Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/Rkz_xSRKtmjbdH4wD0HSVLGBCeg.roa
File: Rkz_xSRKtmjbdH4wD0HSVLGBCeg.roa (raw, json)
Hash identifier: NXDD7+0hvxALpRIgsmZXeyyMby8H+bTxlbmXZngCBxE=
Subject key identifier: 46:4C:FF:C5:24:4A:B6:68:DB:74:7E:30:0F:41:D2:54:B1:81:09:E8
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 01856D9D16ABD3E65C924F7F6335DD0C3F46
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/Rkz_xSRKtmjbdH4wD0HSVLGBCeg.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:16:ab:d3:e6:5c:92:4f:7f:63:35:dd:0c:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464cffc5244ab668db747e300f41d254b18109e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:4c:8e:d0:6f:ca:2a:f7:a9:66:6f:70:a1:
34:f6:0e:ad:ff:dd:0f:1d:d6:21:aa:0a:f4:82:2e:
66:ba:05:e9:90:4f:a0:4e:db:54:02:43:88:4a:44:
54:0e:01:54:7e:03:f5:bb:6f:a3:67:0a:78:24:18:
a2:d4:37:b5:7e:dd:50:ae:e3:35:f8:88:7d:98:65:
92:aa:db:b6:ea:07:d7:ec:82:40:f2:69:b9:79:3a:
5d:3f:09:a1:65:11:3c:bc:5c:7c:7b:ca:c6:76:9d:
a4:ea:13:09:91:96:0a:cf:ca:98:31:3a:b9:93:cc:
4f:7d:df:72:5f:6c:39:55:a6:cc:b1:d7:c2:51:60:
d4:16:35:d1:47:ae:60:b7:37:b1:8d:ef:89:c0:10:
95:6d:f3:0a:be:d3:d8:0e:6b:02:86:b0:07:29:3c:
bb:83:67:b8:e8:94:b5:d5:2f:b7:04:15:12:b4:26:
7b:34:59:2c:ea:28:68:45:ee:ba:e5:9a:e6:be:27:
25:70:19:10:c6:9c:4f:6b:ef:14:84:7e:32:62:04:
0b:68:6e:e9:0b:a2:00:e0:5f:69:cd:87:20:5d:b9:
98:1d:08:c9:d6:84:91:08:51:ba:21:62:26:da:9b:
89:ab:fd:51:f8:84:62:b7:bd:f9:04:d2:1d:c4:e8:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:FF:C5:24:4A:B6:68:DB:74:7E:30:0F:41:D2:54:B1:81:09:E8
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/Rkz_xSRKtmjbdH4wD0HSVLGBCeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1b:35:24:80:f5:30:c9:05:b1:88:d1:b7:62:f1:09:1f:41:
fa:09:cf:1c:40:a0:1b:4a:30:09:dd:14:10:8e:ed:94:11:9d:
f3:da:db:eb:fb:06:23:c5:36:54:7f:c7:33:14:88:48:70:72:
f2:41:95:80:dd:f8:d1:fc:89:f9:59:b3:df:07:d1:cd:dc:19:
3b:8e:60:e7:4c:7d:d2:5f:fc:a1:cf:64:83:18:c2:4e:52:38:
f7:96:01:cb:d8:8b:6c:c5:ad:3f:f6:76:6e:d0:91:d2:79:ad:
02:8f:a1:56:74:7e:c1:30:c4:80:9f:5c:70:72:ff:df:bd:60:
20:f8:02:26:54:13:da:72:47:c6:87:a7:58:2c:ad:6e:6f:45:
2f:ca:57:c0:ac:ce:a2:2a:ce:d8:a0:67:21:67:18:b5:4b:d7:
04:82:1a:8f:a1:c6:d8:e0:5f:d6:93:9d:12:77:3a:bc:28:8c:
db:6c:15:1d:bb:50:f6:e0:2a:a8:d6:37:46:f3:7f:c7:2d:0e:
c3:31:f1:63:c7:b2:e6:c4:cb:21:8e:fe:9e:b2:da:15:0c:1b:
44:81:fd:9a:5f:74:65:14:39:af:27:ec:3c:98:fa:f0:3f:35:
c8:db:ad:0d:27:c2:ba:9e:cb:b3:3c:50:25:58:63:96:73:3f:
ec:66:0f:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnRar0+Zckk9/YzXdDD9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw
MDA4MGUwHhcNMjMwMTAxMTM1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjRjZmZjNTI0NGFiNjY4ZGI3NDdlMzAwZjQxZDI1NGIxODEwOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR5MjtBvyir3qWZvcKE09g6t/90P
HdYhqgr0gi5mugXpkE+gTttUAkOISkRUDgFUfgP1u2+jZwp4JBii1De1ft1QruM1
+Ih9mGWSqtu26gfX7IJA8mm5eTpdPwmhZRE8vFx8e8rGdp2k6hMJkZYKz8qYMTq5
k8xPfd9yX2w5VabMsdfCUWDUFjXRR65gtzexje+JwBCVbfMKvtPYDmsChrAHKTy7
g2e46JS11S+3BBUStCZ7NFks6ihoRe665ZrmviclcBkQxpxPa+8UhH4yYgQLaG7p
C6IA4F9pzYcgXbmYHQjJ1oSRCFG6IWIm2puJq/1R+IRit735BNIdxOhDkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZM/8UkSrZo23R+MA9B0lSxgQnoMB8GA1UdIwQY
MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt
ZjRiOWRhNDgwZWUyLzEvUmt6X3hTUkt0bWpiZEg0d0QwSFNWTEdCQ2VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy
LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NLMA0G
CSqGSIb3DQEBCwUAA4IBAQCzGzUkgPUwyQWxiNG3YvEJH0H6Cc8cQKAbSjAJ3RQQ
ju2UEZ3z2tvr+wYjxTZUf8czFIhIcHLyQZWA3fjR/In5WbPfB9HN3Bk7jmDnTH3S
X/yhz2SDGMJOUjj3lgHL2Itsxa0/9nZu0JHSea0Cj6FWdH7BMMSAn1xwcv/fvWAg
+AImVBPackfGh6dYLK1ub0UvylfArM6iKs7YoGchZxi1S9cEghqPocbY4F/Wk50S
dzq8KIzbbBUdu1D24Cqo1jdG83/HLQ7DMfFjx7LmxMshjv6estoVDBtEgf2aX3Rl
FDmvJ+w8mPrwPzXI260NJ8K6nsuzPFAlWGOWcz/sZg9r
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:04 2024 by rpki-client on console-fra.rpki-client.org