Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/gIElRI4te7mxiM6XxvgihJJyDUw.roa
File: gIElRI4te7mxiM6XxvgihJJyDUw.roa (raw, json)
Hash identifier: lXuxGlElsMON1luly0z53HpBdpjttaXcFa9sFf5CNZ8=
Subject key identifier: 80:81:25:44:8E:2D:7B:B9:B1:88:CE:97:C6:F8:22:84:92:72:0D:4C
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 0188E30F067E3E9A2C521E4D67A8567ADD54
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/gIElRI4te7mxiM6XxvgihJJyDUw.roa
Signing time: Thu 22 Jun 2023 12:23:12 +0000
ROA not before: Thu 22 Jun 2023 12:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50272
IP address blocks: 91.235.60.0/22 maxlen: 22
195.238.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 11:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:0f:06:7e:3e:9a:2c:52:1e:4d:67:a8:56:7a:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Jun 22 12:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=808125448e2d7bb9b188ce97c6f8228492720d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:61:3e:fd:a1:f0:fc:8b:78:26:f1:83:6b:
7f:fd:3c:ec:57:c6:dd:01:4c:ad:ba:64:83:71:0a:
2e:3c:05:35:99:b7:40:f9:46:e8:33:74:62:c2:e0:
97:19:1f:ea:b6:da:6f:50:80:c0:25:90:0e:af:30:
cf:fa:5d:fb:e2:25:7f:4a:43:42:6b:34:df:ae:ee:
b9:22:7c:89:a0:1d:0e:80:1d:ee:6a:4a:b4:6a:fd:
e1:54:47:c8:7c:54:e9:d6:b7:72:3c:9b:e3:a8:99:
0f:73:ec:6d:d0:b6:5e:17:24:4d:bd:cf:6d:d4:aa:
5f:e9:ce:40:21:e8:0d:fc:6f:5e:d6:02:37:90:ce:
22:f5:7e:ac:6d:ec:50:17:43:ca:67:70:75:bc:6c:
eb:c1:43:a7:4a:67:e9:d7:55:07:96:f3:e0:0e:d7:
00:94:83:75:f4:38:75:05:33:c6:0f:2a:a9:2d:84:
f1:fd:bd:84:f4:92:39:9e:22:a1:81:85:1b:03:95:
ae:76:79:56:1c:52:4f:14:ae:d6:25:31:1d:76:e4:
ab:c1:21:55:ed:63:7b:a5:d3:a0:5b:5b:d6:2f:5a:
ce:d4:f7:f3:3b:42:b5:d0:cc:93:1a:16:dc:0b:29:
c5:ff:6f:f8:7d:b9:89:70:08:14:14:0c:37:6a:6a:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:81:25:44:8E:2D:7B:B9:B1:88:CE:97:C6:F8:22:84:92:72:0D:4C
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/gIElRI4te7mxiM6XxvgihJJyDUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.60.0/22
195.238.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a9:27:85:33:4f:f2:b5:c5:38:e5:f6:7f:f2:7e:79:3b:c7:
b7:e1:c8:8d:34:25:be:8c:be:14:4f:14:51:8b:12:3a:d2:41:
66:08:94:81:bf:dd:91:4e:45:7f:dd:03:3b:7f:e4:a3:5e:a7:
62:49:d1:84:81:96:d5:44:fe:39:6b:27:c1:58:29:e5:78:b4:
3c:c6:63:8b:4a:11:00:94:52:7f:47:35:ed:23:18:68:97:1e:
2f:3f:b2:2f:73:bc:b7:6c:f4:28:b0:b1:4b:52:78:99:5b:00:
ad:1f:53:a4:e6:8e:fe:50:0f:08:5c:ba:fe:23:c6:ef:04:2f:
fd:3c:da:7a:09:17:fe:c5:4c:e5:20:80:58:ba:d4:0a:3a:2b:
53:a9:0e:b5:39:ea:6b:5d:63:ea:63:0a:e6:9d:c0:ea:27:28:
f8:0c:c3:05:c9:ea:95:f0:0d:34:69:d5:12:d3:6a:8f:43:83:
97:a3:e8:d8:5d:a6:56:9f:4a:58:33:02:38:47:81:7f:73:49:
d5:0e:22:7a:d0:55:f7:17:a3:94:d5:32:9c:44:eb:af:f3:72:
df:d5:a2:86:38:36:11:d3:4a:81:8a:1b:0c:3d:ef:bd:e5:26:
2d:98:f1:44:0d:db:78:cb:d9:6c:40:3c:e9:d4:51:c6:d3:20:
15:a5:75:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjjDwZ+PposUh5NZ6hWet1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx
Nzg3ZTEwHhcNMjMwNjIyMTIyMzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDgxMjU0NDhlMmQ3YmI5YjE4OGNlOTdjNmY4MjI4NDkyNzIwZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCNhPv2h8PyLeCbxg2t//TzsV8bd
AUytumSDcQouPAU1mbdA+UboM3RiwuCXGR/qttpvUIDAJZAOrzDP+l374iV/SkNC
azTfru65InyJoB0OgB3uakq0av3hVEfIfFTp1rdyPJvjqJkPc+xt0LZeFyRNvc9t
1Kpf6c5AIegN/G9e1gI3kM4i9X6sbexQF0PKZ3B1vGzrwUOnSmfp11UHlvPgDtcA
lIN19Dh1BTPGDyqpLYTx/b2E9JI5niKhgYUbA5WudnlWHFJPFK7WJTEdduSrwSFV
7WN7pdOgW1vWL1rO1PfzO0K10MyTGhbcCynF/2/4fbmJcAgUFAw3amo5jwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFICBJUSOLXu5sYjOl8b4IoSScg1MMB8GA1UdIwQY
MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt
YzVjZjRiM2IxY2E2LzEvZ0lFbFJJNHRlN214aU02WHh2Z2loSkp5RFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2
LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+s8AwQA
w+7qMA0GCSqGSIb3DQEBCwUAA4IBAQCfqSeFM0/ytcU45fZ/8n55O8e34ciNNCW+
jL4UTxRRixI60kFmCJSBv92RTkV/3QM7f+SjXqdiSdGEgZbVRP45ayfBWCnleLQ8
xmOLShEAlFJ/RzXtIxholx4vP7Ivc7y3bPQosLFLUniZWwCtH1Ok5o7+UA8IXLr+
I8bvBC/9PNp6CRf+xUzlIIBYutQKOitTqQ61OeprXWPqYwrmncDqJyj4DMMFyeqV
8A00adUS02qPQ4OXo+jYXaZWn0pYMwI4R4F/c0nVDiJ60FX3F6OU1TKcROuv83Lf
1aKGODYR00qBihsMPe+95SYtmPFEDdt4y9lsQDzp1FHG0yAVpXWP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org