Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-YFKnPEuZuwO-TZDnlkm98PpGWM.roa
File: 1-YFKnPEuZuwO-TZDnlkm98PpGWM.roa (raw, json)
Hash identifier: r11HoZA/faKXsHM+FKfnA32bGDgHqUIu8piivH/yJyc=
Subject key identifier: F9:81:4A:9C:F1:2E:66:EC:0E:F9:36:43:9E:59:26:F7:C3:E9:19:63
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0189CC5C2749C28D0DD1CA3A9576BE6FBA04
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-YFKnPEuZuwO-TZDnlkm98PpGWM.roa
Signing time: Sun 06 Aug 2023 19:38:58 +0000
ROA not before: Sun 06 Aug 2023 19:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43106
IP address blocks: 91.108.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:5c:27:49:c2:8d:0d:d1:ca:3a:95:76:be:6f:ba:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 6 19:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9814a9cf12e66ec0ef936439e5926f7c3e91963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:2d:01:31:8b:db:04:ad:77:32:ec:86:fe:
d2:f4:5b:58:a0:78:03:69:2b:aa:44:70:1b:9f:60:
68:d2:bc:71:5b:ac:f0:ec:b5:79:7a:2c:09:11:bf:
53:8e:7b:9f:40:71:9d:01:09:94:4f:00:e8:3b:83:
6e:88:80:7f:48:29:70:56:3d:09:2b:8e:27:e6:17:
78:b0:98:c9:61:48:ea:b3:43:17:8c:c4:59:a5:68:
b5:bf:b2:9c:f0:fa:b9:42:5e:45:c6:11:d3:62:6c:
a6:cc:38:d4:30:19:24:48:1a:bf:31:1e:bf:dd:47:
3b:09:71:80:fd:5b:2a:17:8d:a8:77:91:0b:ac:63:
a1:d9:46:ee:64:4b:1d:f7:6a:e8:72:c1:7a:2b:fd:
15:f7:32:dd:92:a4:17:b4:be:8b:f2:fa:70:8e:e6:
e9:30:65:37:de:13:76:74:92:37:b7:10:e4:42:16:
cb:1b:74:59:7f:05:da:6b:1a:5b:aa:27:56:ad:35:
a2:98:93:a4:f8:d3:19:9d:2e:e1:57:1e:82:84:78:
5d:0c:1d:b6:cf:e2:d4:34:ed:8a:f3:b4:36:33:8e:
bf:1a:1c:39:d2:ef:2c:1b:43:61:7e:57:99:0f:02:
61:f4:ae:97:28:4f:22:54:a4:7e:67:1b:1d:7c:57:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:4A:9C:F1:2E:66:EC:0E:F9:36:43:9E:59:26:F7:C3:E9:19:63
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-YFKnPEuZuwO-TZDnlkm98PpGWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.44.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c1:00:99:7e:fd:22:28:f1:44:0e:89:b8:65:b2:e4:5e:b6:
d9:ad:26:68:60:67:d0:7d:5c:84:be:fe:c9:08:fa:63:4e:6d:
a6:e3:97:d6:37:05:3b:e7:4f:9b:16:5c:a3:8a:04:10:6c:67:
5c:28:16:51:e8:da:17:97:34:61:48:03:45:c9:c2:70:32:18:
f6:05:63:bd:c0:c9:13:ac:79:e0:56:dc:17:21:1b:e8:f7:10:
5d:d6:d0:f6:fb:31:9d:dd:c4:ff:fb:ae:77:6a:cd:66:bf:10:
79:42:97:02:f1:cc:9c:fe:7f:d4:ba:f5:31:dc:c6:b9:14:53:
a4:c6:48:9b:cf:c6:da:7d:fe:1d:fd:9b:cb:34:6c:a3:08:3d:
68:72:a9:5c:2f:f8:ab:8f:7a:7a:1c:45:69:48:33:6e:2a:33:
b9:41:79:71:4e:5c:47:50:d3:9e:67:9a:af:7f:1b:58:39:e1:
19:83:20:d9:a0:8e:e4:3a:36:f0:20:a7:99:13:db:03:9a:0f:
00:99:05:bc:2e:65:ec:ea:0f:0b:56:d6:3b:7d:6d:9c:93:a6:
38:44:6f:3f:dc:ce:0c:68:79:31:b1:2e:52:ec:a6:d5:2e:37:
6f:7c:c5:fc:46:dd:ba:52:29:cf:1a:a0:3f:a4:d8:5d:a9:1f:
dd:23:cf:e1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYnMXCdJwo0N0co6lXa+b7oEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjMwODA2MTkzODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTgxNGE5Y2YxMmU2NmVjMGVmOTM2NDM5ZTU5MjZmN2MzZTkxOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFotATGL2wStdzLshv7S9FtYoHgD
aSuqRHAbn2Bo0rxxW6zw7LV5eiwJEb9TjnufQHGdAQmUTwDoO4NuiIB/SClwVj0J
K44n5hd4sJjJYUjqs0MXjMRZpWi1v7Kc8Pq5Ql5FxhHTYmymzDjUMBkkSBq/MR6/
3Uc7CXGA/VsqF42od5ELrGOh2UbuZEsd92rocsF6K/0V9zLdkqQXtL6L8vpwjubp
MGU33hN2dJI3txDkQhbLG3RZfwXaaxpbqidWrTWimJOk+NMZnS7hVx6ChHhdDB22
z+LUNO2K87Q2M46/Ghw50u8sG0NhfleZDwJh9K6XKE8iVKR+ZxsdfFd/3QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmBSpzxLmbsDvk2Q55ZJvfD6RljMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvMS1ZRktuUEV1WnV3Ty1UWkRubGttOThQcEdXTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGUvYmFhZmYzLWFlYjQtNDYxNi04ZmI1LTc2NzQxNjUyNTEw
ZC8xL1lpam40Qi10cEp3YVV2b1Q4MkpzUWJRYVViZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAltsLDAN
BgkqhkiG9w0BAQsFAAOCAQEAVcEAmX79IijxRA6JuGWy5F622a0maGBn0H1chL7+
yQj6Y05tpuOX1jcFO+dPmxZco4oEEGxnXCgWUejaF5c0YUgDRcnCcDIY9gVjvcDJ
E6x54FbcFyEb6PcQXdbQ9vsxnd3E//uud2rNZr8QeUKXAvHMnP5/1Lr1MdzGuRRT
pMZIm8/G2n3+Hf2byzRsowg9aHKpXC/4q496ehxFaUgzbiozuUF5cU5cR1DTnmea
r38bWDnhGYMg2aCO5Do28CCnmRPbA5oPAJkFvC5l7OoPC1bWO31tnJOmOERvP9zO
DGh5MbEuUuym1S43b3zF/EbdulIpzxqgP6TYXakf3SPP4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:08 2024 by rpki-client on console-ams.rpki-client.org