Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/RmlPhMXkITIJWtpiz9i82lJm13c.roa
File: RmlPhMXkITIJWtpiz9i82lJm13c.roa (raw, json)
Hash identifier: 3aGxSnqDFh0MyRmYhu9zjG6w5i/vzccYVYtjLN0gJ+k=
Subject key identifier: 46:69:4F:84:C5:E4:21:32:09:5A:DA:62:CF:D8:BC:DA:52:66:D7:77
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 018B2E1B7F2BBFDC0B036A9CC4650B9E21B5
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/RmlPhMXkITIJWtpiz9i82lJm13c.roa
Signing time: Sat 14 Oct 2023 12:13:55 +0000
ROA not before: Sat 14 Oct 2023 12:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58030
IP address blocks: 91.238.0.0/24 maxlen: 24
91.237.254.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Dec 2023 10:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:1b:7f:2b:bf:dc:0b:03:6a:9c:c4:65:0b:9e:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Oct 14 12:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46694f84c5e42132095ada62cfd8bcda5266d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:89:fb:33:ec:06:ca:64:9c:98:de:fe:77:
47:7b:ba:16:ce:6f:9e:bb:03:c4:4e:b1:9a:0e:2f:
1b:9c:c4:cf:10:05:57:97:17:44:7d:00:82:59:38:
72:e6:23:9b:1f:83:76:97:b2:2a:f0:d7:5e:07:0c:
e5:44:ce:c5:1b:28:90:5d:2f:5f:20:4e:ae:8d:f9:
2a:d2:ef:56:b2:bf:7e:22:f1:67:68:f8:3b:e5:19:
5e:e1:d6:ff:66:37:58:f2:b8:18:01:aa:38:ef:fa:
2a:c5:24:78:c0:a5:6d:47:e7:51:4a:f9:e2:1f:e0:
ce:82:c9:be:e7:87:60:be:a9:04:ad:4e:5c:28:dc:
d7:78:f3:5e:81:da:85:e6:7b:1b:4c:7c:a6:8f:78:
b0:97:d3:2c:a6:9d:5b:69:54:e3:d2:52:42:79:f7:
d9:a3:3a:8e:30:f0:ce:b7:4e:a3:25:40:12:3c:45:
94:93:6d:60:23:54:ad:0e:ce:41:b1:cf:b8:a4:8c:
1c:6d:32:80:c8:25:e1:9e:22:ac:ba:fb:c6:db:8a:
c5:8c:a3:72:07:0c:7e:ec:85:3d:6e:a1:bc:e8:1c:
85:6e:67:f0:e1:58:7b:ca:9f:81:d1:58:d1:68:9b:
fe:0a:22:e3:99:ac:1d:f0:3a:3f:d0:d8:c4:5d:43:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:4F:84:C5:E4:21:32:09:5A:DA:62:CF:D8:BC:DA:52:66:D7:77
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/RmlPhMXkITIJWtpiz9i82lJm13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.254.0/24
91.238.0.0/24
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
01:1c:13:d8:45:d0:c0:54:d1:22:6d:ce:27:2a:63:99:03:64:
be:45:11:d7:5f:07:f5:cf:5e:57:7b:31:b2:5c:27:68:10:0f:
4d:18:b3:cb:7a:f3:7a:1d:b3:2f:51:5e:a9:3d:8e:82:8f:da:
5d:a0:43:ca:e4:3e:ad:30:20:62:93:ac:05:b8:70:5b:79:44:
38:a2:a3:0d:cf:93:07:1b:ad:b7:3a:37:ad:82:00:fc:60:06:
59:1b:5e:a4:7a:ec:bb:25:65:a9:1c:2f:ca:97:7b:14:b2:e8:
7d:25:57:ba:4f:8d:ed:c1:32:18:f7:27:79:18:a3:80:00:dd:
5a:a2:47:ee:86:75:2f:67:4b:1c:89:a6:52:fc:2b:95:9b:07:
4b:5d:0c:d8:74:ce:f3:4d:71:d6:a4:83:37:ca:59:de:f1:08:
a1:de:ab:c7:bf:59:76:a6:b0:69:b1:bd:41:e7:9d:7c:e2:6b:
00:47:a0:40:49:23:c1:bd:ed:4d:94:18:7f:ea:cb:ed:88:84:
b9:e1:c2:eb:49:86:aa:59:17:6a:78:9d:12:ec:9f:b5:0b:7e:
bc:2f:5c:99:32:29:18:85:e2:e6:da:60:ea:42:e8:a3:d6:32:
9e:ee:92:95:37:34:5d:ac:d1:a6:e4:9e:aa:b3:09:0c:ee:82:
a8:a3:6b:55
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYsuG38rv9wLA2qcxGULniG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWU2NmIyNzU5ZTUwYmI2OWJiMGE0NDA5ZWViM2JhNDhj
NDZjNTYwHhcNMjMxMDE0MTIxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjY5NGY4NGM1ZTQyMTMyMDk1YWRhNjJjZmQ4YmNkYTUyNjZkNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t+J+zPsBspknJje/ndHe7oWzm+e
uwPETrGaDi8bnMTPEAVXlxdEfQCCWThy5iObH4N2l7Iq8NdeBwzlRM7FGyiQXS9f
IE6ujfkq0u9Wsr9+IvFnaPg75Rle4db/ZjdY8rgYAao47/oqxSR4wKVtR+dRSvni
H+DOgsm+54dgvqkErU5cKNzXePNegdqF5nsbTHymj3iwl9Mspp1baVTj0lJCeffZ
ozqOMPDOt06jJUASPEWUk21gI1StDs5Bsc+4pIwcbTKAyCXhniKsuvvG24rFjKNy
Bwx+7IU9bqG86ByFbmfw4Vh7yp+B0VjRaJv+CiLjmawd8Do/0NjEXUP8hQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEZpT4TF5CEyCVraYs/YvNpSZtd3MB8GA1UdIwQY
MBaAFFpeZrJ1nlC7absKRAnus7pIxGxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWIt
NjUzZjIzOWZlOWEwLzEvUm1sUGhNWGtJVElKV3RwaXo5aTgybEptMTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWItNjUzZjIzOWZlOWEw
LzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW+3+AwQA
W+4AMA8EAgACMAkDBwAgAQZ8EVgwDQYJKoZIhvcNAQELBQADggEBAAEcE9hF0MBU
0SJtzicqY5kDZL5FEddfB/XPXld7MbJcJ2gQD00Ys8t683odsy9RXqk9joKP2l2g
Q8rkPq0wIGKTrAW4cFt5RDiiow3Pkwcbrbc6N62CAPxgBlkbXqR67LslZakcL8qX
exSy6H0lV7pPje3BMhj3J3kYo4AA3VqiR+6GdS9nSxyJplL8K5WbB0tdDNh0zvNN
cdakgzfKWd7xCKHeq8e/WXamsGmxvUHnnXziawBHoEBJI8G97U2UGH/qy+2IhLnh
wutJhqpZF2p4nRLsn7ULfrwvXJkyKRiF4ubaYOpC6KPWMp7ukpU3NF2s0abknqqz
CQzugqija1U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:23 2024 by rpki-client on console-fra.rpki-client.org