Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/g85kp0S01GsajVHo000BJEFfLfY.roa
File: g85kp0S01GsajVHo000BJEFfLfY.roa (raw, json)
Hash identifier: LtB+v4uJooDuqbIlNjbQ7shO17xcQvGQMkAGBp1NwkA=
Subject key identifier: 83:CE:64:A7:44:B4:D4:6B:1A:8D:51:E8:D3:4D:01:24:41:5F:2D:F6
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 0192FCB9DA9E076D53F9A750843F2C0A8664
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/g85kp0S01GsajVHo000BJEFfLfY.roa
Signing time: Tue 05 Nov 2024 14:28:11 +0000
ROA not before: Tue 05 Nov 2024 14:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214280
IP address blocks: 91.196.32.0/24 maxlen: 24
91.196.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 18:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:b9:da:9e:07:6d:53:f9:a7:50:84:3f:2c:0a:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Nov 5 14:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83ce64a744b4d46b1a8d51e8d34d0124415f2df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:d0:86:4c:f1:f9:28:cd:3c:b5:fc:8d:96:
24:3f:0e:ad:98:16:70:4f:02:b4:ec:46:12:d1:33:
c6:59:8d:6b:4a:6d:93:a2:35:01:0f:83:37:65:51:
8a:f6:81:86:e1:87:3a:a9:9b:73:36:b0:a7:b8:68:
ad:50:80:64:21:b1:0b:c4:0e:1a:e2:84:45:40:0c:
d6:aa:5a:8b:09:1a:82:2d:39:a3:65:c9:7f:f5:3f:
06:18:40:b5:db:f1:52:8a:66:72:9c:d6:da:f8:8a:
0e:1b:ea:2b:91:77:33:91:0b:8f:f6:18:5b:d1:35:
a8:d0:e5:32:91:3d:99:a4:39:99:56:1e:f4:eb:25:
be:86:69:fd:06:54:ec:c3:54:07:2e:37:2f:bd:76:
dd:94:8f:1f:b7:60:5d:4e:91:a3:87:2b:d2:12:98:
5d:ac:61:0c:a3:00:ff:b9:bb:d6:18:3f:d8:79:55:
c6:72:1f:9f:83:1b:08:22:63:ed:3e:57:41:74:ba:
fb:9c:d0:48:76:26:26:63:69:8e:a3:5e:84:d3:6c:
c5:65:e1:b2:a5:0d:ff:dc:c8:b7:2a:c7:ed:44:90:
08:11:ef:04:86:e6:22:5e:fc:7a:46:d0:1f:cb:b3:
17:c4:5e:75:17:69:82:85:c9:d1:bc:ea:e3:67:88:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:64:A7:44:B4:D4:6B:1A:8D:51:E8:D3:4D:01:24:41:5F:2D:F6
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/g85kp0S01GsajVHo000BJEFfLfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/23
Signature Algorithm: sha256WithRSAEncryption
26:c8:dd:a1:8f:bf:fd:8d:bf:a0:0a:e9:aa:03:cd:af:f3:19:
cd:d5:d9:2e:d6:9f:03:15:d4:40:f9:7a:b4:97:42:79:09:3a:
e1:d2:77:76:e2:d3:ae:e1:f6:42:8a:d8:f0:c3:da:31:c4:ad:
42:8f:70:69:86:bd:56:9d:76:2e:2f:f3:d4:fe:f2:c9:f4:67:
f0:5e:06:68:6e:db:ee:4f:12:32:3d:ba:05:73:ef:31:74:5d:
64:fb:ca:c8:f1:1e:2b:83:2f:24:97:0d:78:43:7d:59:8f:11:
5a:94:b8:81:dc:73:d3:43:0c:35:9b:2c:5e:66:ad:15:db:64:
9e:6d:cb:5e:72:a9:7a:f7:46:f0:26:18:f7:d8:6b:f1:f1:86:
81:07:ac:31:f7:37:a7:ad:24:30:24:91:b2:66:b2:d6:a8:f8:
e1:82:fc:4d:1a:c3:03:63:91:22:01:e2:94:64:c2:e8:40:17:
c5:a1:14:f8:53:0a:f5:1e:ad:84:a4:33:12:bd:7c:98:f1:12:
cc:e9:c7:f5:d1:5d:e4:dd:dd:75:54:54:a6:c0:20:8a:b5:00:
df:7b:77:cf:ee:49:8d:6e:f5:53:e3:7b:01:db:35:a0:4c:ce:
d2:f4:b8:cf:5e:66:ea:41:2d:66:5c:c9:41:31:e4:6d:fa:d8:
2d:97:82:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZL8udqeB21T+adQhD8sCoZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjQxMTA1MTQyODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2NlNjRhNzQ0YjRkNDZiMWE4ZDUxZThkMzRkMDEyNDQxNWYyZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnszQhkzx+SjNPLX8jZYkPw6tmBZw
TwK07EYS0TPGWY1rSm2TojUBD4M3ZVGK9oGG4Yc6qZtzNrCnuGitUIBkIbELxA4a
4oRFQAzWqlqLCRqCLTmjZcl/9T8GGEC12/FSimZynNba+IoOG+orkXczkQuP9hhb
0TWo0OUykT2ZpDmZVh706yW+hmn9BlTsw1QHLjcvvXbdlI8ft2BdTpGjhyvSEphd
rGEMowD/ubvWGD/YeVXGch+fgxsIImPtPldBdLr7nNBIdiYmY2mOo16E02zFZeGy
pQ3/3Mi3KsftRJAIEe8EhuYiXvx6RtAfy7MXxF51F2mChcnRvOrjZ4gL5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIPOZKdEtNRrGo1R6NNNASRBXy32MB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvZzg1a3AwUzAxR3NhalZIbzAwMEJKRUZmTGZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8QgMA0G
CSqGSIb3DQEBCwUAA4IBAQAmyN2hj7/9jb+gCumqA82v8xnN1dku1p8DFdRA+Xq0
l0J5CTrh0nd24tOu4fZCitjww9oxxK1Cj3Bphr1WnXYuL/PU/vLJ9GfwXgZobtvu
TxIyPboFc+8xdF1k+8rI8R4rgy8klw14Q31ZjxFalLiB3HPTQww1myxeZq0V22Se
bctecql690bwJhj32Gvx8YaBB6wx9zenrSQwJJGyZrLWqPjhgvxNGsMDY5EiAeKU
ZMLoQBfFoRT4Uwr1Hq2EpDMSvXyY8RLM6cf10V3k3d11VFSmwCCKtQDfe3fP7kmN
bvVT43sB2zWgTM7S9LjPXmbqQS1mXMlBMeRt+tgtl4LQ
-----END CERTIFICATE-----
Generated at Tue Nov 5 21:31:32 2024 by rpki-client on console-ams.rpki-client.org