Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/ppX2HiRLUumpH5HLWM1pGlEqiBM.roa
File: ppX2HiRLUumpH5HLWM1pGlEqiBM.roa (raw, json)
Hash identifier: hUBTJdL1Z+/9hgISXCWptiBUS0HFKOCYIuw2AsWEP8c=
Subject key identifier: A6:95:F6:1E:24:4B:52:E9:A9:1F:91:CB:58:CD:69:1A:51:2A:88:13
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 01857270FD90A24DBFBDF153005CA6614316
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/ppX2HiRLUumpH5HLWM1pGlEqiBM.roa
Signing time: Mon 02 Jan 2023 12:24:45 +0000
ROA not before: Mon 02 Jan 2023 12:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198732
IP address blocks: 91.238.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:fd:90:a2:4d:bf:bd:f1:53:00:5c:a6:61:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Jan 2 12:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a695f61e244b52e9a91f91cb58cd691a512a8813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:25:87:cf:b9:93:67:a3:ac:86:70:8a:c3:
50:f9:ce:4f:dc:27:18:ed:e1:67:be:66:08:5e:d3:
8d:2f:fb:93:c8:3c:28:d0:16:d1:07:b3:17:2c:cc:
05:dd:eb:7a:b7:99:66:2e:7d:13:d8:fd:d5:69:c6:
61:f4:3d:01:27:07:bd:74:3c:8a:65:25:b7:99:9e:
2d:83:75:d6:b9:ff:53:d2:c3:95:fe:2f:23:d9:d8:
7e:95:92:39:14:4b:21:5d:b8:25:b7:8a:36:fa:1f:
3c:46:81:3a:fb:78:85:8b:fa:37:05:dd:ab:30:b8:
71:7a:79:0a:44:9d:02:59:4b:01:b2:75:49:4a:02:
c8:6a:97:86:83:63:d4:44:24:62:8c:56:c7:4a:eb:
65:58:67:70:e5:18:21:fb:6c:44:ed:24:c7:9a:7f:
8b:1d:7d:24:0f:8e:aa:9b:b6:e5:9c:fd:27:b9:5f:
78:45:4e:3b:b5:d5:17:a3:80:e3:26:31:94:64:43:
2a:57:5d:a8:f2:9a:c8:20:8e:d4:3d:d3:0b:80:a7:
c9:82:61:07:31:51:43:37:6d:40:16:04:0e:1e:b3:
df:8f:d9:df:9d:78:3e:c0:10:f2:90:54:58:cb:e6:
d8:e6:a0:c0:21:af:ba:d8:37:02:0d:9f:51:57:a7:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:F6:1E:24:4B:52:E9:A9:1F:91:CB:58:CD:69:1A:51:2A:88:13
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/ppX2HiRLUumpH5HLWM1pGlEqiBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.220.0/24
Signature Algorithm: sha256WithRSAEncryption
49:40:c9:a1:4c:a7:a0:2a:37:62:b3:ec:64:f1:f8:18:15:b9:
51:ed:a0:ec:9a:34:0f:67:7e:53:06:47:33:ce:5a:2b:c5:f1:
93:5a:1e:2c:13:99:03:52:22:25:f4:f4:a6:01:3e:42:f4:61:
88:9e:5b:57:f7:75:26:6d:52:1e:b1:03:6f:b2:72:1a:9f:f5:
e3:fd:75:4a:a6:51:0c:c3:9b:90:4d:0c:3b:c8:01:6d:65:e3:
1c:b5:18:86:a3:a8:1f:82:a6:b3:89:5c:b8:c2:12:55:ea:d6:
a8:c6:ea:99:93:75:20:b2:11:ae:33:7d:06:f8:ab:88:dd:ef:
b7:ca:c1:af:07:71:cb:e2:dc:73:ac:49:7e:fc:01:85:dc:7f:
27:07:d0:dc:ec:11:ca:50:f9:ca:3b:2b:25:47:1a:a1:90:4d:
8b:9d:e2:da:8a:02:c8:53:b2:e6:de:c9:21:2e:90:87:13:8a:
50:ca:8b:04:36:11:94:59:99:9e:bb:89:25:bf:a7:48:a6:ee:
f8:5c:53:e9:ca:0e:b1:aa:d7:70:a3:cd:e4:47:89:8a:d3:cb:
28:35:73:bc:5f:e3:42:58:51:2b:d6:42:9f:0f:04:48:22:01:
e8:88:db:58:76:45:f3:c5:a6:9c:32:16:f3:56:88:b6:f5:7a:
f4:d0:f4:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycP2Qok2/vfFTAFymYUMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzA0MzljNzk1NTUxMTAyZDZmMWU0Y2ViNmQxYzUyZmJj
NWVhM2YwHhcNMjMwMTAyMTIyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjk1ZjYxZTI0NGI1MmU5YTkxZjkxY2I1OGNkNjkxYTUxMmE4ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwlh8+5k2ejrIZwisNQ+c5P3CcY
7eFnvmYIXtONL/uTyDwo0BbRB7MXLMwF3et6t5lmLn0T2P3VacZh9D0BJwe9dDyK
ZSW3mZ4tg3XWuf9T0sOV/i8j2dh+lZI5FEshXbglt4o2+h88RoE6+3iFi/o3Bd2r
MLhxenkKRJ0CWUsBsnVJSgLIapeGg2PURCRijFbHSutlWGdw5Rgh+2xE7STHmn+L
HX0kD46qm7blnP0nuV94RU47tdUXo4DjJjGUZEMqV12o8prIII7UPdMLgKfJgmEH
MVFDN21AFgQOHrPfj9nfnXg+wBDykFRYy+bY5qDAIa+62DcCDZ9RV6fogQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKaV9h4kS1LpqR+Ry1jNaRpRKogTMB8GA1UdIwQY
MBaAFLTAQ5x5VVEQLW8eTOttHFL7xeo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjct
ZThlZGU1YTJmODc1LzEvcHBYMkhpUkxVdW1wSDVITFdNMXBHbEVxaUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjctZThlZGU1YTJmODc1
LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+7cMA0G
CSqGSIb3DQEBCwUAA4IBAQBJQMmhTKegKjdis+xk8fgYFblR7aDsmjQPZ35TBkcz
zlorxfGTWh4sE5kDUiIl9PSmAT5C9GGInltX93UmbVIesQNvsnIan/Xj/XVKplEM
w5uQTQw7yAFtZeMctRiGo6gfgqaziVy4whJV6taoxuqZk3UgshGuM30G+KuI3e+3
ysGvB3HL4txzrEl+/AGF3H8nB9Dc7BHKUPnKOyslRxqhkE2LneLaigLIU7Lm3skh
LpCHE4pQyosENhGUWZmeu4klv6dIpu74XFPpyg6xqtdwo83kR4mK08soNXO8X+NC
WFEr1kKfDwRIIgHoiNtYdkXzxaacMhbzVoi29Xr00PTv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org