Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/5YUU2SEy27IN5QEFQO25ZVtQSYw.roa
File: 5YUU2SEy27IN5QEFQO25ZVtQSYw.roa (raw, json)
Hash identifier: MlCrCL8qkbjAfJP4DmWBJcDFkOh7C6Uy+z9q+3K7ex0=
Subject key identifier: E5:85:14:D9:21:32:DB:B2:0D:E5:01:05:40:ED:B9:65:5B:50:49:8C
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 01856B93365CE73F519CF8E523D541421CD2
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/5YUU2SEy27IN5QEFQO25ZVtQSYw.roa
Signing time: Sun 01 Jan 2023 04:24:47 +0000
ROA not before: Sun 01 Jan 2023 04:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 91.244.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:36:5c:e7:3f:51:9c:f8:e5:23:d5:41:42:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Jan 1 04:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e58514d92132dbb20de5010540edb9655b50498c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:91:15:a8:39:6e:87:4e:9f:45:74:e4:82:
26:2f:03:a3:c7:b2:5b:e7:81:45:b8:4c:42:dd:d9:
dc:8a:ac:ab:cf:4d:fd:8e:b8:09:04:e2:7e:b4:3c:
4e:aa:2d:b4:41:ff:4f:94:09:79:d0:98:da:d1:fe:
58:f0:d8:d4:a6:d0:18:5f:52:8a:a6:b0:a7:4c:d9:
97:d1:f7:4a:d1:60:a3:fa:66:a2:b5:60:77:74:f6:
ad:5c:f8:fb:88:9c:73:20:ef:2d:3b:b4:f3:f9:f0:
16:4a:83:fd:4a:74:fa:81:b1:41:5d:77:93:a8:c6:
95:7c:d1:bb:ec:e7:5e:45:f1:87:75:0c:f5:00:f4:
ba:3e:06:da:e1:71:63:f4:d8:2f:68:c3:b5:a5:40:
ec:c4:15:09:76:81:3d:32:04:be:6e:6e:83:38:e2:
7e:f7:64:60:02:b2:b9:65:dd:84:a6:e9:5a:4a:48:
bc:13:fa:ff:ec:ce:8e:30:69:b2:97:b5:04:e4:1b:
ca:67:2c:f8:bf:1b:b7:94:03:4b:64:0c:95:ab:c6:
37:4d:c0:a5:e3:c8:5d:46:0b:65:14:83:8d:98:3d:
56:e7:c5:14:e5:c4:83:81:2d:38:73:72:e4:7d:b7:
1a:2d:a2:69:07:1e:bc:ed:e4:c9:69:86:13:80:5b:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:14:D9:21:32:DB:B2:0D:E5:01:05:40:ED:B9:65:5B:50:49:8C
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/5YUU2SEy27IN5QEFQO25ZVtQSYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ca:f5:26:7d:05:2e:2a:c9:cb:f3:29:d0:f6:c0:52:65:5e:
d3:d6:dc:eb:59:03:f0:55:61:66:d2:92:f6:8c:3d:78:5e:2d:
72:53:fc:54:b5:ed:b2:e2:60:95:fd:51:3a:e0:37:12:25:6d:
6e:27:bc:f0:d5:3f:a1:93:0e:2e:d7:cf:48:48:e4:eb:c8:3f:
c4:89:7e:72:82:e9:d6:1c:91:1c:34:a8:02:4b:08:b0:cb:af:
04:99:83:fc:05:cc:e2:54:16:6d:91:e0:c1:25:48:aa:68:c9:
63:c5:bf:e9:f0:cf:bc:5a:58:fe:6d:aa:61:d4:60:73:48:b0:
b6:7e:1e:2c:be:05:7b:ab:14:5f:39:99:3a:dc:e4:e6:7a:87:
58:73:53:a7:45:e6:f8:21:cc:5e:c7:f7:46:c2:c3:fc:a5:c2:
50:ba:0f:63:3b:ae:ab:3e:f6:92:09:9e:25:76:cd:32:9d:b1:
60:69:2f:93:89:d4:2c:9a:34:c6:50:dc:25:5c:06:a8:bc:d5:
66:5c:24:4c:48:c4:36:37:b0:43:ca:42:bf:ec:ff:7f:e3:ec:
38:69:c9:be:46:0f:71:95:23:4c:52:56:f9:3a:b3:bb:de:12:
76:f7:49:7e:68:ea:de:64:53:19:47:91:a2:31:8c:a5:94:3d:
5e:09:27:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrkzZc5z9RnPjlI9VBQhzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5
ZWMwYjUwHhcNMjMwMTAxMDQyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTg1MTRkOTIxMzJkYmIyMGRlNTAxMDU0MGVkYjk2NTViNTA0OThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZGRFag5bodOn0V05IImLwOjx7Jb
54FFuExC3dnciqyrz039jrgJBOJ+tDxOqi20Qf9PlAl50Jja0f5Y8NjUptAYX1KK
prCnTNmX0fdK0WCj+maitWB3dPatXPj7iJxzIO8tO7Tz+fAWSoP9SnT6gbFBXXeT
qMaVfNG77OdeRfGHdQz1APS6Pgba4XFj9NgvaMO1pUDsxBUJdoE9MgS+bm6DOOJ+
92RgArK5Zd2EpulaSki8E/r/7M6OMGmyl7UE5BvKZyz4vxu3lANLZAyVq8Y3TcCl
48hdRgtlFIONmD1W58UU5cSDgS04c3LkfbcaLaJpBx687eTJaYYTgFuhjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWFFNkhMtuyDeUBBUDtuWVbUEmMMB8GA1UdIwQY
MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt
MTlkZjViNGQxMDE0LzEvNVlVVTJTRXkyN0lONVFFRlFPMjVaVnRRU1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0
LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TvMA0G
CSqGSIb3DQEBCwUAA4IBAQAvyvUmfQUuKsnL8ynQ9sBSZV7T1tzrWQPwVWFm0pL2
jD14Xi1yU/xUte2y4mCV/VE64DcSJW1uJ7zw1T+hkw4u189ISOTryD/EiX5ygunW
HJEcNKgCSwiwy68EmYP8BcziVBZtkeDBJUiqaMljxb/p8M+8Wlj+baph1GBzSLC2
fh4svgV7qxRfOZk63OTmeodYc1OnReb4Icxex/dGwsP8pcJQug9jO66rPvaSCZ4l
ds0ynbFgaS+TidQsmjTGUNwlXAaovNVmXCRMSMQ2N7BDykK/7P9/4+w4acm+Rg9x
lSNMUlb5OrO73hJ290l+aOreZFMZR5GiMYyllD1eCSdm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:24 2024 by rpki-client on console-fra.rpki-client.org