Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/SIYEzUprXTW_xTFmEFhnqWv1caA.roa
File: SIYEzUprXTW_xTFmEFhnqWv1caA.roa (raw, json)
Hash identifier: kAanTPS2x7nGQ80aSnojEACOlp+lCxNdhw7cfGj9vLI=
Subject key identifier: 48:86:04:CD:4A:6B:5D:35:BF:C5:31:66:10:58:67:A9:6B:F5:71:A0
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0189CC5DF9EABB06A635AEE313DD739406A3
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/SIYEzUprXTW_xTFmEFhnqWv1caA.roa
Signing time: Sun 06 Aug 2023 19:40:58 +0000
ROA not before: Sun 06 Aug 2023 19:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24739
IP address blocks: 91.108.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:5d:f9:ea:bb:06:a6:35:ae:e3:13:dd:73:94:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 6 19:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=488604cd4a6b5d35bfc53166105867a96bf571a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:5c:8d:06:73:6f:f0:14:42:1b:b1:77:1d:
8f:d1:79:95:f1:3e:03:3c:cd:26:28:8e:67:0e:16:
4d:24:b7:cb:95:67:9f:ab:94:c9:3a:29:71:c3:d8:
99:4a:93:c3:f7:45:8e:2a:6a:4a:1e:c9:4d:09:2d:
6e:59:3b:da:79:b5:c1:e9:5e:26:ca:d0:0f:d1:e0:
93:cd:54:0e:a1:17:52:60:23:71:5e:9c:47:ad:54:
59:56:a5:d7:12:39:22:ad:24:49:77:af:f9:c1:52:
c1:ac:05:b8:35:be:fa:4c:d3:f7:81:50:a0:8d:f0:
8f:91:08:a0:79:47:ce:fa:a2:11:41:95:70:a1:58:
db:2c:50:c1:41:a7:d4:26:35:63:a8:2b:85:0c:ed:
6a:94:e2:77:79:3a:33:63:4a:9f:47:f4:29:6e:4e:
bb:09:20:ba:bc:e8:bd:6a:11:49:63:da:55:eb:79:
62:57:de:f9:32:28:34:78:3c:b1:4b:dd:dd:53:9c:
b2:af:a3:b5:06:ec:91:26:19:49:f4:9c:2d:0d:f0:
bb:c7:1e:9b:89:47:3e:fd:46:c3:84:03:9a:59:4b:
e6:c7:39:27:2c:c9:5f:dd:e9:5e:da:c7:b7:d5:a5:
ca:0e:13:86:0e:b5:19:78:6d:c2:64:63:47:37:81:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:04:CD:4A:6B:5D:35:BF:C5:31:66:10:58:67:A9:6B:F5:71:A0
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/SIYEzUprXTW_xTFmEFhnqWv1caA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.43.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d5:01:b5:f3:0c:f8:98:40:5a:71:31:d0:c6:13:4f:0d:aa:
c2:2b:19:30:1c:6b:49:44:f3:e4:70:89:a0:85:ff:31:66:ae:
dc:84:fb:44:2e:43:ab:2f:15:c5:50:51:3c:64:04:0c:a9:11:
fa:2c:9b:85:80:00:38:b9:90:b3:d7:95:15:ef:52:e2:75:71:
32:28:05:21:b0:98:2c:66:3c:3a:ca:32:64:69:0c:3f:ca:76:
f6:24:6a:3c:73:ed:ba:3b:ba:94:04:d6:10:e5:9c:b3:68:a8:
15:0c:3c:48:92:65:0b:6b:c5:fa:ef:9b:3a:2c:9d:a8:7d:a9:
38:60:62:78:a2:16:d3:79:24:30:1e:27:92:68:c2:b4:12:54:
06:19:b9:33:03:93:7d:d7:a1:6a:4b:f3:ea:45:25:0d:95:36:
61:01:16:8c:d3:da:a6:8b:9b:0e:43:1c:66:0f:cf:42:7a:26:
42:6d:ff:e3:94:83:22:4c:84:4d:c2:a2:f2:fe:9c:4d:8d:02:
1d:1f:2a:74:27:36:55:63:e7:89:58:bc:5d:db:fe:ea:d0:02:
98:5b:af:79:b3:63:05:3f:7c:c0:12:81:ba:df:36:88:65:22:
b1:11:83:12:ea:ef:4d:21:ab:f2:79:49:5c:88:80:6f:e4:99:
d1:05:3c:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnMXfnquwamNa7jE91zlAajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjMwODA2MTk0MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODg2MDRjZDRhNmI1ZDM1YmZjNTMxNjYxMDU4NjdhOTZiZjU3MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDRcjQZzb/AUQhuxdx2P0XmV8T4D
PM0mKI5nDhZNJLfLlWefq5TJOilxw9iZSpPD90WOKmpKHslNCS1uWTvaebXB6V4m
ytAP0eCTzVQOoRdSYCNxXpxHrVRZVqXXEjkirSRJd6/5wVLBrAW4Nb76TNP3gVCg
jfCPkQigeUfO+qIRQZVwoVjbLFDBQafUJjVjqCuFDO1qlOJ3eTozY0qfR/Qpbk67
CSC6vOi9ahFJY9pV63liV975Mig0eDyxS93dU5yyr6O1BuyRJhlJ9JwtDfC7xx6b
iUc+/UbDhAOaWUvmxzknLMlf3ele2se31aXKDhOGDrUZeG3CZGNHN4ELBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiGBM1Ka101v8UxZhBYZ6lr9XGgMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvU0lZRXpVcHJYVFdfeFRGbUVGaG5xV3YxY2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2wrMA0G
CSqGSIb3DQEBCwUAA4IBAQAj1QG18wz4mEBacTHQxhNPDarCKxkwHGtJRPPkcImg
hf8xZq7chPtELkOrLxXFUFE8ZAQMqRH6LJuFgAA4uZCz15UV71LidXEyKAUhsJgs
Zjw6yjJkaQw/ynb2JGo8c+26O7qUBNYQ5ZyzaKgVDDxIkmULa8X675s6LJ2ofak4
YGJ4ohbTeSQwHieSaMK0ElQGGbkzA5N916FqS/PqRSUNlTZhARaM09qmi5sOQxxm
D89CeiZCbf/jlIMiTIRNwqLy/pxNjQIdHyp0JzZVY+eJWLxd2/7q0AKYW695s2MF
P3zAEoG63zaIZSKxEYMS6u9NIavyeUlciIBv5JnRBTz1
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:29 2024 by rpki-client on console-ams.rpki-client.org