Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/ViCsKbDshC_C6_zNDDGCe2LT6Wk.roa
File: ViCsKbDshC_C6_zNDDGCe2LT6Wk.roa (raw, json)
Hash identifier: 0WOwhPHm6svtYs5O1aWmNuthZmQAzzQaW6zV6oscYfE=
Subject key identifier: 56:20:AC:29:B0:EC:84:2F:C2:EB:FC:CD:0C:31:82:7B:62:D3:E9:69
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 0192FC866E2DD3141B3DA361BF5C495A92A9
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/ViCsKbDshC_C6_zNDDGCe2LT6Wk.roa
Signing time: Tue 05 Nov 2024 13:32:01 +0000
ROA not before: Tue 05 Nov 2024 13:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61396
IP address blocks: 91.197.156.0/22 maxlen: 22
91.197.156.0/23 maxlen: 23
91.197.158.0/23 maxlen: 23
91.247.32.0/22 maxlen: 22
91.247.32.0/23 maxlen: 23
91.247.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:86:6e:2d:d3:14:1b:3d:a3:61:bf:5c:49:5a:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Nov 5 13:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5620ac29b0ec842fc2ebfccd0c31827b62d3e969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:5d:41:a3:03:e4:06:f5:cb:75:b3:9b:70:
62:e3:3c:21:fe:87:e6:4d:dd:b3:e8:62:03:21:b5:
40:94:63:f4:10:02:3f:73:81:4c:19:0b:6e:fe:13:
c4:9d:87:2d:61:c2:dc:92:78:db:f9:65:66:4e:74:
95:41:02:ff:c4:a3:9e:d1:05:27:09:7a:0d:e8:bd:
d9:6c:8a:77:e4:98:cc:5a:17:e5:d6:c8:cf:9c:aa:
d2:06:6d:b4:85:fa:f9:ef:4f:81:07:a4:1d:fc:04:
d1:f9:4d:fe:ad:31:5f:98:a5:98:4e:3a:b3:b1:e2:
4a:e5:48:73:1b:a6:80:8f:db:6a:d0:38:04:aa:9e:
6c:a5:61:36:e4:75:16:4e:ef:7c:ab:7e:db:67:e4:
a8:64:e9:8c:80:9f:d8:df:43:77:59:1f:26:6d:12:
20:43:45:b4:34:0f:db:65:df:4d:47:ba:10:44:a7:
a8:6b:60:74:db:db:6a:82:6f:ce:fe:12:b1:ae:eb:
00:fb:06:d7:5c:8d:6c:52:62:ad:d3:1b:57:05:13:
3e:20:99:51:83:47:c4:df:4c:93:7b:bd:c7:ab:25:
9b:fb:07:0d:01:05:39:70:aa:fb:9a:0a:11:07:cf:
e3:9b:b1:5a:2a:42:db:e4:04:14:3e:77:05:87:49:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:AC:29:B0:EC:84:2F:C2:EB:FC:CD:0C:31:82:7B:62:D3:E9:69
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/ViCsKbDshC_C6_zNDDGCe2LT6Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.156.0/22
91.247.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:6f:05:ef:57:56:c0:fc:80:b4:09:df:bb:bb:4e:95:de:a3:
5a:d5:d5:03:5b:9a:7c:fb:71:1e:fd:23:d3:c8:8c:56:f8:60:
68:1b:51:c6:03:09:46:56:c3:a6:bd:f7:07:3c:83:18:b6:ec:
80:70:36:73:d8:0a:c6:0a:60:e2:b5:c6:28:3e:a6:ed:5a:4a:
e7:cc:4d:50:ee:72:3b:8b:b6:08:b3:00:fd:6d:ac:dc:ae:e5:
1f:a8:08:b2:c5:3f:20:c6:17:51:5f:84:04:3c:99:c6:c0:f4:
8d:c3:3c:71:d8:ab:30:43:01:71:4c:8b:e0:e0:f6:3a:36:1f:
4c:34:e4:8e:61:3f:e0:94:52:f7:fc:79:07:86:9a:1c:c6:71:
55:7b:39:f1:8c:a4:c0:a7:91:f2:a5:5f:91:74:34:4d:6f:48:
68:ed:52:29:65:69:3b:56:6b:fb:62:b8:fc:60:67:0e:ad:a0:
26:6a:99:4e:8d:bf:85:07:85:2a:ad:fc:f6:1e:1e:b1:05:42:
9d:9d:65:9b:3f:25:ca:7d:ed:b0:e9:84:7f:93:16:c5:bd:b6:
fc:64:78:30:3b:ec:e5:ac:e6:ad:05:7e:e6:62:16:00:48:9c:
71:34:42:b2:92:f1:38:33:70:97:98:19:09:55:9e:41:b7:56:
75:99:8e:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZL8hm4t0xQbPaNhv1xJWpKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3
OTc5ZjcwHhcNMjQxMTA1MTMzMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjIwYWMyOWIwZWM4NDJmYzJlYmZjY2QwYzMxODI3YjYyZDNlOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD1dQaMD5Ab1y3Wzm3Bi4zwh/ofm
Td2z6GIDIbVAlGP0EAI/c4FMGQtu/hPEnYctYcLcknjb+WVmTnSVQQL/xKOe0QUn
CXoN6L3ZbIp35JjMWhfl1sjPnKrSBm20hfr570+BB6Qd/ATR+U3+rTFfmKWYTjqz
seJK5UhzG6aAj9tq0DgEqp5spWE25HUWTu98q37bZ+SoZOmMgJ/Y30N3WR8mbRIg
Q0W0NA/bZd9NR7oQRKeoa2B029tqgm/O/hKxrusA+wbXXI1sUmKt0xtXBRM+IJlR
g0fE30yTe73HqyWb+wcNAQU5cKr7mgoRB8/jm7FaKkLb5AQUPncFh0nJWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFYgrCmw7IQvwuv8zQwxgnti0+lpMB8GA1UdIwQY
MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt
ZjA0OTgzOWZhNzMwLzEvVmlDc0tiRHNoQ19DNl96TkRER0NlMkxUNldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw
LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8WcAwQC
W/cgMA0GCSqGSIb3DQEBCwUAA4IBAQAsbwXvV1bA/IC0Cd+7u06V3qNa1dUDW5p8
+3Ee/SPTyIxW+GBoG1HGAwlGVsOmvfcHPIMYtuyAcDZz2ArGCmDitcYoPqbtWkrn
zE1Q7nI7i7YIswD9bazcruUfqAiyxT8gxhdRX4QEPJnGwPSNwzxx2KswQwFxTIvg
4PY6Nh9MNOSOYT/glFL3/HkHhpocxnFVeznxjKTAp5HypV+RdDRNb0ho7VIpZWk7
Vmv7Yrj8YGcOraAmaplOjb+FB4Uqrfz2Hh6xBUKdnWWbPyXKfe2w6YR/kxbFvbb8
ZHgwO+zlrOatBX7mYhYASJxxNEKykvE4M3CXmBkJVZ5Bt1Z1mY7X
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:25 2025 by rpki-client