Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_R9PARVQmnXm7waODK1_omuFCfI.roa
File: _R9PARVQmnXm7waODK1_omuFCfI.roa (raw, json)
Hash identifier: TKnx0KVUIzlZeUIbhWPuaIPYbdZSlDOI3BCWqV3K/Lg=
Subject key identifier: FD:1F:4F:01:15:50:9A:75:E6:EF:06:8E:0C:AD:7F:A2:6B:85:09:F2
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01878E2A7AE90B9F1E132568ABF3BF651234
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_R9PARVQmnXm7waODK1_omuFCfI.roa
Signing time: Mon 17 Apr 2023 07:42:41 +0000
ROA not before: Mon 17 Apr 2023 07:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 91.200.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:2a:7a:e9:0b:9f:1e:13:25:68:ab:f3:bf:65:12:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 17 07:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1f4f0115509a75e6ef068e0cad7fa26b8509f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:79:9c:aa:10:ca:13:52:fb:d6:a8:fa:bb:
05:44:89:f0:ae:d4:c2:e1:e7:e7:83:51:a5:88:eb:
9d:01:b4:29:05:a0:ef:a3:23:75:f2:82:08:7d:90:
8a:0d:60:e8:69:0c:be:7e:c6:0f:95:c9:b0:35:ab:
31:76:3d:51:52:7f:b4:f7:53:11:86:56:23:b3:bd:
29:82:50:89:a4:79:61:2b:7c:81:3c:8a:3f:69:6c:
cf:89:34:71:c2:33:13:f5:db:a3:e3:da:5f:d8:79:
2b:99:30:fc:c4:92:91:09:5e:71:8c:9e:39:b7:ea:
94:ad:12:95:13:6b:a9:df:16:36:45:f8:37:d5:22:
07:0c:61:95:46:f7:5d:e7:81:16:4c:33:75:e5:9b:
a6:78:ea:87:df:52:b9:a0:8c:cd:08:05:94:f2:15:
43:8a:19:c8:24:fd:ed:94:c3:56:c0:a5:80:30:46:
0e:b5:28:1a:45:37:fc:22:32:7d:c0:35:6c:3a:30:
6f:23:a1:33:ff:58:da:13:85:ac:82:2c:bf:50:c7:
e8:4b:9c:bc:30:83:5d:d9:68:a9:40:5a:01:c7:bb:
dc:38:58:d9:59:bc:0a:9f:8d:0c:34:72:38:de:b4:
ff:56:72:6b:ea:c9:e9:7e:14:fe:56:44:56:f0:85:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:4F:01:15:50:9A:75:E6:EF:06:8E:0C:AD:7F:A2:6B:85:09:F2
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_R9PARVQmnXm7waODK1_omuFCfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:da:c2:1d:86:28:2d:b2:7b:cf:90:84:19:8d:98:5b:5c:ba:
bf:be:28:98:de:10:76:0c:fd:eb:99:1f:d1:46:8c:ca:3d:a1:
e2:b8:6a:75:b2:2d:94:f3:43:1a:d7:e1:bc:63:77:cd:68:7b:
9e:31:1c:d9:59:c0:26:b4:e6:b0:18:1c:7b:76:07:d9:5e:d9:
f5:f6:35:d2:56:00:2f:c7:48:c1:35:eb:95:65:a7:2a:f6:a7:
91:47:81:80:f6:86:94:29:78:d9:69:39:15:76:15:e2:e3:e3:
de:57:b3:b6:ce:2b:1e:0d:d8:16:e6:83:7b:f8:47:fc:4e:1b:
9f:52:12:84:4f:9e:3c:f2:7c:41:1a:a4:f7:fd:d7:d3:8d:7d:
4c:28:ae:b2:db:41:ec:73:fa:bf:36:e7:7a:84:93:13:8b:d8:
f1:7f:e8:0f:d4:b3:f2:18:f4:b0:a3:c2:6d:5c:ff:4e:5a:d4:
10:ea:40:c6:0e:00:2f:ea:c3:cd:50:7b:1f:c5:98:12:0e:b3:
0d:6c:36:b4:4c:9e:5f:9c:a0:12:9e:ea:d2:19:63:d0:a0:11:
67:96:03:7a:74:ea:c8:28:82:eb:4d:f3:b8:07:3f:46:3b:91:
38:de:e7:64:ba:48:92:32:5d:8b:26:9b:69:56:0f:9f:38:b6:
dd:2b:80:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeOKnrpC58eEyVoq/O/ZRI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNDE3MDc0MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDFmNGYwMTE1NTA5YTc1ZTZlZjA2OGUwY2FkN2ZhMjZiODUwOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIN5nKoQyhNS+9ao+rsFRInwrtTC
4efng1GliOudAbQpBaDvoyN18oIIfZCKDWDoaQy+fsYPlcmwNasxdj1RUn+091MR
hlYjs70pglCJpHlhK3yBPIo/aWzPiTRxwjMT9duj49pf2HkrmTD8xJKRCV5xjJ45
t+qUrRKVE2up3xY2Rfg31SIHDGGVRvdd54EWTDN15ZumeOqH31K5oIzNCAWU8hVD
ihnIJP3tlMNWwKWAMEYOtSgaRTf8IjJ9wDVsOjBvI6Ez/1jaE4Wsgiy/UMfoS5y8
MINd2WipQFoBx7vcOFjZWbwKn40MNHI43rT/VnJr6snpfhT+VkRW8IUlfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0fTwEVUJp15u8Gjgytf6JrhQnyMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvX1I5UEFSVlFtblhtN3dhT0RLMV9vbXVGQ2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jcMA0G
CSqGSIb3DQEBCwUAA4IBAQAe2sIdhigtsnvPkIQZjZhbXLq/viiY3hB2DP3rmR/R
RozKPaHiuGp1si2U80Ma1+G8Y3fNaHueMRzZWcAmtOawGBx7dgfZXtn19jXSVgAv
x0jBNeuVZacq9qeRR4GA9oaUKXjZaTkVdhXi4+PeV7O2ziseDdgW5oN7+Ef8Thuf
UhKET5488nxBGqT3/dfTjX1MKK6y20Hsc/q/Nud6hJMTi9jxf+gP1LPyGPSwo8Jt
XP9OWtQQ6kDGDgAv6sPNUHsfxZgSDrMNbDa0TJ5fnKASnurSGWPQoBFnlgN6dOrI
KILrTfO4Bz9GO5E43udkukiSMl2LJptpVg+fOLbdK4Dm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org