Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OAAo-iUoB4GXUV9FArW4RRHxEhc.roa
File: OAAo-iUoB4GXUV9FArW4RRHxEhc.roa (raw, json)
Hash identifier: CRBImN6rkXTfeW8e3gSJXUzRpCTZ+ctPJnTZZO5PRH0=
Subject key identifier: 38:00:28:FA:25:28:07:81:97:51:5F:45:02:B5:B8:45:11:F1:12:17
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4DBCC09DD88E4A2AE5BC8B83533FC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OAAo-iUoB4GXUV9FArW4RRHxEhc.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.226.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:db:cc:09:dd:88:e4:a2:ae:5b:c8:b8:35:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=380028fa2528078197515f4502b5b84511f11217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:49:06:fa:29:a1:2f:17:ca:33:74:70:49:
b1:d7:f8:2f:ea:d1:30:f5:5d:d8:ef:d5:84:ab:79:
e4:62:60:b5:37:3e:d7:2d:f5:ab:72:4d:33:a6:93:
fa:24:ad:fe:52:fb:6d:c8:dc:b1:cd:f9:f1:8f:01:
d4:e5:e4:37:b0:95:b7:93:60:c7:a1:e5:5c:f9:58:
3b:71:19:0d:b4:82:bd:fb:cc:7a:00:09:7c:0d:64:
d8:2f:0a:4e:6c:e2:57:cf:5d:18:b4:a4:61:62:ea:
ac:4c:13:20:4f:13:ef:a5:de:18:53:c9:57:97:a0:
5c:b2:90:cb:0b:97:64:db:c7:8e:f6:fd:92:ce:63:
01:49:6c:00:2b:ec:e2:b5:88:d4:ba:f6:e6:de:13:
cc:45:cc:ee:4c:ea:2f:04:b2:be:38:53:54:07:e1:
b4:b7:88:59:10:9f:d7:c6:d6:d2:cb:d5:4c:a3:c9:
fa:da:c1:bb:7f:49:d8:9b:41:15:c1:78:35:8a:ef:
b1:7c:89:c8:47:f3:93:e6:a5:e0:14:7c:00:71:35:
ff:18:1a:f0:92:95:f3:c0:f9:02:a9:65:0a:0e:bc:
d3:ee:18:d5:21:06:27:b8:ab:f6:1a:73:e7:7e:64:
53:14:94:ab:23:35:64:a6:d6:0d:81:02:dd:f7:3e:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:28:FA:25:28:07:81:97:51:5F:45:02:B5:B8:45:11:F1:12:17
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OAAo-iUoB4GXUV9FArW4RRHxEhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e7:f5:7c:3a:2e:ff:b9:28:7f:35:1a:83:4b:45:e1:93:03:
51:f7:75:36:3a:1e:75:a5:22:7a:d0:cd:40:3b:2f:2e:5d:8d:
00:41:bd:37:d2:71:ad:37:8e:de:5a:dd:37:be:91:f9:b5:f5:
88:af:42:6c:0e:c3:cc:0c:e7:f6:e2:f2:bd:b0:49:7b:1e:db:
05:6b:0f:c5:9b:65:d5:41:4e:3d:43:a9:d5:c4:a2:2a:8a:88:
97:3a:95:2d:c7:4f:6e:06:e0:09:76:85:ad:79:82:94:22:bf:
75:01:79:71:a3:e1:ad:c4:c3:a0:86:b4:f4:1e:1e:66:c2:8c:
21:86:77:d8:a8:7d:11:f6:64:2b:45:7a:2e:b2:b6:c4:bd:26:
c2:04:bf:84:f0:12:5a:19:34:ed:92:98:3c:1e:56:3a:40:7a:
26:63:1d:78:06:51:dd:bd:3f:2f:e1:72:db:48:b3:77:f3:97:
93:48:35:67:3f:b1:a6:5c:0d:3f:a7:73:8f:39:a3:84:84:03:
32:a5:a4:86:1f:19:54:e8:63:f4:c8:54:75:51:38:d1:33:18:
17:66:cc:0e:d0:fc:7a:10:0a:cf:c8:05:66:5d:df:e8:91:94:
65:95:98:06:62:49:fd:03:52:da:ec:15:c9:1b:5e:8e:f9:59:
51:ca:d1:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1NvMCd2I5KKuW8i4NTP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwMTAxMTkzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODAwMjhmYTI1MjgwNzgxOTc1MTVmNDUwMmI1Yjg0NTExZjExMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0pJBvopoS8XyjN0cEmx1/gv6tEw
9V3Y79WEq3nkYmC1Nz7XLfWrck0zppP6JK3+UvttyNyxzfnxjwHU5eQ3sJW3k2DH
oeVc+Vg7cRkNtIK9+8x6AAl8DWTYLwpObOJXz10YtKRhYuqsTBMgTxPvpd4YU8lX
l6BcspDLC5dk28eO9v2SzmMBSWwAK+zitYjUuvbm3hPMRczuTOovBLK+OFNUB+G0
t4hZEJ/XxtbSy9VMo8n62sG7f0nYm0EVwXg1iu+xfInIR/OT5qXgFHwAcTX/GBrw
kpXzwPkCqWUKDrzT7hjVIQYnuKv2GnPnfmRTFJSrIzVkptYNgQLd9z6f2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgAKPolKAeBl1FfRQK1uEUR8RIXMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvT0FBby1pVW9CNEdYVVY5RkFyVzRSUkh4RWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+I4MA0G
CSqGSIb3DQEBCwUAA4IBAQCU5/V8Oi7/uSh/NRqDS0XhkwNR93U2Oh51pSJ60M1A
Oy8uXY0AQb030nGtN47eWt03vpH5tfWIr0JsDsPMDOf24vK9sEl7HtsFaw/Fm2XV
QU49Q6nVxKIqioiXOpUtx09uBuAJdoWteYKUIr91AXlxo+GtxMOghrT0Hh5mwowh
hnfYqH0R9mQrRXousrbEvSbCBL+E8BJaGTTtkpg8HlY6QHomYx14BlHdvT8v4XLb
SLN385eTSDVnP7GmXA0/p3OPOaOEhAMypaSGHxlU6GP0yFR1UTjRMxgXZswO0Px6
EArPyAVmXd/okZRllZgGYkn9A1La7BXJG16O+VlRytG3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org