Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/5fyGVcoa_UdluJbd0TrZ-GLlt-c.roa
File: 5fyGVcoa_UdluJbd0TrZ-GLlt-c.roa (raw, json)
Hash identifier: XxEpWnOsqDnTFFU943eRRcbOMKPOJPyM8OjZpCnidrM=
Subject key identifier: E5:FC:86:55:CA:1A:FD:47:65:B8:96:DD:D1:3A:D9:F8:62:E5:B7:E7
Certificate issuer: /CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Certificate serial: 01856E8B1689C4195179C742644BC94A9144
Authority key identifier: 71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/5fyGVcoa_UdluJbd0TrZ-GLlt-c.roa
Signing time: Sun 01 Jan 2023 18:14:47 +0000
ROA not before: Sun 01 Jan 2023 18:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 91.229.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:16:89:c4:19:51:79:c7:42:64:4b:c9:4a:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Validity
Not Before: Jan 1 18:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5fc8655ca1afd4765b896ddd13ad9f862e5b7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:93:be:f4:0e:99:b2:83:11:1d:3b:2f:30:
07:10:35:55:ab:0f:1f:13:b7:92:bf:78:96:d5:7a:
33:7e:7e:99:8f:32:bb:02:30:68:d7:ea:8e:2e:33:
c2:18:09:ee:1f:dd:40:c9:46:5f:f5:89:3e:66:8c:
1e:a0:b5:1a:89:15:5d:d7:ce:a4:8e:e9:93:df:31:
13:b6:0d:88:4a:b3:8a:b3:b0:29:f5:2c:ff:46:f2:
41:ee:0f:42:ce:ad:77:3b:dd:9c:61:ae:38:a0:5b:
32:e4:bd:c8:4e:ed:a2:ca:88:1f:bf:6a:b6:fc:3d:
58:62:9a:e9:6a:78:fe:ee:d6:4a:d9:34:84:4e:88:
1e:48:d3:9f:3f:d6:3c:d2:68:11:28:bd:c9:1c:4e:
22:c3:1e:a8:b9:98:bb:10:49:06:5a:62:82:5f:e9:
69:0b:66:65:66:0e:b3:b1:d3:b5:0c:36:fd:ab:39:
3a:5f:49:3f:d5:7d:3f:28:1b:ae:ea:7c:2f:84:e5:
8c:1a:21:44:77:60:ce:fe:2a:f1:b3:d7:aa:a3:da:
5d:40:51:4d:cc:cb:40:2c:b6:f8:cc:00:44:39:77:
11:8f:67:64:65:e0:a2:3f:cc:9f:f2:8e:fb:88:97:
49:a4:87:1e:a4:63:c1:2e:9d:4d:1e:8b:47:55:1b:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:86:55:CA:1A:FD:47:65:B8:96:DD:D1:3A:D9:F8:62:E5:B7:E7
X509v3 Authority Key Identifier:
keyid:71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/5fyGVcoa_UdluJbd0TrZ-GLlt-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.114.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c2:76:f5:93:94:ae:5f:5f:bd:b3:06:1f:39:46:e2:6a:bb:
20:01:17:fb:3a:05:5f:06:ec:eb:8e:cd:25:e7:b9:9f:34:c9:
4b:5d:67:2a:bd:da:ab:47:c2:e9:a7:95:a7:cb:0f:1c:43:81:
d4:fc:9c:dc:bd:b1:50:15:99:f7:d2:73:40:be:9e:03:14:b5:
4e:ca:7a:8f:71:8f:24:16:6f:a6:6c:dd:d9:f0:c2:89:57:41:
ea:f8:93:89:e0:d6:93:81:cf:a7:a0:72:eb:5c:22:a0:2f:a7:
77:a7:d0:8d:8d:b6:da:58:79:85:cc:5c:f6:67:39:8e:20:b1:
2a:42:99:b7:c4:b6:62:84:b3:c2:46:cf:fb:86:ff:70:e2:bb:
7e:95:c0:19:cf:d3:a8:6c:aa:3e:bc:19:d6:15:ac:2d:8c:b9:
44:ee:8f:67:ab:e7:d1:ae:8b:3c:a9:9a:a0:bc:69:9b:7d:3a:
07:18:b9:c1:0d:25:c0:da:90:7a:d9:8f:2a:67:fa:45:57:2c:
a1:60:d1:26:08:48:80:c1:b1:e0:51:ce:83:52:a2:40:d5:82:
31:cd:a3:cb:53:69:3b:e2:01:26:ae:b1:47:73:76:fb:e1:02:
03:2c:aa:08:58:18:cd:2d:91:8c:2c:25:f1:5b:39:c6:50:b9:
af:87:27:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuixaJxBlRecdCZEvJSpFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWZjMzJhYzc1YjhiZjVjNjE0MmZhNWYzZmI1NmNiMGZh
ODUzZWIwHhcNMjMwMTAxMTgxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWZjODY1NWNhMWFmZDQ3NjViODk2ZGRkMTNhZDlmODYyZTViN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8uTvvQOmbKDER07LzAHEDVVqw8f
E7eSv3iW1Xozfn6ZjzK7AjBo1+qOLjPCGAnuH91AyUZf9Yk+ZoweoLUaiRVd186k
jumT3zETtg2ISrOKs7Ap9Sz/RvJB7g9Czq13O92cYa44oFsy5L3ITu2iyogfv2q2
/D1YYprpanj+7tZK2TSETogeSNOfP9Y80mgRKL3JHE4iwx6ouZi7EEkGWmKCX+lp
C2ZlZg6zsdO1DDb9qzk6X0k/1X0/KBuu6nwvhOWMGiFEd2DO/irxs9eqo9pdQFFN
zMtALLb4zABEOXcRj2dkZeCiP8yf8o77iJdJpIcepGPBLp1NHotHVRvBBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOX8hlXKGv1HZbiW3dE62fhi5bfnMB8GA1UdIwQY
MBaAFHFfwyrHW4v1xhQvpfP7VssPqFPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZfREtzZGJpX1hHRkMtbDhfdFd5dy1vVS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzRlM2MtMzQwYy00NTUxLTlmNWUt
ZGVjZGQ4OGQwZTJlLzEvNWZ5R1Zjb2FfVWRsdUpiZDBUclotR0xsdC1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84YzRlM2MtMzQwYy00NTUxLTlmNWUtZGVjZGQ4OGQwZTJl
LzEvY1ZfREtzZGJpX1hHRkMtbDhfdFd5dy1vVS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+VyMA0G
CSqGSIb3DQEBCwUAA4IBAQADwnb1k5SuX1+9swYfOUbiarsgARf7OgVfBuzrjs0l
57mfNMlLXWcqvdqrR8Lpp5Wnyw8cQ4HU/JzcvbFQFZn30nNAvp4DFLVOynqPcY8k
Fm+mbN3Z8MKJV0Hq+JOJ4NaTgc+noHLrXCKgL6d3p9CNjbbaWHmFzFz2ZzmOILEq
Qpm3xLZihLPCRs/7hv9w4rt+lcAZz9OobKo+vBnWFawtjLlE7o9nq+fRros8qZqg
vGmbfToHGLnBDSXA2pB62Y8qZ/pFVyyhYNEmCEiAwbHgUc6DUqJA1YIxzaPLU2k7
4gEmrrFHc3b74QIDLKoIWBjNLZGMLCXxWznGULmvhye/
-----END CERTIFICATE-----
Generated at Wed Oct 4 18:24:16 2023 by rpki-client on console-ams.rpki-client.org