Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EFXNalnII9w9mRhbggFwoeDblJE.roa
File: EFXNalnII9w9mRhbggFwoeDblJE.roa (raw, json)
Hash identifier: PAGHqfuDb1ELXe4mxrKA0zta2nKLX8hi0w9WbxUqHPw=
Subject key identifier: 10:55:CD:6A:59:C8:23:DC:3D:99:18:5B:82:01:70:A1:E0:DB:94:91
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018BD7C0D7F941DAA61AFE0313C5C181ADD0
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EFXNalnII9w9mRhbggFwoeDblJE.roa
Signing time: Thu 16 Nov 2023 10:50:21 +0000
ROA not before: Thu 16 Nov 2023 10:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53363
IP address blocks: 91.194.11.0/24 maxlen: 24
146.19.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:c0:d7:f9:41:da:a6:1a:fe:03:13:c5:c1:81:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 16 10:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1055cd6a59c823dc3d99185b820170a1e0db9491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:83:f5:e2:37:62:54:60:02:68:db:19:c2:
75:a9:f4:37:1d:3f:a9:30:26:d5:34:b3:f5:db:85:
43:cc:77:7c:89:2a:1b:02:37:a6:54:87:d1:c2:18:
e1:9c:d8:f1:30:8c:2b:dc:da:6a:a5:68:43:fa:b5:
43:7c:7f:bc:4b:02:61:e4:ae:6b:ac:ca:de:d2:27:
55:40:6a:3a:e2:8b:bf:38:fa:47:61:70:4f:47:6f:
be:17:bb:25:08:4c:ee:1c:60:f3:58:8e:c4:05:e4:
24:a2:5b:33:fa:5f:6c:08:20:31:db:ea:45:7a:61:
8b:18:68:fb:f5:10:61:47:a3:90:3a:48:ad:10:42:
42:b2:5a:9d:50:73:40:89:da:6f:39:b5:00:71:c7:
07:81:e8:93:05:d9:7f:5c:32:5b:87:59:6a:b1:a2:
b7:6d:fc:67:bc:02:e4:b0:fe:93:e3:1a:5c:7f:0a:
eb:9f:80:26:5e:f0:8b:0e:73:c6:11:9b:2e:3e:2a:
ac:1a:3b:64:3e:e0:5d:0a:fc:97:ef:b8:a2:d7:37:
57:51:01:3e:b9:01:c2:27:33:b4:95:c4:71:cf:5b:
5a:1b:71:79:b0:3d:15:9f:78:6c:6b:7c:8e:95:df:
b3:67:f8:97:61:b8:37:9a:d9:6c:94:22:14:14:3e:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:CD:6A:59:C8:23:DC:3D:99:18:5B:82:01:70:A1:E0:DB:94:91
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EFXNalnII9w9mRhbggFwoeDblJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.11.0/24
146.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:4b:8f:9c:df:7c:7d:a1:a3:e6:56:f9:6c:e5:3a:42:14:88:
b2:ec:2a:f3:6e:22:4b:61:41:65:6a:5a:b3:62:ff:eb:9a:26:
ec:e5:48:64:dc:4f:8f:77:02:4c:90:0f:09:68:2e:0b:4d:e0:
5a:32:1f:08:fe:54:45:24:a2:98:bb:45:7a:a6:2e:e8:a6:df:
e9:f4:d4:2e:31:9e:25:8e:35:37:b7:44:50:19:64:66:65:64:
bb:93:b9:f0:c8:74:85:63:07:8c:03:ea:2c:9a:dd:99:c4:70:
d6:dc:e9:49:29:20:63:98:8c:f7:63:f8:9b:e1:a7:e3:51:1a:
96:45:3b:aa:c3:86:e4:fc:e6:4d:73:51:f1:43:05:a4:7d:6e:
3f:62:2f:32:2e:c9:95:15:e5:84:6a:9a:99:a6:51:35:01:f7:
1d:3b:a2:3c:6f:7e:6b:43:80:5e:99:61:31:bc:85:de:a3:20:
ab:ff:68:f1:1b:60:09:0b:1d:67:ae:2d:1d:9d:80:3e:86:be:
51:83:ec:45:c2:a3:a8:2d:7e:47:f5:67:fa:24:45:6e:c7:50:
e3:80:0e:74:68:03:c9:6d:06:37:7c:9c:fc:61:12:48:f7:6a:
f7:58:5a:d0:6b:f5:3a:5b:77:a1:1c:be:07:d6:9a:99:16:f8:
d7:1c:7f:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYvXwNf5QdqmGv4DE8XBga3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjMxMTE2MTA1MDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDU1Y2Q2YTU5YzgyM2RjM2Q5OTE4NWI4MjAxNzBhMWUwZGI5NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq+D9eI3YlRgAmjbGcJ1qfQ3HT+p
MCbVNLP124VDzHd8iSobAjemVIfRwhjhnNjxMIwr3NpqpWhD+rVDfH+8SwJh5K5r
rMre0idVQGo64ou/OPpHYXBPR2++F7slCEzuHGDzWI7EBeQkolsz+l9sCCAx2+pF
emGLGGj79RBhR6OQOkitEEJCslqdUHNAidpvObUAcccHgeiTBdl/XDJbh1lqsaK3
bfxnvALksP6T4xpcfwrrn4AmXvCLDnPGEZsuPiqsGjtkPuBdCvyX77ii1zdXUQE+
uQHCJzO0lcRxz1taG3F5sD0Vn3hsa3yOld+zZ/iXYbg3mtlslCIUFD63CQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBBVzWpZyCPcPZkYW4IBcKHg25SRMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvRUZYTmFsbklJOXc5bVJoYmdnRndvZURibEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8ILAwQA
khNqMA0GCSqGSIb3DQEBCwUAA4IBAQDIS4+c33x9oaPmVvls5TpCFIiy7CrzbiJL
YUFlalqzYv/rmibs5Uhk3E+PdwJMkA8JaC4LTeBaMh8I/lRFJKKYu0V6pi7opt/p
9NQuMZ4ljjU3t0RQGWRmZWS7k7nwyHSFYweMA+osmt2ZxHDW3OlJKSBjmIz3Y/ib
4afjURqWRTuqw4bk/OZNc1HxQwWkfW4/Yi8yLsmVFeWEapqZplE1AfcdO6I8b35r
Q4BemWExvIXeoyCr/2jxG2AJCx1nri0dnYA+hr5Rg+xFwqOoLX5H9Wf6JEVux1Dj
gA50aAPJbQY3fJz8YRJI92r3WFrQa/U6W3ehHL4H1pqZFvjXHH8U
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org