Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/91gCJBBmJLjcVpJYgoOI3dy90Dg.roa
File: 91gCJBBmJLjcVpJYgoOI3dy90Dg.roa (raw, json)
Hash identifier: qoZwyklfMjA5v7bP50ehWqat1dedVYEmaRUkZLUPN8A=
Subject key identifier: F7:58:02:24:10:66:24:B8:DC:56:92:58:82:83:88:DD:DC:BD:D0:38
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018A4ABA6791887A0D8875A05D347E66392A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/91gCJBBmJLjcVpJYgoOI3dy90Dg.roa
Signing time: Thu 31 Aug 2023 08:34:04 +0000
ROA not before: Thu 31 Aug 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 85.122.230.0/24 maxlen: 24
85.122.231.0/24 maxlen: 24
85.122.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:ba:67:91:88:7a:0d:88:75:a0:5d:34:7e:66:39:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 31 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7580224106624b8dc569258828388dddcbdd038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:a8:00:43:94:10:07:a2:d2:ef:ed:8c:b9:
22:e7:7b:0d:8a:01:9a:18:10:a6:d2:33:13:1f:0b:
b8:2d:28:f4:2a:3d:26:cc:15:12:fa:d5:4a:db:79:
b1:f6:de:77:9d:ce:61:17:86:79:22:6a:f1:55:ba:
23:aa:de:9f:9a:19:a9:ac:ef:07:0a:f5:80:f5:1f:
05:94:97:de:8a:b7:04:d4:72:59:7a:18:9d:26:06:
89:08:fa:b2:4f:54:5c:72:00:fc:86:71:49:d9:c4:
4d:66:a7:6e:26:e1:9a:05:67:c8:9a:40:f2:b0:26:
bb:5e:3a:6d:78:2e:1b:c4:1e:ca:9c:41:f1:82:43:
58:20:9a:a9:1e:7a:54:43:a6:43:19:49:7c:a6:ba:
42:7a:f1:95:3b:19:01:d4:9d:a8:e8:e3:8c:2a:12:
42:8c:21:7c:be:af:d6:e4:ca:e8:f8:c3:ee:b6:08:
1e:68:55:87:a0:71:6a:ce:a1:0c:38:07:e6:33:83:
5a:74:07:ff:43:8b:a4:f5:9c:a0:93:f5:0c:75:8e:
a1:f2:83:d7:b9:81:43:f9:b8:b4:ae:93:7d:e3:54:
03:40:e4:38:31:3f:da:e2:ee:69:fe:03:82:53:16:
f3:d6:a1:c7:2f:70:c1:c3:fc:7f:8f:c5:51:02:43:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:02:24:10:66:24:B8:DC:56:92:58:82:83:88:DD:DC:BD:D0:38
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/91gCJBBmJLjcVpJYgoOI3dy90Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.229.0-85.122.231.255
Signature Algorithm: sha256WithRSAEncryption
af:93:a5:a5:b4:88:a4:d6:0f:6a:e5:40:92:76:ba:13:1b:48:
30:5f:97:8e:5a:ae:f1:82:f5:a1:a8:23:94:0c:cc:da:46:6d:
d9:94:1e:8a:ab:8d:0d:32:af:27:14:1a:0c:c2:93:1c:80:64:
43:0c:70:91:b6:c5:2a:68:2f:e8:f5:0a:e5:b0:61:8c:2d:80:
6c:c4:b4:af:36:49:37:36:e5:60:90:a4:8e:8e:18:fe:42:b8:
ca:30:1f:c1:31:96:76:ef:a2:53:5e:81:90:e8:b6:93:d3:22:
0b:42:f6:05:1d:ec:e2:96:12:18:39:a3:46:23:9f:50:2e:d7:
a8:3b:a2:24:61:31:91:64:a1:21:af:2f:3b:14:ac:f5:4b:d1:
4e:68:a0:33:21:04:31:48:33:a4:84:c9:b9:36:e9:36:54:3b:
34:b9:5c:ec:9e:aa:e5:d5:9a:29:8a:d0:7b:5e:cd:90:4a:0e:
68:c6:88:2c:65:0c:0f:c5:01:0e:43:22:eb:2d:c3:e2:96:87:
61:8c:0a:09:88:f3:b9:66:c7:64:27:a9:03:ee:63:e5:f0:76:
36:34:8a:27:94:cf:02:10:c3:bc:5a:22:09:2a:ac:db:b9:7d:
ad:5a:b4:32:b7:2e:39:ef:f2:e3:5c:38:08:40:25:79:5c:c4:
6f:65:93:90
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYpKumeRiHoNiHWgXTR+ZjkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwODMxMDgzNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzU4MDIyNDEwNjYyNGI4ZGM1NjkyNTg4MjgzODhkZGRjYmRkMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt96oAEOUEAei0u/tjLki53sNigGa
GBCm0jMTHwu4LSj0Kj0mzBUS+tVK23mx9t53nc5hF4Z5ImrxVbojqt6fmhmprO8H
CvWA9R8FlJfeircE1HJZehidJgaJCPqyT1RccgD8hnFJ2cRNZqduJuGaBWfImkDy
sCa7XjpteC4bxB7KnEHxgkNYIJqpHnpUQ6ZDGUl8prpCevGVOxkB1J2o6OOMKhJC
jCF8vq/W5Mro+MPutggeaFWHoHFqzqEMOAfmM4NadAf/Q4uk9Zygk/UMdY6h8oPX
uYFD+bi0rpN941QDQOQ4MT/a4u5p/gOCUxbz1qHHL3DBw/x/j8VRAkP+vQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPdYAiQQZiS43FaSWIKDiN3cvdA4MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvOTFnQ0pCQm1KTGpjVnBKWWdvT0kzZHk5MERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVeuUD
BANVeuAwDQYJKoZIhvcNAQELBQADggEBAK+TpaW0iKTWD2rlQJJ2uhMbSDBfl45a
rvGC9aGoI5QMzNpGbdmUHoqrjQ0yrycUGgzCkxyAZEMMcJG2xSpoL+j1CuWwYYwt
gGzEtK82STc25WCQpI6OGP5CuMowH8ExlnbvolNegZDotpPTIgtC9gUd7OKWEhg5
o0Yjn1Au16g7oiRhMZFkoSGvLzsUrPVL0U5ooDMhBDFIM6SEybk26TZUOzS5XOye
quXVmimK0HtezZBKDmjGiCxlDA/FAQ5DIustw+KWh2GMCgmI87lmx2QnqQPuY+Xw
djY0iieUzwIQw7xaIgkqrNu5fa1atDK3Ljnv8uNcOAhAJXlcxG9lk5A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org