Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Y9GzZ86V7i1Yb7IurBn9UN9h9Zk.roa
File: Y9GzZ86V7i1Yb7IurBn9UN9h9Zk.roa (raw, json)
Hash identifier: UzqKXWMoC1n5x/k8+tuaNUbuiP0IrLfXgUbTnqGf9tk=
Subject key identifier: 63:D1:B3:67:CE:95:EE:2D:58:6F:B2:2E:AC:19:FD:50:DF:61:F5:99
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7AD5BBCADDEDD92D009CC0B54C380
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Y9GzZ86V7i1Yb7IurBn9UN9h9Zk.roa
Signing time: Mon 02 Jan 2023 08:44:52 +0000
ROA not before: Mon 02 Jan 2023 08:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202943
IP address blocks: 91.242.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 07 Feb 2023 13:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ad:5b:bc:ad:de:dd:92:d0:09:cc:0b:54:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63d1b367ce95ee2d586fb22eac19fd50df61f599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:e5:0e:f9:f8:02:1b:3e:af:3f:a2:a0:8e:
1f:37:6f:67:2d:f0:56:2f:a4:6c:68:29:02:10:9a:
e2:1e:d6:23:41:da:6b:c5:6f:a7:7c:ae:a7:ab:d6:
f4:89:2c:87:99:f1:33:0d:cc:87:61:16:2e:1b:d1:
e8:70:20:10:f9:fb:b6:76:4d:dd:51:d5:af:c9:a9:
97:1d:02:34:62:90:c0:06:2b:83:58:99:a9:3e:f0:
56:88:38:0b:50:15:23:b4:3c:75:cb:a8:f2:ef:45:
ce:fa:de:8b:eb:b9:b4:aa:68:89:fe:b0:58:d3:86:
f7:8d:ee:54:4e:db:f2:54:b5:b4:d1:e1:65:55:13:
16:94:8a:fb:af:b9:ea:b7:44:83:19:35:97:27:3b:
6b:dc:ab:de:e7:dd:56:ba:95:f5:2a:b2:0f:44:92:
86:ac:fa:e3:34:09:7d:d9:7a:27:84:61:39:df:6f:
c4:47:ed:7e:b6:a6:7a:62:cb:44:55:2f:1f:d0:a9:
b5:fe:a5:9e:35:8e:55:ff:06:df:79:93:24:6f:52:
da:f4:b1:a4:1f:19:1e:0f:9b:f1:4a:a4:f8:d4:6b:
0d:f6:93:bd:30:5d:a4:29:54:4e:48:67:39:3b:9d:
7e:4e:64:eb:03:38:b1:19:b2:0e:4f:ab:f6:d9:2f:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:B3:67:CE:95:EE:2D:58:6F:B2:2E:AC:19:FD:50:DF:61:F5:99
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Y9GzZ86V7i1Yb7IurBn9UN9h9Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.82.0/23
Signature Algorithm: sha256WithRSAEncryption
30:60:84:b8:0d:2b:74:ec:0f:dd:0c:a9:97:27:12:65:bf:04:
e4:dd:83:45:a6:48:c6:b7:ba:f5:b0:27:8e:28:ec:83:73:ed:
4c:2a:89:47:a6:ac:ed:3f:c7:ba:94:e5:14:f0:12:10:97:97:
0d:9e:ba:8f:62:42:d6:21:59:47:06:0f:61:bb:04:90:aa:4a:
e9:d9:20:fc:b0:7f:2f:87:66:fe:f7:e9:93:bb:46:f4:c3:f6:
5f:1b:72:e1:89:f7:0f:99:9a:5e:33:8c:26:ea:42:a3:22:bd:
68:7c:fe:81:94:34:2e:01:7e:8f:1b:69:97:d1:e5:f9:97:f7:
5e:8b:9e:4e:2e:61:0f:fd:d2:bd:3e:d4:2f:49:06:04:ae:b9:
ef:e9:f3:47:04:18:36:19:49:fc:2c:3a:33:50:82:ef:0e:a5:
7a:ce:ca:a0:a1:87:0a:f1:e0:96:be:59:75:74:46:9f:2d:c7:
62:ad:21:15:53:12:f3:13:9c:46:5c:b1:82:13:6f:7e:c4:db:
79:7d:62:bd:0d:6f:2f:65:c6:32:46:5a:ce:63:5c:64:8c:5f:
9e:d0:73:4e:de:b0:be:5f:e7:eb:b4:e2:0a:eb:44:87:28:47:
86:b0:45:dd:5f:f4:00:4a:26:b8:ac:8a:a5:b4:ed:55:0e:ed:
7e:2b:15:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp61bvK3e3ZLQCcwLVMOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2QxYjM2N2NlOTVlZTJkNTg2ZmIyMmVhYzE5ZmQ1MGRmNjFmNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFrlDvn4Ahs+rz+ioI4fN29nLfBW
L6RsaCkCEJriHtYjQdprxW+nfK6nq9b0iSyHmfEzDcyHYRYuG9HocCAQ+fu2dk3d
UdWvyamXHQI0YpDABiuDWJmpPvBWiDgLUBUjtDx1y6jy70XO+t6L67m0qmiJ/rBY
04b3je5UTtvyVLW00eFlVRMWlIr7r7nqt0SDGTWXJztr3Kve591WupX1KrIPRJKG
rPrjNAl92XonhGE532/ER+1+tqZ6YstEVS8f0Km1/qWeNY5V/wbfeZMkb1La9LGk
HxkeD5vxSqT41GsN9pO9MF2kKVROSGc5O51+TmTrAzixGbIOT6v22S8u7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPRs2fOle4tWG+yLqwZ/VDfYfWZMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvWTlHelo4NlY3aTFZYjdJdXJCbjlVTjloOVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/JSMA0G
CSqGSIb3DQEBCwUAA4IBAQAwYIS4DSt07A/dDKmXJxJlvwTk3YNFpkjGt7r1sCeO
KOyDc+1MKolHpqztP8e6lOUU8BIQl5cNnrqPYkLWIVlHBg9huwSQqkrp2SD8sH8v
h2b+9+mTu0b0w/ZfG3LhifcPmZpeM4wm6kKjIr1ofP6BlDQuAX6PG2mX0eX5l/de
i55OLmEP/dK9PtQvSQYErrnv6fNHBBg2GUn8LDozUILvDqV6zsqgoYcK8eCWvll1
dEafLcdirSEVUxLzE5xGXLGCE29+xNt5fWK9DW8vZcYyRlrOY1xkjF+e0HNO3rC+
X+frtOIK60SHKEeGsEXdX/QASia4rIqltO1VDu1+KxWV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org