Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/7AEPBAlo2PRM-0hx8OQl1jIYyx4.roa
File: 7AEPBAlo2PRM-0hx8OQl1jIYyx4.roa (raw, json)
Hash identifier: HjX7fIMB1FyzGVsdBf55+jygfCFBANOzqOtcDTDAjv0=
Subject key identifier: EC:01:0F:04:09:68:D8:F4:4C:FB:48:71:F0:E4:25:D6:32:18:CB:1E
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 01856BEEC8AA576FFDDD8E065FD990FB5E46
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/7AEPBAlo2PRM-0hx8OQl1jIYyx4.roa
Signing time: Sun 01 Jan 2023 06:04:49 +0000
ROA not before: Sun 01 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20900
IP address blocks: 91.231.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c8:aa:57:6f:fd:dd:8e:06:5f:d9:90:fb:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Jan 1 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec010f040968d8f44cfb4871f0e425d63218cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:90:e7:22:03:13:ac:ed:de:7e:88:ed:e7:
60:79:99:b6:c3:37:b5:67:e9:9d:af:ed:91:61:c8:
f1:89:33:88:00:d4:53:43:0e:0c:ff:81:63:11:1a:
83:98:39:6d:53:d8:45:d4:6e:2c:84:8a:62:16:be:
8d:58:f6:82:fe:61:58:62:da:04:0d:88:62:e3:ca:
b3:14:ae:c3:3a:e0:47:ab:3f:63:4f:1f:79:62:46:
d7:92:b0:66:ec:73:64:b2:57:3b:ad:71:b2:34:b8:
0a:e6:54:d3:73:5e:82:e7:21:0d:cd:bb:2b:eb:98:
3b:1a:6f:37:bd:53:27:41:0d:ed:5e:17:53:af:46:
24:ac:82:4b:8a:17:a6:ee:22:ce:b7:d4:be:75:f5:
9d:3c:90:cd:82:83:e2:24:af:bd:02:e8:bd:4d:1d:
9a:03:aa:bf:cb:30:9e:f3:4a:95:88:47:f9:a1:c3:
0e:25:73:08:e8:fa:a2:54:b4:2e:2a:b6:84:76:70:
de:cf:94:ae:86:b3:96:ea:a6:95:96:87:0d:b9:88:
dd:d9:1c:b1:fd:71:1d:3a:d1:e3:69:d0:38:02:c6:
d3:6e:4e:10:23:75:c5:8f:7f:71:b3:c9:af:5d:e3:
9b:f2:58:71:ad:2f:b2:22:97:97:1e:58:17:a9:20:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:0F:04:09:68:D8:F4:4C:FB:48:71:F0:E4:25:D6:32:18:CB:1E
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/7AEPBAlo2PRM-0hx8OQl1jIYyx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c2:fb:23:03:e1:46:d8:55:33:fc:ec:e6:ae:71:b4:cf:11:
f0:31:a5:c2:0c:df:e8:67:8d:04:2b:03:bc:cc:94:6b:86:e7:
43:c1:4e:53:8e:f0:94:19:99:f3:41:1a:26:04:1c:46:4d:38:
63:68:54:6f:62:c6:e9:58:c0:aa:da:cb:fb:c9:02:5e:04:7a:
41:17:b1:3d:e5:f6:f1:21:36:d5:59:c2:a0:d1:1b:0b:5d:62:
98:aa:b6:7a:60:21:2a:d2:c3:fc:2e:af:7f:b2:ba:8b:d1:d2:
9c:e4:ce:c4:75:92:b1:4d:3e:1c:4d:f2:06:df:d1:b5:6c:49:
ac:3e:f4:91:ca:ea:fe:93:c3:1a:f2:06:0a:95:97:18:8e:6d:
c4:45:40:fe:1b:bf:90:73:1d:14:9a:7d:e0:e4:ba:59:2e:7c:
5a:d9:b6:87:de:02:de:83:71:95:d7:85:8e:30:3d:7b:fb:f4:
47:84:70:6b:26:ec:32:ed:bc:73:1c:dd:0e:d3:e3:91:20:35:
ff:0e:e6:f8:0f:d3:ac:70:62:22:99:67:ad:f3:00:7d:d9:91:
39:4f:79:1b:9d:31:c8:dd:98:b4:10:74:06:29:f6:57:7a:a0:
73:e8:e0:99:2b:18:50:63:49:05:28:64:1a:68:26:fc:31:01:
d1:ad:d9:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7siqV2/93Y4GX9mQ+15GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDI2MDQwNmU4MzdhZTM4MzgwZmNjOGQ5OTJiOTNkMGRl
MWE4M2IwHhcNMjMwMTAxMDYwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzAxMGYwNDA5NjhkOGY0NGNmYjQ4NzFmMGU0MjVkNjMyMThjYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr2Q5yIDE6zt3n6I7edgeZm2wze1
Z+mdr+2RYcjxiTOIANRTQw4M/4FjERqDmDltU9hF1G4shIpiFr6NWPaC/mFYYtoE
DYhi48qzFK7DOuBHqz9jTx95YkbXkrBm7HNkslc7rXGyNLgK5lTTc16C5yENzbsr
65g7Gm83vVMnQQ3tXhdTr0YkrIJLihem7iLOt9S+dfWdPJDNgoPiJK+9Aui9TR2a
A6q/yzCe80qViEf5ocMOJXMI6PqiVLQuKraEdnDez5SuhrOW6qaVlocNuYjd2Ryx
/XEdOtHjadA4AsbTbk4QI3XFj39xs8mvXeOb8lhxrS+yIpeXHlgXqSD1wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwBDwQJaNj0TPtIcfDkJdYyGMseMB8GA1UdIwQY
MBaAFB0CYEBug3rjg4D8yNmSuT0N4ag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzIt
OGMwZmFjYTNjYmQ4LzEvN0FFUEJBbG8yUFJNLTBoeDhPUWwxaklZeXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzItOGMwZmFjYTNjYmQ4
LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+evMA0G
CSqGSIb3DQEBCwUAA4IBAQAawvsjA+FG2FUz/OzmrnG0zxHwMaXCDN/oZ40EKwO8
zJRrhudDwU5TjvCUGZnzQRomBBxGTThjaFRvYsbpWMCq2sv7yQJeBHpBF7E95fbx
ITbVWcKg0RsLXWKYqrZ6YCEq0sP8Lq9/srqL0dKc5M7EdZKxTT4cTfIG39G1bEms
PvSRyur+k8Ma8gYKlZcYjm3ERUD+G7+Qcx0Umn3g5LpZLnxa2baH3gLeg3GV14WO
MD17+/RHhHBrJuwy7bxzHN0O0+ORIDX/Dub4D9OscGIimWet8wB92ZE5T3kbnTHI
3Zi0EHQGKfZXeqBz6OCZKxhQY0kFKGQaaCb8MQHRrdn6
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:45 2024 by rpki-client on console-fra.rpki-client.org