Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/csBWfXTnHXtOZElkrs45pCcOUsQ.roa
File: csBWfXTnHXtOZElkrs45pCcOUsQ.roa (raw, json)
Hash identifier: wlku/nz9XDr2cCg1FfEgAq5yUkfsEr8B7u32PJ+SS8o=
Subject key identifier: 72:C0:56:7D:74:E7:1D:7B:4E:64:49:64:AE:CE:39:A4:27:0E:52:C4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01886ABF097BC9BE0C77DBEFE6F5B46A9DB9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/csBWfXTnHXtOZElkrs45pCcOUsQ.roa
Signing time: Tue 30 May 2023 03:41:24 +0000
ROA not before: Tue 30 May 2023 03:41:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 91.200.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 04:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:bf:09:7b:c9:be:0c:77:db:ef:e6:f5:b4:6a:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 30 03:41:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c0567d74e71d7b4e644964aece39a4270e52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:f1:92:58:4d:c7:8a:c1:75:e9:99:87:28:
32:98:b8:70:97:66:fa:05:68:78:fb:e3:70:3f:fa:
b1:19:45:1d:c5:ea:2b:17:fa:c5:93:9c:b7:4b:68:
9a:7e:5f:da:30:a8:2e:1d:56:38:04:dd:36:7a:8e:
05:09:55:e6:75:1d:1d:72:8b:31:88:fc:5a:4c:4b:
95:0d:17:2a:26:9f:d4:6b:ba:ef:6f:40:bc:97:b0:
6f:f4:c7:ab:43:bb:f5:2c:2c:89:f2:3f:ec:8d:cb:
c8:0f:5a:c4:72:8b:7c:69:04:79:30:b9:d3:01:69:
55:6e:27:41:01:6c:83:2a:25:6e:0d:98:fe:ba:70:
24:92:00:15:2e:18:57:19:ab:14:b1:bd:83:c9:46:
6f:14:f8:26:02:9e:19:b7:5b:ac:d3:e2:d3:0a:20:
62:18:93:c8:ce:a4:c2:88:0d:59:cc:ac:da:7b:79:
de:7c:1b:46:9e:87:12:21:ae:cd:bf:8c:29:15:c6:
1c:ee:8f:86:24:e5:a6:cc:63:5e:6b:10:98:0a:67:
45:07:a1:57:4d:7b:37:df:06:3a:d0:5d:1c:bd:4f:
2a:0c:02:91:3a:a9:cd:a7:61:d5:c6:73:13:d7:c4:
bf:92:ab:b4:c7:68:64:cc:94:92:95:09:e8:9b:23:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C0:56:7D:74:E7:1D:7B:4E:64:49:64:AE:CE:39:A4:27:0E:52:C4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/csBWfXTnHXtOZElkrs45pCcOUsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
52:73:b2:53:50:ab:1c:0e:23:ed:c6:a7:6b:ee:95:64:04:a6:
04:ca:bc:d4:05:b7:f0:69:ba:e7:60:d5:a4:05:4d:19:b8:34:
4a:26:6c:03:e6:60:ed:a5:e2:49:42:7b:2c:ec:b7:eb:ad:a5:
3d:d4:84:4b:5a:68:6b:55:d9:93:d6:a5:a3:8f:78:0b:9a:e1:
39:9c:8d:41:af:90:83:d5:9b:db:c1:dd:68:70:49:0a:50:5b:
52:63:6d:2f:c8:18:1b:92:3e:b9:35:ce:77:ea:53:8c:00:5d:
b4:f9:6d:4f:fc:21:a2:e8:53:5a:40:09:7b:c3:39:71:be:2f:
d6:25:0f:8e:b1:ff:dd:f5:a5:4d:f1:7b:1a:0f:7b:90:41:51:
56:9e:29:4d:00:47:3c:c0:ae:b8:a1:10:35:f3:72:bd:bc:dd:
88:72:91:67:25:42:64:1e:07:0b:8b:9c:ac:d9:6a:a7:c2:8f:
6d:6f:5c:c6:d0:ff:9f:87:96:14:7c:4b:96:49:37:b5:9b:46:
ba:8a:00:65:fb:3e:48:49:34:b8:40:26:40:d5:72:46:99:1d:
c9:9e:da:ad:87:d8:28:00:ca:93:85:19:b4:27:f9:6a:b0:26:
6a:52:ee:37:1d:0b:fa:7d:0c:3c:5f:e7:fa:05:fb:60:48:bc:
15:ca:4e:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhqvwl7yb4Md9vv5vW0ap25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNTMwMDM0MTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmMwNTY3ZDc0ZTcxZDdiNGU2NDQ5NjRhZWNlMzlhNDI3MGU1MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMnxklhNx4rBdemZhygymLhwl2b6
BWh4++NwP/qxGUUdxeorF/rFk5y3S2iafl/aMKguHVY4BN02eo4FCVXmdR0dcosx
iPxaTEuVDRcqJp/Ua7rvb0C8l7Bv9MerQ7v1LCyJ8j/sjcvID1rEcot8aQR5MLnT
AWlVbidBAWyDKiVuDZj+unAkkgAVLhhXGasUsb2DyUZvFPgmAp4Zt1us0+LTCiBi
GJPIzqTCiA1ZzKzae3nefBtGnocSIa7Nv4wpFcYc7o+GJOWmzGNeaxCYCmdFB6FX
TXs33wY60F0cvU8qDAKROqnNp2HVxnMT18S/kqu0x2hkzJSSlQnomyM3rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLAVn105x17TmRJZK7OOaQnDlLEMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvY3NCV2ZYVG5IWHRPWkVsa3JzNDVwQ2NPVXNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jcMA0G
CSqGSIb3DQEBCwUAA4IBAQBSc7JTUKscDiPtxqdr7pVkBKYEyrzUBbfwabrnYNWk
BU0ZuDRKJmwD5mDtpeJJQnss7LfrraU91IRLWmhrVdmT1qWjj3gLmuE5nI1Br5CD
1Zvbwd1ocEkKUFtSY20vyBgbkj65Nc536lOMAF20+W1P/CGi6FNaQAl7wzlxvi/W
JQ+Osf/d9aVN8XsaD3uQQVFWnilNAEc8wK64oRA183K9vN2IcpFnJUJkHgcLi5ys
2Wqnwo9tb1zG0P+fh5YUfEuWSTe1m0a6igBl+z5ISTS4QCZA1XJGmR3Jntqth9go
AMqThRm0J/lqsCZqUu43HQv6fQw8X+f6BftgSLwVyk4f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org