Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/Xv4XgSI6VjP65eHcQm0RXhZeBcA.roa
File: Xv4XgSI6VjP65eHcQm0RXhZeBcA.roa (raw, json)
Hash identifier: sIeTgeT7lGU5xx6Fdf2S7BFkDRGxrfjjup2/0KfKYfU=
Subject key identifier: 5E:FE:17:81:22:3A:56:33:FA:E5:E1:DC:42:6D:11:5E:16:5E:05:C0
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 0185727A29E293334191F517ACD2174742D2
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/Xv4XgSI6VjP65eHcQm0RXhZeBcA.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42507
IP address blocks: 91.151.196.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:29:e2:93:33:41:91:f5:17:ac:d2:17:47:42:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efe1781223a5633fae5e1dc426d115e165e05c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:49:3e:8c:16:5f:23:15:ff:09:97:41:a1:
5a:72:b2:3c:01:91:f1:9c:1a:80:f5:c9:8a:db:f2:
3f:aa:c3:cc:73:92:d4:9c:47:3b:c9:ce:90:ae:bb:
a4:96:87:af:c3:39:28:54:d1:ed:e3:cc:10:38:87:
14:31:6d:7d:35:0d:07:7f:23:a0:db:a3:4a:68:f3:
c0:5f:dc:a4:dd:dd:02:24:e8:ac:65:66:87:4b:9f:
3f:bf:17:79:c5:ee:f9:ff:e9:a5:24:e1:5e:81:d3:
9f:b6:2b:e2:53:01:98:d3:29:f7:ac:aa:45:21:f9:
9c:97:55:be:f4:21:65:2c:87:02:13:b1:ff:f9:a7:
23:c5:f5:3a:04:31:d7:6e:8d:69:88:65:86:d3:c2:
15:1e:46:94:6c:d9:5c:66:1c:ab:c2:7b:8d:ad:f7:
4c:46:88:6b:52:21:1c:a7:f8:3b:a6:08:dd:a5:a6:
89:a9:ae:52:30:a0:25:f0:98:c8:e2:c7:92:60:30:
b3:9c:7e:f2:5d:86:f6:80:15:df:69:4e:ad:1e:d8:
34:a6:f2:17:3b:36:63:f9:4f:8f:2d:e2:c8:00:88:
d4:16:bd:fc:d0:7b:85:42:a7:7c:01:d8:ae:78:10:
70:90:5d:62:58:b6:31:e8:4e:4f:25:d5:87:52:9f:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:17:81:22:3A:56:33:FA:E5:E1:DC:42:6D:11:5E:16:5E:05:C0
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/Xv4XgSI6VjP65eHcQm0RXhZeBcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:aa:b0:f9:26:a4:6a:fd:0c:bf:a5:4f:20:ff:30:cd:ec:6c:
7d:2a:b3:c9:5f:3c:cb:88:75:ac:5e:10:50:21:2f:44:28:5e:
f8:4d:ef:d3:d3:30:e1:fb:4b:4d:70:36:2b:73:31:36:69:ee:
37:42:c9:b8:ad:f9:3f:95:52:89:32:77:d5:3e:17:ac:9e:ba:
50:8a:8e:58:93:ad:dc:6c:ad:7a:4c:d2:46:c7:c7:68:3e:85:
a5:93:5d:b2:94:2a:39:bb:c4:75:a8:44:9c:9d:4a:50:c3:42:
a4:c4:68:6f:9b:ba:d2:e5:5a:7e:8d:13:2a:3b:45:7a:c3:23:
37:9e:8e:52:92:ff:ad:3a:52:a6:e3:da:a1:2a:01:76:5e:67:
29:95:8e:dc:6d:85:1e:0b:d1:6e:7f:c2:4f:49:29:ee:5c:91:
2e:35:73:53:4e:16:26:6e:a9:13:19:c5:81:4a:c0:7c:7d:a5:
4b:a9:41:40:87:54:95:90:20:58:79:37:38:b8:90:a0:5e:36:
e4:c8:82:3b:0e:72:a1:35:bd:43:d3:a4:cd:14:b7:e5:63:f7:
ec:6b:8d:47:a0:b8:aa:d8:a8:1f:7c:0f:2f:3d:ba:8d:a8:61:
4f:ee:96:02:30:c5:a1:fa:03:e8:a5:5a:87:d5:65:c2:62:cb:
5e:2a:ea:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyeinikzNBkfUXrNIXR0LSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi
OGU3OTAwHhcNMjMwMTAyMTIzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWZlMTc4MTIyM2E1NjMzZmFlNWUxZGM0MjZkMTE1ZTE2NWUwNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDFJPowWXyMV/wmXQaFacrI8AZHx
nBqA9cmK2/I/qsPMc5LUnEc7yc6QrrukloevwzkoVNHt48wQOIcUMW19NQ0HfyOg
26NKaPPAX9yk3d0CJOisZWaHS58/vxd5xe75/+mlJOFegdOftiviUwGY0yn3rKpF
Ifmcl1W+9CFlLIcCE7H/+acjxfU6BDHXbo1piGWG08IVHkaUbNlcZhyrwnuNrfdM
RohrUiEcp/g7pgjdpaaJqa5SMKAl8JjI4seSYDCznH7yXYb2gBXfaU6tHtg0pvIX
OzZj+U+PLeLIAIjUFr380HuFQqd8AdiueBBwkF1iWLYx6E5PJdWHUp/RWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7+F4EiOlYz+uXh3EJtEV4WXgXAMB8GA1UdIwQY
MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt
NzE5NDAxYmJjYTJlLzEvWHY0WGdTSTZWalA2NWVIY1FtMFJYaFplQmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl
LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5fEMA0G
CSqGSIb3DQEBCwUAA4IBAQAqqrD5JqRq/Qy/pU8g/zDN7Gx9KrPJXzzLiHWsXhBQ
IS9EKF74Te/T0zDh+0tNcDYrczE2ae43Qsm4rfk/lVKJMnfVPhesnrpQio5Yk63c
bK16TNJGx8doPoWlk12ylCo5u8R1qEScnUpQw0KkxGhvm7rS5Vp+jRMqO0V6wyM3
no5Skv+tOlKm49qhKgF2XmcplY7cbYUeC9Fuf8JPSSnuXJEuNXNTThYmbqkTGcWB
SsB8faVLqUFAh1SVkCBYeTc4uJCgXjbkyII7DnKhNb1D06TNFLflY/fsa41HoLiq
2KgffA8vPbqNqGFP7pYCMMWh+gPopVqH1WXCYsteKupX
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:26 2024 by rpki-client on console-fra.rpki-client.org