Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/D-PitEPbJoLYum20V6XJ2vgWVSI.roa
File: D-PitEPbJoLYum20V6XJ2vgWVSI.roa (raw, json)
Hash identifier: CjBYr0ro/5fFFUMrbgGMtVxoqFWm/7wrLSpLb9fVFbE=
Subject key identifier: 0F:E3:E2:B4:43:DB:26:82:D8:BA:6D:B4:57:A5:C9:DA:F8:16:55:22
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 01856FA6D94274A854BF9149FE2E0EDBA3CA
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/D-PitEPbJoLYum20V6XJ2vgWVSI.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49843
IP address blocks: 91.213.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d9:42:74:a8:54:bf:91:49:fe:2e:0e:db:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fe3e2b443db2682d8ba6db457a5c9daf8165522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:f2:11:42:10:9f:31:e7:06:67:6d:e8:9c:
2c:bf:0a:aa:15:3a:18:bc:ed:88:82:26:f8:8b:cf:
fc:0d:18:18:f8:30:38:68:cd:4d:5f:99:2e:47:f8:
93:15:12:8e:4e:65:90:cd:07:e7:cf:79:a9:24:02:
8e:aa:2a:c7:cc:e9:39:4b:ca:d8:2d:a0:ad:23:f9:
34:aa:17:e9:43:89:76:5e:a0:21:17:a6:38:b7:4c:
25:ee:98:bc:40:d2:49:4e:12:66:89:9b:63:42:8e:
96:5f:84:76:1b:3e:dc:a1:1e:d0:27:66:2b:2b:03:
63:47:bc:d9:a4:c8:d4:59:ad:70:f8:40:b7:cf:a1:
d4:eb:35:5b:ce:e9:18:9e:65:f0:8c:17:b4:8a:f1:
e9:46:4d:e9:fc:44:dc:e4:65:33:d3:4a:a6:58:78:
41:3e:fe:61:96:88:67:41:eb:b5:05:17:48:71:be:
20:f2:c6:d4:c3:1b:e9:ed:58:fa:fe:50:26:bf:e4:
cd:e5:e3:d1:65:b5:d0:4d:b3:3c:51:ea:cc:ae:68:
3b:eb:82:35:22:f4:a7:37:74:78:5f:02:eb:18:cc:
17:1e:ed:b7:c1:a0:07:49:a3:a2:0f:91:3f:ee:d8:
be:88:a7:67:77:a5:14:e4:d5:6f:77:e7:8d:94:ff:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:E2:B4:43:DB:26:82:D8:BA:6D:B4:57:A5:C9:DA:F8:16:55:22
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/D-PitEPbJoLYum20V6XJ2vgWVSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1d:ad:49:be:50:2d:66:eb:ec:c8:ad:01:fc:9a:35:f2:b3:
9f:7a:b6:13:76:12:97:39:a6:2a:ad:46:c7:dd:a3:bd:29:4a:
31:91:e6:18:5a:ce:5c:e8:9f:a1:08:eb:7e:b4:0a:53:b7:08:
20:68:5a:44:db:b3:3b:bb:61:78:a8:98:d7:49:71:a7:b5:28:
9d:f7:36:21:3b:07:15:da:16:6c:b5:d1:b3:c7:9b:d7:5a:81:
69:99:5d:89:ee:fe:07:06:cf:db:59:ea:0b:f4:ae:f4:b0:b3:
90:b7:ca:6e:0b:9f:3d:a7:69:a9:4d:af:7a:8f:76:69:28:a9:
a2:b0:59:e6:1a:de:83:38:da:13:89:e3:fe:33:a2:68:c2:48:
40:40:7d:4d:e7:8f:2b:c1:7f:61:f3:ce:25:b3:b0:b7:ed:c9:
da:ec:ab:b1:fd:13:d3:6d:df:0c:61:df:2b:07:17:65:7e:57:
9a:d1:69:6a:af:8e:8a:2f:31:10:2b:25:59:cd:8c:19:69:f0:
b7:a0:17:03:af:71:f7:71:8f:f9:9e:39:94:9c:11:5d:88:4a:
67:21:c8:27:05:f9:29:76:d2:0b:da:78:4d:2a:3e:cf:c1:e5:
72:bb:17:6a:21:ec:ff:2a:43:8a:3e:12:00:0e:4e:67:db:4a:
cb:3d:14:1a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVvptlCdKhUv5FJ/i4O26PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmE2YTIwMzJmOTZkNzAyMzcyMjIzOWM5ZmE1ZWRkNTU5
NmY4NjMwHhcNMjMwMTAxMjMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmUzZTJiNDQzZGIyNjgyZDhiYTZkYjQ1N2E1YzlkYWY4MTY1NTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotXyEUIQnzHnBmdt6JwsvwqqFToY
vO2Igib4i8/8DRgY+DA4aM1NX5kuR/iTFRKOTmWQzQfnz3mpJAKOqirHzOk5S8rY
LaCtI/k0qhfpQ4l2XqAhF6Y4t0wl7pi8QNJJThJmiZtjQo6WX4R2Gz7coR7QJ2Yr
KwNjR7zZpMjUWa1w+EC3z6HU6zVbzukYnmXwjBe0ivHpRk3p/ETc5GUz00qmWHhB
Pv5hlohnQeu1BRdIcb4g8sbUwxvp7Vj6/lAmv+TN5ePRZbXQTbM8UerMrmg764I1
IvSnN3R4XwLrGMwXHu23waAHSaOiD5E/7ti+iKdnd6UU5NVvd+eNlP9fGQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFA/j4rRD2yaC2LpttFelydr4FlUiMB8GA1UdIwQY
MBaAFPlqaiAy+W1wI3IiOcn6Xt1VlvhjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XcHFJREw1YlhBamNpSTV5ZnBlM1ZXVy1HTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04Yjdh
LTEzZmY2YTBhZDQ0MS8xL0QtUGl0RVBiSm9MWXVtMjBWNlhKMnZnV1ZTSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04YjdhLTEzZmY2YTBhZDQ0
MS8xLzEtV3BxSURMNWJYQWpjaUk1eWZwZTNWV1ctR00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1fUw
DQYJKoZIhvcNAQELBQADggEBALIdrUm+UC1m6+zIrQH8mjXys596thN2Epc5piqt
Rsfdo70pSjGR5hhazlzon6EI6360ClO3CCBoWkTbszu7YXiomNdJcae1KJ33NiE7
BxXaFmy10bPHm9dagWmZXYnu/gcGz9tZ6gv0rvSws5C3ym4Lnz2naalNr3qPdmko
qaKwWeYa3oM42hOJ4/4zomjCSEBAfU3njyvBf2HzziWzsLftydrsq7H9E9Nt3wxh
3ysHF2V+V5rRaWqvjoovMRArJVnNjBlp8LegFwOvcfdxj/meOZScEV2ISmchyCcF
+Sl20gvaeE0qPs/B5XK7F2oh7P8qQ4o+EgAOTmfbSss9FBo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:15 2024 by rpki-client on console-ams.rpki-client.org