Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/E5WF67lRttpFbz-04Rhkap8BbnQ.roa
File: E5WF67lRttpFbz-04Rhkap8BbnQ.roa (raw, json)
Hash identifier: sFNkNHARKn0b7S0tHJYKDo9kEIjLCDhoOkpJNqAhQKo=
Subject key identifier: 13:95:85:EB:B9:51:B6:DA:45:6F:3F:B4:E1:18:64:6A:9F:01:6E:74
Certificate issuer: /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial: 01902669EC8C7A5DFAB4A45D6CBCC7072486
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/E5WF67lRttpFbz-04Rhkap8BbnQ.roa
Signing time: Mon 17 Jun 2024 13:36:34 +0000
ROA not before: Mon 17 Jun 2024 13:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198130
IP address blocks: 91.231.196.0/22 maxlen: 22
91.231.196.0/24 maxlen: 24
91.231.197.0/24 maxlen: 24
91.231.198.0/24 maxlen: 24
91.231.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 08:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:69:ec:8c:7a:5d:fa:b4:a4:5d:6c:bc:c7:07:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Validity
Not Before: Jun 17 13:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139585ebb951b6da456f3fb4e118646a9f016e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:d4:c6:77:59:06:0c:26:3d:09:d2:b2:1e:
27:c3:fd:d5:7e:42:e0:a4:90:58:ee:f0:20:17:54:
10:54:91:13:f9:68:6c:4b:6e:b8:9e:08:82:11:b5:
3e:fb:02:19:19:b0:ef:17:26:cd:21:fd:7e:fd:a1:
e7:a5:e7:f5:c6:f6:eb:8c:c6:a8:15:8d:9e:1a:68:
32:a0:77:af:f2:d6:0b:9d:12:39:56:25:9d:a6:34:
75:35:63:f2:67:43:1e:a0:0f:a0:3b:c6:fb:8a:60:
a0:c2:1e:78:37:42:8f:74:2e:c9:ef:9a:b1:a9:92:
cf:f3:d3:3c:cb:d3:70:74:66:55:8e:52:c1:64:fb:
7e:da:32:dd:90:a8:04:4a:ab:69:90:b4:7a:ef:7a:
5c:b0:81:ca:b8:05:34:8f:40:c5:21:b2:63:78:43:
e2:87:da:31:10:49:98:7c:a1:70:d3:ac:bc:84:de:
d6:c3:09:b0:1b:cd:7c:f2:5b:a4:d4:c9:d3:bc:12:
82:b2:88:3b:2f:9d:72:99:13:a1:9c:7c:07:ec:5e:
5e:c4:6f:66:0a:79:88:60:41:be:89:65:5b:20:db:
c4:c3:1b:e2:49:a9:db:01:51:11:c8:4c:10:8d:53:
f9:0b:4c:44:b7:8e:61:70:6b:ce:56:e2:cd:e4:ac:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:95:85:EB:B9:51:B6:DA:45:6F:3F:B4:E1:18:64:6A:9F:01:6E:74
X509v3 Authority Key Identifier:
keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/E5WF67lRttpFbz-04Rhkap8BbnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.196.0/22
Signature Algorithm: sha256WithRSAEncryption
21:93:60:5a:7c:70:d0:ea:eb:ae:a8:07:5e:e7:67:8d:94:69:
e0:1a:4f:89:1f:84:0c:70:82:79:d5:5e:c2:4c:aa:97:47:2e:
b1:c6:e9:16:8d:cd:55:3b:f5:c6:0c:06:38:8b:e2:10:c5:86:
7f:32:e9:e7:82:24:34:71:47:3a:5a:c2:97:5e:9f:87:77:b6:
8d:f4:98:0f:f8:c1:2a:27:b7:37:cd:6c:85:26:11:5c:df:d7:
bd:67:25:35:16:30:34:f9:61:ac:6a:2e:13:b8:04:65:bc:11:
f9:76:e9:98:0c:8a:ae:ad:70:7a:ef:f4:79:d4:4d:85:d3:cc:
1c:a8:86:26:c2:ba:ff:0e:e7:72:7f:a5:cb:c5:c3:29:b9:07:
28:b8:6c:ab:d9:9d:6a:42:37:cd:e1:8f:ba:d5:d2:35:20:d7:
a2:84:df:95:ad:d1:8d:f5:1c:de:31:5f:36:ae:92:e1:7a:18:
c3:f9:b5:12:97:1d:62:f3:fd:68:df:91:a7:97:02:6a:46:87:
62:e8:36:36:6a:d3:82:4c:56:92:41:48:1e:24:d0:48:06:6a:
61:22:19:44:7e:20:93:f6:94:a5:81:4a:77:75:1c:fd:a6:de:
1b:65:94:34:66:48:d6:6f:7b:82:5b:02:1c:28:ea:83:25:34:
8e:ea:96:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAmaeyMel36tKRdbLzHBySGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGRiMzU2OGU0NTVmM2RhMmIyMjc0YTlkNTI1Y2FjMDkz
MWM3ZDUwHhcNMjQwNjE3MTMzNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzk1ODVlYmI5NTFiNmRhNDU2ZjNmYjRlMTE4NjQ2YTlmMDE2ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobvUxndZBgwmPQnSsh4nw/3VfkLg
pJBY7vAgF1QQVJET+WhsS264ngiCEbU++wIZGbDvFybNIf1+/aHnpef1xvbrjMao
FY2eGmgyoHev8tYLnRI5ViWdpjR1NWPyZ0MeoA+gO8b7imCgwh54N0KPdC7J75qx
qZLP89M8y9NwdGZVjlLBZPt+2jLdkKgESqtpkLR673pcsIHKuAU0j0DFIbJjeEPi
h9oxEEmYfKFw06y8hN7WwwmwG8188luk1MnTvBKCsog7L51ymROhnHwH7F5exG9m
CnmIYEG+iWVbINvEwxviSanbAVERyEwQjVP5C0xEt45hcGvOVuLN5KyzwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOVheu5UbbaRW8/tOEYZGqfAW50MB8GA1UdIwQY
MBaAFB0Ns1aORV89orInSp1SXKwJMcfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFEyelZvNUZYejJpc2lkS25WSmNyQWt4eDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iY2YwOWEtN2M4ZS00ZTIwLTg0NTAt
ZTA4OGFhMGFhOGRkLzEvRTVXRjY3bFJ0dHBGYnotMDRSaGthcDhCYm5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iY2YwOWEtN2M4ZS00ZTIwLTg0NTAtZTA4OGFhMGFhOGRk
LzEvSFEyelZvNUZYejJpc2lkS25WSmNyQWt4eDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+fEMA0G
CSqGSIb3DQEBCwUAA4IBAQAhk2BafHDQ6uuuqAde52eNlGngGk+JH4QMcIJ51V7C
TKqXRy6xxukWjc1VO/XGDAY4i+IQxYZ/MunngiQ0cUc6WsKXXp+Hd7aN9JgP+MEq
J7c3zWyFJhFc39e9ZyU1FjA0+WGsai4TuARlvBH5dumYDIqurXB67/R51E2F08wc
qIYmwrr/Dudyf6XLxcMpuQcouGyr2Z1qQjfN4Y+61dI1INeihN+VrdGN9RzeMV82
rpLhehjD+bUSlx1i8/1o35GnlwJqRodi6DY2atOCTFaSQUgeJNBIBmphIhlEfiCT
9pSlgUp3dRz9pt4bZZQ0ZkjWb3uCWwIcKOqDJTSO6paI
-----END CERTIFICATE-----
Generated at Thu Jun 20 12:17:53 2024 by rpki-client on console-ams.rpki-client.org