Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/urzyV8mh-EWQLmNkn-bYnlKHRjw.roa
File: urzyV8mh-EWQLmNkn-bYnlKHRjw.roa (raw, json)
Hash identifier: KZOocAtCXoXszix8WqUj03OdbJIrvsEanji3mNg/wA8=
Subject key identifier: BA:BC:F2:57:C9:A1:F8:45:90:2E:63:64:9F:E6:D8:9E:52:87:46:3C
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 01867360A079718E3B077E9CFE888F1F8C31
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/urzyV8mh-EWQLmNkn-bYnlKHRjw.roa
Signing time: Tue 21 Feb 2023 09:49:17 +0000
ROA not before: Tue 21 Feb 2023 09:49:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199894
IP address blocks: 91.187.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:60:a0:79:71:8e:3b:07:7e:9c:fe:88:8f:1f:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Feb 21 09:49:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=babcf257c9a1f845902e63649fe6d89e5287463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:28:db:10:11:62:19:4d:cd:10:97:f0:fb:
ce:b9:05:45:49:68:d0:cc:e2:7a:0e:17:67:f9:92:
55:ad:20:7e:db:ac:6e:06:e4:1f:21:d3:0b:76:b2:
e1:85:68:44:91:1c:7b:96:a4:4e:cf:0b:33:f4:e7:
8d:d5:06:08:b9:07:78:2b:d2:58:8b:cb:af:28:ad:
a6:dc:d0:5c:00:ca:3d:eb:f2:00:5a:19:a8:d3:8d:
84:d3:95:c2:4b:a0:3b:72:91:b5:63:18:e6:ed:ba:
b9:a0:f9:30:31:05:a2:66:4c:84:86:04:7c:d7:73:
e6:1d:8e:2a:e2:35:aa:10:8d:c9:6d:dc:9e:89:11:
48:85:a8:de:a9:14:90:c4:52:b4:dc:e7:18:ad:d3:
16:c8:26:76:ff:70:15:4d:87:a3:dd:96:ae:46:38:
c6:21:29:20:f4:67:4f:11:2e:28:1a:72:57:f8:8f:
6f:04:53:86:93:f6:bb:3b:35:7a:6c:2a:83:8f:23:
01:25:5b:a3:36:5b:95:2b:db:09:65:8d:02:d0:b8:
e3:8d:b3:b7:7f:0b:6c:64:11:e5:0a:60:51:cc:be:
34:ed:f9:9b:db:f7:63:a8:ae:b6:88:01:99:73:7f:
50:39:35:9f:4b:a8:1e:be:2e:80:5c:a1:83:2e:c2:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:F2:57:C9:A1:F8:45:90:2E:63:64:9F:E6:D8:9E:52:87:46:3C
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/urzyV8mh-EWQLmNkn-bYnlKHRjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.226.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:22:e0:d2:ba:f4:0c:5c:ee:b5:48:7a:2f:c3:62:4f:a6:8c:
e7:46:be:d9:ac:af:f8:f2:64:d3:17:e6:9c:9f:15:7c:cf:16:
9d:89:4d:9c:5a:52:64:87:df:1d:6b:ac:c9:97:60:e6:93:d1:
e7:01:d1:85:b7:8f:fe:a1:05:f6:54:d2:11:9b:d6:97:48:8c:
80:db:68:64:43:c3:28:b1:fb:ec:82:1b:76:ea:88:36:f5:a1:
69:7a:67:32:0f:19:ef:6f:a5:a6:38:d6:b8:ae:73:1c:d7:d2:
ea:76:e4:b2:79:72:96:78:43:c2:10:c6:78:f8:19:04:b5:da:
e8:5f:43:93:96:33:b5:12:89:26:f6:2e:3b:01:32:c0:69:91:
ec:2b:83:87:25:ad:36:93:e8:61:a9:1e:b0:0e:7d:8b:c4:ec:
e0:dc:5c:ff:24:43:e6:4e:fe:ac:70:5c:d1:07:f7:26:e8:80:
4b:ca:af:2c:ab:d9:4d:e1:f2:30:0d:ec:09:62:3c:7e:ea:ab:
ae:7b:af:46:00:f4:c8:bb:64:3f:bb:3d:0d:d8:7c:50:d5:cc:
b8:b7:4d:1b:07:ae:f6:d4:5b:bb:f4:ce:e1:96:0b:02:1b:79:
c6:39:a3:97:7d:12:46:f4:9a:ef:8e:93:18:fa:e3:5d:65:a5:
f6:04:32:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZzYKB5cY47B36c/oiPH4wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0
ZDQ4MjIwHhcNMjMwMjIxMDk0OTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWJjZjI1N2M5YTFmODQ1OTAyZTYzNjQ5ZmU2ZDg5ZTUyODc0NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp28o2xARYhlNzRCX8PvOuQVFSWjQ
zOJ6Dhdn+ZJVrSB+26xuBuQfIdMLdrLhhWhEkRx7lqROzwsz9OeN1QYIuQd4K9JY
i8uvKK2m3NBcAMo96/IAWhmo042E05XCS6A7cpG1Yxjm7bq5oPkwMQWiZkyEhgR8
13PmHY4q4jWqEI3JbdyeiRFIhajeqRSQxFK03OcYrdMWyCZ2/3AVTYej3ZauRjjG
ISkg9GdPES4oGnJX+I9vBFOGk/a7OzV6bCqDjyMBJVujNluVK9sJZY0C0LjjjbO3
fwtsZBHlCmBRzL407fmb2/djqK62iAGZc39QOTWfS6gevi6AXKGDLsIdYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLq88lfJofhFkC5jZJ/m2J5Sh0Y8MB8GA1UdIwQY
MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt
NDFlYWExZmRlMTFiLzEvdXJ6eVY4bWgtRVdRTG1Oa24tYllubEtIUmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi
LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7viMA0G
CSqGSIb3DQEBCwUAA4IBAQCbIuDSuvQMXO61SHovw2JPpoznRr7ZrK/48mTTF+ac
nxV8zxadiU2cWlJkh98da6zJl2Dmk9HnAdGFt4/+oQX2VNIRm9aXSIyA22hkQ8Mo
sfvsght26og29aFpemcyDxnvb6WmONa4rnMc19LqduSyeXKWeEPCEMZ4+BkEtdro
X0OTljO1Eokm9i47ATLAaZHsK4OHJa02k+hhqR6wDn2LxOzg3Fz/JEPmTv6scFzR
B/cm6IBLyq8sq9lN4fIwDewJYjx+6quue69GAPTIu2Q/uz0N2HxQ1cy4t00bB672
1Fu79M7hlgsCG3nGOaOXfRJG9JrvjpMY+uNdZaX2BDJB
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:24 2024 by rpki-client on console-fra.rpki-client.org