e:51:7a:5e:1f:fa:d6:8c:97:fa:3c:01:62:09:77:7d:
c0:9d:55:d0:fe:e6:ad:4b:f9:30:47:bf:d4:bc:30:db:c0:ba:
45:ea:c6:7e:d6:f9:64:18:95:de:3b:ff:80:0c:5b:c6:b2:34:
43:db:d5:44:ec:d8:8c:f6:03:57:07:66:98:c2:a7:f3:1d:be:
8a:ee:f9:d3:5b:0d:58:c5:7a:a9:89:ba:fd:18:17:7d:fd:2e:
cd:34:da:09:89:61:b9:bf:94:bc:e3:8c:5b:d5:15:27:9e:29:
cb:dc:e8:f8:72:65:5b:cd:0b:0c:aa:9b:5e:7d:d9:31:c4:57:
78:9b:c3:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ4UA0gkZeXklzPhYlIg8EfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwMjIyMDg0OTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmRkNGZlZjA5NjAwZThlMjEwODNiMjY0Njk4MjU3M2IwZmFlNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm02l5JES57pdBYx+UbPVmIQN1mu
nD1Irn/o3XQiphJhk8ZbJzD3zSI3Jk7TtNDP4+P3+HvM+PvygAtVRV3N9QbECOy7
50hkCXN1MbrgnRmoVqc09UohbOm4w3SwZ0QQ0KkuCYkWHZX0EnoD2nD72vPUhOJl
CXL92cTqufHbcIzIN/B+KYghama/oxnR7vQ14fyBlfbNd9vgpessuVFbpYgfC5Iz
SkAtmA00QEPvpInAJ1VtcIKQU7i2UfSmQLh6jMaEB5RpYSR1yb5uXKMPw5VCHZzX
8JJR2OLxcAkxJoj1nZt0LP8yDb6HP5AYuPjcblQZCyWuOggPZSCdy4pPAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLvdT+8JYA6OIQg7JkaYJXOw+ucBMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvdTkxUDd3bGdEbzRoQ0RzbVJwZ2xjN0Q2NXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUR/8MA0G
CSqGSIb3DQEBCwUAA4IBAQBozp1AdtgUnr79sCzy+fVHcCaUqWS+45X4GO6iybHu
1hrW6ZpX6Lix1u0kPfFz2diYOYu1kUjKU9m2H+aHVzwpP/SaQ+tXnRf+5rjxJMve
PLXedoD5vOio2SepVf9o086aetnIg0RjCtxHDxTNx202P06gJYnaJDDMY2hXx6hc
XU5Rel4f+taMl/o8AWIJd33AnVXQ/uatS/kwR7/UvDDbwLpF6sZ+1vlkGJXeO/+A
DFvGsjRD29VE7NiM9gNXB2aYwqfzHb6K7vnTWw1YxXqpibr9GBd9/S7NNNoJiWG5
v5S844xb1RUnninL3Oj4cmVbzQsMqptefdkxxFd4m8Ol
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org