Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/93ovFcmi7B6NR_HD9Px95y0r7QE.roa
File: 93ovFcmi7B6NR_HD9Px95y0r7QE.roa (raw, json)
Hash identifier: ezpgB0cbb8utKdwqFzw7spGIYztiWIWWf4pt5yuYWJI=
Subject key identifier: F7:7A:2F:15:C9:A2:EC:1E:8D:47:F1:C3:F4:FC:7D:E7:2D:2B:ED:01
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 01856FF93865C9030EEF8EBE7F657DE831B5
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/93ovFcmi7B6NR_HD9Px95y0r7QE.roa
Signing time: Mon 02 Jan 2023 00:54:41 +0000
ROA not before: Mon 02 Jan 2023 00:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15542
IP address blocks: 91.230.33.0/24 maxlen: 24
91.230.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:38:65:c9:03:0e:ef:8e:be:7f:65:7d:e8:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jan 2 00:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77a2f15c9a2ec1e8d47f1c3f4fc7de72d2bed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:96:5d:7f:94:2c:8e:77:ef:bb:e9:3f:35:
5b:f7:23:80:62:62:c2:ce:0d:0e:c3:26:c5:f1:31:
e2:cd:94:1d:ac:5b:86:b6:cc:3a:b6:57:b7:ed:d3:
d1:cf:7c:b6:e3:5b:62:05:6f:a4:3e:92:ac:2f:1a:
fa:da:5d:40:6b:da:5e:3b:2d:54:a7:12:7e:dd:ff:
7e:3d:ee:9e:45:89:f1:84:b6:9f:e6:ac:d4:86:22:
c2:98:36:99:16:ff:d6:b4:9f:a5:02:d1:fc:54:4f:
58:c4:9d:11:05:12:6c:e2:ee:e2:d2:53:a0:5b:bf:
1f:e4:eb:0a:7b:dc:b0:ff:12:c9:45:76:88:f6:67:
16:e5:e5:05:a1:f4:59:5e:09:b8:e1:0d:1b:7f:e5:
d4:c2:24:5f:c3:36:bb:c5:cc:a1:82:a2:53:75:68:
73:5b:83:97:84:d0:38:c1:e4:54:27:07:8d:4d:4b:
2b:5a:49:8c:64:0a:d8:9b:6d:b0:67:64:21:9d:eb:
d5:d4:f3:36:a2:09:51:53:be:d6:48:99:64:94:f7:
e4:04:c8:b1:d6:ca:fb:78:24:fc:93:72:cf:39:b6:
54:c4:25:6f:62:d2:e3:c1:48:32:07:02:99:fd:9e:
87:47:1c:28:90:4d:04:dd:07:be:d5:c7:70:d5:66:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:2F:15:C9:A2:EC:1E:8D:47:F1:C3:F4:FC:7D:E7:2D:2B:ED:01
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/93ovFcmi7B6NR_HD9Px95y0r7QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.33.0-91.230.35.255
Signature Algorithm: sha256WithRSAEncryption
05:9c:17:c8:fe:f3:e6:07:f8:29:04:4d:22:0e:f3:5e:c8:33:
0e:c5:d4:50:66:cd:7f:1f:5c:4f:f2:70:d5:f0:af:8f:ac:20:
fe:d6:2d:31:1d:88:59:d9:dd:88:30:99:e2:13:f4:e8:1a:5b:
58:29:55:2f:d6:ed:be:a8:3b:7f:60:c0:c3:f9:4c:c7:9d:56:
83:e7:12:5e:ac:c4:2b:c0:05:f9:24:27:9d:83:0b:6b:47:9b:
e4:5a:15:a3:05:7e:46:c5:97:1d:a7:b5:dc:7b:7c:78:5d:ab:
50:64:97:f3:17:f1:91:16:21:67:ca:4e:13:36:84:e3:d8:9b:
09:11:b6:82:11:cb:d5:81:a7:9b:46:85:11:f9:74:98:71:7d:
c5:69:b8:14:37:42:71:a5:44:1b:cc:40:86:9c:05:c5:86:fd:
5f:19:f4:ae:3d:73:0e:91:3e:25:ac:cb:53:b5:fa:18:bb:5b:
66:62:d3:0d:4a:54:6a:0f:08:83:b0:9e:e3:22:23:6a:9d:9d:
92:40:05:4e:de:c4:4a:b2:81:5d:60:05:2e:85:13:bb:c9:4e:
e6:db:e3:3f:c1:17:4e:ff:09:43:ab:75:15:8a:1e:dd:f3:60:
26:9c:e8:37:79:ed:36:7e:a7:eb:9e:f8:d4:a4:9e:9d:7f:8c:
45:79:01:34
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv+ThlyQMO746+f2V96DG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx
NzRkMmQwHhcNMjMwMTAyMDA1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzdhMmYxNWM5YTJlYzFlOGQ0N2YxYzNmNGZjN2RlNzJkMmJlZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktCWXX+ULI5377vpPzVb9yOAYmLC
zg0OwybF8THizZQdrFuGtsw6tle37dPRz3y241tiBW+kPpKsLxr62l1Aa9peOy1U
pxJ+3f9+Pe6eRYnxhLaf5qzUhiLCmDaZFv/WtJ+lAtH8VE9YxJ0RBRJs4u7i0lOg
W78f5OsKe9yw/xLJRXaI9mcW5eUFofRZXgm44Q0bf+XUwiRfwza7xcyhgqJTdWhz
W4OXhNA4weRUJweNTUsrWkmMZArYm22wZ2QhnevV1PM2oglRU77WSJlklPfkBMix
1sr7eCT8k3LPObZUxCVvYtLjwUgyBwKZ/Z6HRxwokE0E3Qe+1cdw1WaRlQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPd6LxXJouwejUfxw/T8fectK+0BMB8GA1UdIwQY
MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt
ZWJkMzE0NTQyMmVhLzEvOTNvdkZjbWk3QjZOUl9IRDlQeDk1eTByN1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh
LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb5iED
BAJb5iAwDQYJKoZIhvcNAQELBQADggEBAAWcF8j+8+YH+CkETSIO817IMw7F1FBm
zX8fXE/ycNXwr4+sIP7WLTEdiFnZ3YgwmeIT9OgaW1gpVS/W7b6oO39gwMP5TMed
VoPnEl6sxCvABfkkJ52DC2tHm+RaFaMFfkbFlx2ntdx7fHhdq1Bkl/MX8ZEWIWfK
ThM2hOPYmwkRtoIRy9WBp5tGhRH5dJhxfcVpuBQ3QnGlRBvMQIacBcWG/V8Z9K49
cw6RPiWsy1O1+hi7W2Zi0w1KVGoPCIOwnuMiI2qdnZJABU7exEqygV1gBS6FE7vJ
Tubb4z/BF07/CUOrdRWKHt3zYCac6Dd57TZ+p+ue+NSknp1/jEV5ATQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:57 2024 by rpki-client on console-ams.rpki-client.org