Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/JQvX-4ksyb5m46w4vI-lemqx0QU.roa
File: JQvX-4ksyb5m46w4vI-lemqx0QU.roa (raw, json)
Hash identifier: MBzN6w2ul1kfTSU2PWuWKmgC4kgA3iczMSSiRgtSNiU=
Subject key identifier: 25:0B:D7:FB:89:2C:C9:BE:66:E3:AC:38:BC:8F:A5:7A:6A:B1:D1:05
Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial: 01856E38B9361CF97F770A3467460325956F
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/JQvX-4ksyb5m46w4vI-lemqx0QU.roa
Signing time: Sun 01 Jan 2023 16:44:49 +0000
ROA not before: Sun 01 Jan 2023 16:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196731
IP address blocks: 91.212.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:b9:36:1c:f9:7f:77:0a:34:67:46:03:25:95:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Validity
Not Before: Jan 1 16:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=250bd7fb892cc9be66e3ac38bc8fa57a6ab1d105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:a7:2a:d7:d1:d3:b9:3f:5b:c1:4d:25:68:
2a:5f:b4:b9:f0:44:54:10:27:ee:90:f4:48:e8:aa:
69:26:de:2c:f7:b1:79:3b:e5:93:cd:71:6f:25:d0:
d7:fb:6f:c2:4c:9e:3a:03:18:c9:e8:1c:2c:f3:bb:
f5:c2:db:4b:3e:30:cf:b3:f6:f2:47:a2:82:f8:10:
b4:c9:34:b2:03:c4:fa:fa:dd:cd:d9:00:06:52:27:
ea:02:95:83:3e:c8:5a:3c:a2:b5:c5:81:45:98:7f:
c2:79:3f:7d:62:fd:e6:da:ac:09:b3:30:b9:2f:7f:
2a:58:60:17:91:0c:9b:5f:27:fa:56:9f:06:1c:b0:
71:54:00:57:79:e3:4d:a6:5c:39:db:45:03:8b:8b:
3e:3b:cc:e2:0a:12:56:b1:b7:50:91:bb:93:ac:73:
66:70:4e:e6:ef:64:a3:38:08:f1:6f:f7:a9:dc:fd:
ea:dd:63:ed:07:ad:44:b1:c0:d5:15:8c:9e:78:79:
c8:7b:33:2e:e9:6a:92:6f:ef:8b:d8:55:5e:24:64:
3d:42:c4:64:58:6c:99:bb:82:da:ae:97:6c:80:78:
41:57:36:70:0b:cd:93:5e:15:68:54:ea:c1:ce:97:
01:15:81:f1:ad:90:89:32:00:49:8f:9a:73:a5:33:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:D7:FB:89:2C:C9:BE:66:E3:AC:38:BC:8F:A5:7A:6A:B1:D1:05
X509v3 Authority Key Identifier:
keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/JQvX-4ksyb5m46w4vI-lemqx0QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f9:73:df:d5:d7:d7:fe:75:6f:ef:56:77:c0:5c:79:36:28:
75:46:1f:ee:cf:2a:d0:f9:41:68:f5:83:f7:eb:14:46:f6:cb:
5c:3e:74:51:81:2e:80:86:17:ba:3a:4b:be:39:30:d7:9d:35:
47:dc:16:72:e4:06:bc:1a:e8:81:61:71:dc:ec:5b:22:b6:3b:
65:32:cf:8e:de:07:37:7d:71:2d:34:3f:9e:44:11:4e:69:33:
af:05:f8:64:82:bb:60:10:31:d2:fa:a8:5c:93:5d:76:38:cd:
14:38:cb:87:06:fa:ba:a1:c0:02:31:61:a2:29:1d:db:f8:bd:
f3:9c:17:ca:64:40:e1:55:51:63:b6:7a:f6:23:0a:e7:72:f5:
72:d4:c8:09:19:68:2a:b9:16:35:bd:22:a9:f8:8a:6f:0a:30:
90:ed:2b:e0:2e:85:35:95:be:b2:44:cc:71:ec:e5:cd:c1:6d:
f5:75:6d:87:4f:2b:73:33:78:40:24:26:13:bb:01:9a:b1:29:
c7:f4:80:d7:4f:66:19:15:c3:8f:dc:18:cc:58:d2:0b:83:02:
e6:f5:ec:04:76:4d:bd:80:f9:b8:65:70:5f:0c:67:17:49:70:
48:88:4f:ec:6a:b9:5e:d3:ce:34:e8:3a:ea:19:37:42:66:dc:
8d:6b:99:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuOLk2HPl/dwo0Z0YDJZVvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzhmNjhhYzQxNTA1OWQ1NmQxOTM4YzM3NWE1OTg2YTZm
ZmY0YjEwHhcNMjMwMTAxMTY0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTBiZDdmYjg5MmNjOWJlNjZlM2FjMzhiYzhmYTU3YTZhYjFkMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9GnKtfR07k/W8FNJWgqX7S58ERU
ECfukPRI6KppJt4s97F5O+WTzXFvJdDX+2/CTJ46AxjJ6Bws87v1wttLPjDPs/by
R6KC+BC0yTSyA8T6+t3N2QAGUifqApWDPshaPKK1xYFFmH/CeT99Yv3m2qwJszC5
L38qWGAXkQybXyf6Vp8GHLBxVABXeeNNplw520UDi4s+O8ziChJWsbdQkbuTrHNm
cE7m72SjOAjxb/ep3P3q3WPtB61EscDVFYyeeHnIezMu6WqSb++L2FVeJGQ9QsRk
WGyZu4LarpdsgHhBVzZwC82TXhVoVOrBzpcBFYHxrZCJMgBJj5pzpTOkMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUL1/uJLMm+ZuOsOLyPpXpqsdEFMB8GA1UdIwQY
MBaAFFrI9orEFQWdVtGTjDdaWYam//SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4Njct
MWM4MTMyZDVmNGI0LzEvSlF2WC00a3N5YjVtNDZ3NHZJLWxlbXF4MFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4NjctMWM4MTMyZDVmNGI0
LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RXMA0G
CSqGSIb3DQEBCwUAA4IBAQAd+XPf1dfX/nVv71Z3wFx5Nih1Rh/uzyrQ+UFo9YP3
6xRG9stcPnRRgS6Ahhe6Oku+OTDXnTVH3BZy5Aa8GuiBYXHc7FsitjtlMs+O3gc3
fXEtND+eRBFOaTOvBfhkgrtgEDHS+qhck112OM0UOMuHBvq6ocACMWGiKR3b+L3z
nBfKZEDhVVFjtnr2IwrncvVy1MgJGWgquRY1vSKp+IpvCjCQ7SvgLoU1lb6yRMxx
7OXNwW31dW2HTytzM3hAJCYTuwGasSnH9IDXT2YZFcOP3BjMWNILgwLm9ewEdk29
gPm4ZXBfDGcXSXBIiE/sarle08406DrqGTdCZtyNa5k6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:39 2024 by rpki-client on console-ams.rpki-client.org