Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/fMZbjusb2zp-6VZfUq6IJxS2JT0.roa
File: fMZbjusb2zp-6VZfUq6IJxS2JT0.roa (raw, json)
Hash identifier: MsqEeFCNMync66jJTjVPwHj5+juEO/wLkiX5VXCawD8=
Subject key identifier: 7C:C6:5B:8E:EB:1B:DB:3A:7E:E9:56:5F:52:AE:88:27:14:B6:25:3D
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 01856D0A9318ACA2EF9DFEFA1433AFC3DA9E
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/fMZbjusb2zp-6VZfUq6IJxS2JT0.roa
Signing time: Sun 01 Jan 2023 11:14:47 +0000
ROA not before: Sun 01 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207199
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:93:18:ac:a2:ef:9d:fe:fa:14:33:af:c3:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jan 1 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc65b8eeb1bdb3a7ee9565f52ae882714b6253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:02:09:73:08:bd:19:a4:a6:8d:7f:b3:5c:
33:f5:cb:98:49:30:e1:b8:c5:3b:3d:fc:ac:9d:66:
1b:84:06:31:3d:88:8b:c0:84:e9:bc:73:5b:4e:6c:
c2:1a:b0:f2:d8:ec:17:04:6f:1f:0b:9b:8c:1d:68:
29:62:b0:a8:fc:6d:6d:a5:0c:b4:83:aa:79:78:05:
2a:6e:4b:94:15:60:19:01:5c:8b:13:3e:3e:bd:80:
ff:e0:f0:2c:2d:c7:40:90:db:e7:59:2a:7c:1c:ae:
37:75:7f:f3:dd:90:43:b6:01:33:10:58:f0:e8:e0:
ad:5a:8d:d4:18:96:56:59:53:81:cb:1f:6e:79:83:
86:90:b5:59:d1:85:70:2d:be:80:96:b7:7c:fb:10:
5b:4e:37:a9:0b:a4:22:e3:b1:47:2e:92:38:d0:eb:
6e:50:06:88:59:19:4b:e2:7f:c2:e1:8a:0e:8d:4f:
b8:d5:6d:3d:3c:f7:d0:ab:55:5b:33:44:65:32:1a:
a1:d3:dd:53:f8:26:ac:e3:02:3a:91:7e:05:7e:ef:
f1:0a:cc:d2:c6:dd:6b:60:ec:34:91:3f:63:38:8c:
8b:47:a2:c0:e2:79:1f:a1:e6:5a:40:64:1f:61:a9:
0e:56:30:c8:77:e2:45:8d:7e:00:c1:d4:3c:c1:eb:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:5B:8E:EB:1B:DB:3A:7E:E9:56:5F:52:AE:88:27:14:B6:25:3D
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/fMZbjusb2zp-6VZfUq6IJxS2JT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f3:c9:50:69:09:85:15:30:e9:43:fb:ed:0d:a6:e6:0a:03:
56:65:e7:c2:94:73:cf:9e:95:9c:0b:92:8e:57:82:86:68:3b:
9a:9d:3a:37:b6:68:f6:97:f1:5f:47:46:e9:4b:16:d1:cd:d7:
4d:fb:c5:4c:81:b7:bc:88:9e:53:a0:59:4f:1a:7d:75:f0:b3:
0f:fc:03:b2:48:ae:16:e9:b8:0f:c4:1e:79:b2:f5:00:7b:68:
60:84:94:aa:9f:f1:ae:bc:4d:ab:e4:66:35:ca:2c:bb:70:c0:
9e:84:af:08:dc:e5:04:f6:02:89:0b:30:4e:5a:b9:75:8c:a0:
3f:b1:f5:21:53:87:73:94:2b:12:cc:82:ba:84:48:0a:80:e8:
15:12:80:a4:ed:76:59:2d:21:f3:b4:76:01:24:8a:4b:eb:06:
59:67:4a:ed:9a:91:31:65:f0:57:0c:73:fc:25:eb:33:5a:b0:
f7:a0:be:b7:03:7a:d7:01:68:cb:c2:a0:ab:3b:c6:05:29:35:
95:86:a8:14:6e:ec:cf:2d:5d:b5:d0:15:98:0f:50:34:9c:67:
6b:d2:e3:e8:6c:e0:75:ce:bc:2d:66:b3:51:8e:ec:9c:63:28:
5c:2e:65:cf:9e:ac:33:e2:4e:2d:df:ee:91:38:6f:52:67:43:
45:9c:6e:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCpMYrKLvnf76FDOvw9qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5
M2Q1NDUwHhcNMjMwMTAxMTExNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2M2NWI4ZWViMWJkYjNhN2VlOTU2NWY1MmFlODgyNzE0YjYyNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1UCCXMIvRmkpo1/s1wz9cuYSTDh
uMU7PfysnWYbhAYxPYiLwITpvHNbTmzCGrDy2OwXBG8fC5uMHWgpYrCo/G1tpQy0
g6p5eAUqbkuUFWAZAVyLEz4+vYD/4PAsLcdAkNvnWSp8HK43dX/z3ZBDtgEzEFjw
6OCtWo3UGJZWWVOByx9ueYOGkLVZ0YVwLb6Alrd8+xBbTjepC6Qi47FHLpI40Otu
UAaIWRlL4n/C4YoOjU+41W09PPfQq1VbM0RlMhqh091T+Cas4wI6kX4Ffu/xCszS
xt1rYOw0kT9jOIyLR6LA4nkfoeZaQGQfYakOVjDId+JFjX4AwdQ8weuI1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHzGW47rG9s6fulWX1KuiCcUtiU9MB8GA1UdIwQY
MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt
OTM3ZGNmZjUxZTJkLzEvZk1aYmp1c2IyenAtNlZaZlVxNklKeFMySlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk
LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+96MA0G
CSqGSIb3DQEBCwUAA4IBAQA188lQaQmFFTDpQ/vtDabmCgNWZefClHPPnpWcC5KO
V4KGaDuanTo3tmj2l/FfR0bpSxbRzddN+8VMgbe8iJ5ToFlPGn118LMP/AOySK4W
6bgPxB55svUAe2hghJSqn/GuvE2r5GY1yiy7cMCehK8I3OUE9gKJCzBOWrl1jKA/
sfUhU4dzlCsSzIK6hEgKgOgVEoCk7XZZLSHztHYBJIpL6wZZZ0rtmpExZfBXDHP8
JeszWrD3oL63A3rXAWjLwqCrO8YFKTWVhqgUbuzPLV210BWYD1A0nGdr0uPobOB1
zrwtZrNRjuycYyhcLmXPnqwz4k4t3+6ROG9SZ0NFnG75
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:58 2024 by rpki-client on console-ams.rpki-client.org