Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/5vJgy4vFSDTKsqUM2MKSNvSR2xQ.roa
File: 5vJgy4vFSDTKsqUM2MKSNvSR2xQ.roa (raw, json)
Hash identifier: xJiyd4YbqIB0/IDTupdfwqEfvrESRKDmlQagNYSzhOo=
Subject key identifier: E6:F2:60:CB:8B:C5:48:34:CA:B2:A5:0C:D8:C2:92:36:F4:91:DB:14
Certificate issuer: /CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Certificate serial: 018AFBCEA332621936B165B4C8C89D124385
Authority key identifier: 71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/5vJgy4vFSDTKsqUM2MKSNvSR2xQ.roa
Signing time: Wed 04 Oct 2023 17:48:57 +0000
ROA not before: Wed 04 Oct 2023 17:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 91.229.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:ce:a3:32:62:19:36:b1:65:b4:c8:c8:9d:12:43:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Validity
Not Before: Oct 4 17:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f260cb8bc54834cab2a50cd8c29236f491db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:b5:a3:ee:02:07:e3:8d:6b:3e:06:bd:7c:
e5:5f:54:23:4e:bd:c1:09:fc:1d:29:34:31:d7:83:
ee:b1:fa:ac:af:68:98:2c:3e:ae:80:f4:ac:e7:c5:
64:17:6f:b1:09:25:68:de:2b:40:50:77:de:18:cf:
df:b4:ca:69:a5:08:a4:e6:eb:00:5d:d8:25:00:5e:
3e:66:65:6f:65:ef:97:9e:62:22:29:79:e2:7f:b0:
cc:b7:34:fd:91:87:92:c1:f0:1a:4c:ce:f3:c8:96:
1e:c1:dd:94:72:33:3b:2f:b8:d1:7d:18:77:cc:e9:
de:b4:33:3f:5b:5f:81:71:4d:00:09:c6:53:73:6c:
15:3e:1c:52:5a:a0:27:78:1a:31:cf:22:7d:80:4c:
0e:39:cb:fb:3d:3d:7f:3d:84:90:e4:68:48:e9:6a:
77:b1:36:61:0c:23:ac:ce:d3:5b:ba:8e:93:0f:4c:
c7:1b:65:57:92:f9:df:9e:c1:a3:33:f1:c6:4b:d4:
94:8d:db:a1:4b:06:1c:ec:a5:50:04:61:f5:b5:f2:
83:18:73:fb:f5:88:c5:fe:31:62:0c:cb:4b:f9:38:
d6:fb:77:84:d5:f9:32:d2:98:e0:01:ba:05:cd:27:
2b:3a:1c:e7:1a:c9:9a:e6:89:32:27:89:2f:28:93:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:60:CB:8B:C5:48:34:CA:B2:A5:0C:D8:C2:92:36:F4:91:DB:14
X509v3 Authority Key Identifier:
keyid:71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/5vJgy4vFSDTKsqUM2MKSNvSR2xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.114.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fd:16:cb:a9:38:fc:36:06:79:3a:7b:0f:54:52:dc:20:ce:
bb:63:0f:6e:d7:76:1d:48:82:94:e9:46:c4:8b:24:95:1a:bd:
b8:e2:e4:86:af:e8:c6:ff:cf:03:1c:f1:f6:16:81:51:b5:f6:
6c:cf:e3:dd:ab:e0:88:89:d0:87:ce:f1:bb:ba:02:9d:50:16:
24:fb:50:48:7f:25:f7:63:f5:4e:c3:7c:4f:94:bc:31:0b:a9:
aa:a3:84:04:89:25:6a:2b:46:f3:33:4c:b2:0c:a0:98:aa:56:
85:5c:b7:77:1d:67:d8:05:4f:48:7e:58:99:54:8c:e9:50:9c:
d3:c5:bf:ca:b6:50:b8:82:23:42:aa:d1:1e:6f:30:d0:7a:38:
bd:b1:7b:8c:f0:66:10:eb:da:d4:15:91:ef:0b:06:72:51:fd:
07:b9:73:e3:39:10:f1:f2:28:ab:2a:c4:f2:79:b0:7e:f5:8a:
ef:6e:7c:87:46:ae:67:dc:5b:a2:cf:8a:d4:ac:30:27:c1:8e:
c3:a9:b3:ad:9e:c0:dc:b5:8c:b0:56:7e:d1:d2:e6:4e:46:f1:
3f:5f:b4:10:86:e1:48:39:ce:c0:62:be:ed:f0:e0:e6:09:8e:
b9:3f:de:88:26:38:5c:9a:ba:24:10:a5:c7:a3:d9:34:9b:1c:
29:c5:9b:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr7zqMyYhk2sWW0yMidEkOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWZjMzJhYzc1YjhiZjVjNjE0MmZhNWYzZmI1NmNiMGZh
ODUzZWIwHhcNMjMxMDA0MTc0ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmYyNjBjYjhiYzU0ODM0Y2FiMmE1MGNkOGMyOTIzNmY0OTFkYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/K1o+4CB+ONaz4GvXzlX1QjTr3B
CfwdKTQx14Pusfqsr2iYLD6ugPSs58VkF2+xCSVo3itAUHfeGM/ftMpppQik5usA
XdglAF4+ZmVvZe+XnmIiKXnif7DMtzT9kYeSwfAaTM7zyJYewd2UcjM7L7jRfRh3
zOnetDM/W1+BcU0ACcZTc2wVPhxSWqAneBoxzyJ9gEwOOcv7PT1/PYSQ5GhI6Wp3
sTZhDCOsztNbuo6TD0zHG2VXkvnfnsGjM/HGS9SUjduhSwYc7KVQBGH1tfKDGHP7
9YjF/jFiDMtL+TjW+3eE1fky0pjgAboFzScrOhznGsma5okyJ4kvKJPMXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObyYMuLxUg0yrKlDNjCkjb0kdsUMB8GA1UdIwQY
MBaAFHFfwyrHW4v1xhQvpfP7VssPqFPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZfREtzZGJpX1hHRkMtbDhfdFd5dy1vVS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzRlM2MtMzQwYy00NTUxLTlmNWUt
ZGVjZGQ4OGQwZTJlLzEvNXZKZ3k0dkZTRFRLc3FVTTJNS1NOdlNSMnhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84YzRlM2MtMzQwYy00NTUxLTlmNWUtZGVjZGQ4OGQwZTJl
LzEvY1ZfREtzZGJpX1hHRkMtbDhfdFd5dy1vVS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+VyMA0G
CSqGSIb3DQEBCwUAA4IBAQBo/RbLqTj8NgZ5OnsPVFLcIM67Yw9u13YdSIKU6UbE
iySVGr244uSGr+jG/88DHPH2FoFRtfZsz+Pdq+CIidCHzvG7ugKdUBYk+1BIfyX3
Y/VOw3xPlLwxC6mqo4QEiSVqK0bzM0yyDKCYqlaFXLd3HWfYBU9IfliZVIzpUJzT
xb/KtlC4giNCqtEebzDQeji9sXuM8GYQ69rUFZHvCwZyUf0HuXPjORDx8iirKsTy
ebB+9YrvbnyHRq5n3Fuiz4rUrDAnwY7DqbOtnsDctYywVn7R0uZORvE/X7QQhuFI
Oc7AYr7t8ODmCY65P96IJjhcmrokEKXHo9k0mxwpxZsB
-----END CERTIFICATE-----
Generated at Sun Oct 22 17:58:21 2023 by rpki-client on console-ams.rpki-client.org