Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0vkp5LEgMhD8sSYTg6mSzeAbTKU.roa
File: 0vkp5LEgMhD8sSYTg6mSzeAbTKU.roa (raw, json)
Hash identifier: 8+J1na63CI9qK/yN1XDTi0BZtBV1CMbs4MeJe01mzZQ=
Subject key identifier: D2:F9:29:E4:B1:20:32:10:FC:B1:26:13:83:A9:92:CD:E0:1B:4C:A5
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0189B7DF19C533D03B59FC2C5F605D7F7327
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0vkp5LEgMhD8sSYTg6mSzeAbTKU.roa
Signing time: Wed 02 Aug 2023 20:09:58 +0000
ROA not before: Wed 02 Aug 2023 20:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57916
IP address blocks: 91.242.97.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:df:19:c5:33:d0:3b:59:fc:2c:5f:60:5d:7f:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 2 20:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f929e4b1203210fcb1261383a992cde01b4ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:73:f8:8b:fa:d5:dc:1b:67:1d:4c:a1:d4:
8e:7a:8a:6c:bf:d1:39:10:a5:30:4b:9f:10:e5:57:
2f:27:ad:f9:8c:6a:de:7c:51:2b:78:92:db:9a:44:
74:81:b0:f1:e2:7a:dc:67:6c:a8:11:fc:bd:46:1b:
86:f6:73:2f:64:31:95:db:81:cf:d5:34:0f:d2:46:
9c:8b:2f:1b:43:71:b9:ab:4d:c4:25:11:65:86:b9:
02:0e:c9:ec:fe:a7:aa:8a:2d:90:42:02:6b:ac:75:
f9:11:a1:98:41:b3:5b:0d:a0:06:ba:03:e8:7e:84:
ac:c0:cb:b9:86:39:db:65:da:51:88:cc:5b:d1:ee:
f9:36:8e:75:27:e7:ab:a1:b6:ef:fd:ee:da:08:75:
12:98:b3:19:9b:57:14:2d:8b:aa:aa:8c:05:1a:99:
6f:6e:c7:53:e7:02:5a:1d:43:b6:57:f2:13:62:8f:
71:f5:21:67:d4:f4:97:9f:18:64:ea:49:02:e9:24:
e7:17:a3:95:b1:04:b4:00:d6:ea:3c:82:f0:bb:8f:
2d:08:e4:d6:7b:63:de:7f:86:86:a7:9d:03:ec:a7:
d5:18:52:e8:ed:df:4d:1a:db:6f:7b:87:f7:55:4b:
47:6f:6c:48:37:ea:77:db:0f:04:f4:24:b5:71:cb:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:29:E4:B1:20:32:10:FC:B1:26:13:83:A9:92:CD:E0:1B:4C:A5
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0vkp5LEgMhD8sSYTg6mSzeAbTKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.97.0/24
91.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e8:d3:ea:b2:85:c5:96:d2:b0:f8:9e:d0:fa:21:a8:55:c6:
53:07:8a:b0:ab:d3:0f:65:12:a6:11:37:ab:20:e3:25:fd:03:
62:d8:b0:c9:8d:66:66:1e:87:5b:41:5b:3e:00:3f:bd:53:71:
0e:24:4e:e5:14:56:33:65:19:1e:79:52:6c:cc:36:ea:2e:12:
f1:7c:33:22:61:27:2e:a9:e2:82:19:6f:c7:55:64:30:6a:89:
c3:4a:9b:2f:84:da:b2:d2:22:e6:af:e7:12:19:55:e3:d0:c1:
32:57:9c:2f:ea:08:b6:62:4d:f5:e0:37:7a:58:4f:a5:09:c2:
ce:44:15:b4:8a:f3:a7:d6:82:af:2f:44:3b:3d:79:48:ba:09:
9c:d1:40:09:b0:89:80:1c:36:70:36:a5:ff:61:c4:b5:bb:03:
30:6d:4f:a2:e4:fc:22:1b:6d:13:ed:6c:af:14:d3:4e:9b:76:
1f:9a:88:35:f6:39:89:38:ac:65:58:36:71:72:49:1f:ab:ff:
49:e4:36:38:87:33:1a:d9:2f:b9:95:93:2e:46:8e:4c:57:f0:
5e:3f:6f:0e:c3:fd:f3:6c:70:38:b7:b8:98:41:df:4c:c8:2d:
b3:f4:21:0a:49:d5:b2:d0:e9:54:79:ad:42:e6:7e:da:a4:60:
ae:87:6e:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYm33xnFM9A7WfwsX2Bdf3MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwODAyMjAwOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmY5MjllNGIxMjAzMjEwZmNiMTI2MTM4M2E5OTJjZGUwMWI0Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfxz+Iv61dwbZx1ModSOeopsv9E5
EKUwS58Q5VcvJ635jGrefFEreJLbmkR0gbDx4nrcZ2yoEfy9RhuG9nMvZDGV24HP
1TQP0kaciy8bQ3G5q03EJRFlhrkCDsns/qeqii2QQgJrrHX5EaGYQbNbDaAGugPo
foSswMu5hjnbZdpRiMxb0e75No51J+erobbv/e7aCHUSmLMZm1cULYuqqowFGplv
bsdT5wJaHUO2V/ITYo9x9SFn1PSXnxhk6kkC6STnF6OVsQS0ANbqPILwu48tCOTW
e2Pef4aGp50D7KfVGFLo7d9NGttve4f3VUtHb2xIN+p32w8E9CS1ccsOIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNL5KeSxIDIQ/LEmE4Opks3gG0ylMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvMHZrcDVMRWdNaEQ4c1NZVGc2bVN6ZUFiVEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW/JAAwQA
W/JhAwQAW/JpMA0GCSqGSIb3DQEBCwUAA4IBAQBY6NPqsoXFltKw+J7Q+iGoVcZT
B4qwq9MPZRKmETerIOMl/QNi2LDJjWZmHodbQVs+AD+9U3EOJE7lFFYzZRkeeVJs
zDbqLhLxfDMiYScuqeKCGW/HVWQwaonDSpsvhNqy0iLmr+cSGVXj0MEyV5wv6gi2
Yk314Dd6WE+lCcLORBW0ivOn1oKvL0Q7PXlIugmc0UAJsImAHDZwNqX/YcS1uwMw
bU+i5PwiG20T7WyvFNNOm3Yfmog19jmJOKxlWDZxckkfq/9J5DY4hzMa2S+5lZMu
Ro5MV/BeP28Ow/3zbHA4t7iYQd9MyC2z9CEKSdWy0OlUea1C5n7apGCuh271
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org