Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mq1Ukp9txGNdlFauZtMxAO6VasQ.roa
File: mq1Ukp9txGNdlFauZtMxAO6VasQ.roa (raw, json)
Hash identifier: T4jjEK9tNyOo7HZ5i3pcZbK3eUw4kNCv7NSBmeKaU9E=
Subject key identifier: 9A:AD:54:92:9F:6D:C4:63:5D:94:56:AE:66:D3:31:00:EE:95:6A:C4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018E2F7F23ACAA27CE25CA257C515FA3E495
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mq1Ukp9txGNdlFauZtMxAO6VasQ.roa
Signing time: Mon 11 Mar 2024 21:50:45 +0000
ROA not before: Mon 11 Mar 2024 21:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62281
IP address blocks: 91.242.86.0/23 maxlen: 24
91.242.88.0/22 maxlen: 24
91.242.92.0/23 maxlen: 24
91.242.96.0/24 maxlen: 24
91.242.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 05:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:7f:23:ac:aa:27:ce:25:ca:25:7c:51:5f:a3:e4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 11 21:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aad54929f6dc4635d9456ae66d33100ee956ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:af:3d:4b:b2:96:9e:4b:e3:35:c7:d1:da:
7a:02:c3:28:34:f3:4b:06:df:89:c4:79:ba:59:71:
98:d0:40:18:ee:06:bb:1b:29:a8:cc:3e:c7:f6:e6:
2b:d6:04:77:af:d3:24:6f:dc:3f:3a:da:a3:d4:9e:
71:8e:c4:98:33:91:ec:29:e6:74:86:95:d8:03:59:
86:7b:47:e9:38:31:0f:67:f6:5a:af:a7:a7:36:47:
cf:33:27:f8:db:31:1f:12:ec:d8:63:57:33:3c:93:
6b:71:6b:be:0d:4d:51:ec:d2:fd:88:65:66:b0:d6:
61:2b:0d:27:6d:8e:72:96:60:78:f1:7a:56:e7:02:
83:03:9d:64:2e:b6:71:07:0b:93:9c:53:8d:aa:d1:
eb:6a:87:97:b8:d7:8d:33:04:c1:77:a0:d4:79:69:
7a:de:1d:de:0d:3a:92:72:c2:40:a8:64:b1:7b:11:
2a:c9:b4:d4:c6:ae:0e:cd:f6:ea:9c:7b:c7:a8:ca:
d1:71:79:7c:23:7f:85:d7:a3:e7:ab:a8:e6:5e:4c:
e5:84:b2:04:f2:ca:a1:20:d2:b5:48:eb:e5:dd:43:
65:24:d9:6b:1c:43:3e:65:03:9f:6c:92:db:d2:cc:
5c:47:81:91:36:38:ba:0b:92:23:be:6b:d8:b0:d9:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:54:92:9F:6D:C4:63:5D:94:56:AE:66:D3:31:00:EE:95:6A:C4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mq1Ukp9txGNdlFauZtMxAO6VasQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.86.0-91.242.93.255
91.242.96.0/24
91.242.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7c:26:de:81:40:d4:68:86:0a:2c:27:9b:50:15:d7:d8:43:
23:fd:68:79:e9:28:b5:f7:7e:ee:4a:9c:de:89:7e:ff:6b:e5:
6a:42:c2:e0:d9:c2:08:5f:80:34:04:89:bd:0a:21:ab:83:c8:
dc:6e:9e:4f:ba:f8:f3:87:ec:fd:2c:65:05:14:77:55:aa:b8:
24:e6:84:be:42:30:f3:25:15:7b:b1:f4:e1:63:97:5d:98:a4:
db:18:45:85:76:cd:b4:0a:ad:f5:07:1c:d2:7a:90:bc:64:3a:
c9:c7:67:13:a8:90:14:54:f2:f8:79:2e:b9:f1:f5:98:a3:eb:
80:d4:5d:e0:c4:a0:70:5e:ca:e6:5f:db:db:0b:27:c9:3c:06:
28:02:8f:9c:83:9b:da:dc:e0:b3:b1:25:b4:a4:ce:4c:b7:19:
d7:ac:41:73:7a:10:3a:f1:74:bf:b6:39:ed:02:db:40:f6:bb:
eb:5d:1c:44:e1:bb:b1:74:48:db:ea:43:1e:ec:ba:63:f5:f9:
c6:50:fe:7b:87:01:11:ad:9c:b4:2e:10:22:9c:fc:73:91:99:
b8:47:6f:b7:ab:ba:1e:ba:f5:0f:cf:ea:51:c8:e1:14:39:52:
f9:97:5e:9b:04:e7:db:0c:21:d3:70:02:70:49:87:16:d8:b5:
ec:47:cf:c6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY4vfyOsqifOJcolfFFfo+SVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMzExMjE1MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWFkNTQ5MjlmNmRjNDYzNWQ5NDU2YWU2NmQzMzEwMGVlOTU2YWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcuvPUuylp5L4zXH0dp6AsMoNPNL
Bt+JxHm6WXGY0EAY7ga7GymozD7H9uYr1gR3r9Mkb9w/Otqj1J5xjsSYM5HsKeZ0
hpXYA1mGe0fpODEPZ/Zar6enNkfPMyf42zEfEuzYY1czPJNrcWu+DU1R7NL9iGVm
sNZhKw0nbY5ylmB48XpW5wKDA51kLrZxBwuTnFONqtHraoeXuNeNMwTBd6DUeWl6
3h3eDTqScsJAqGSxexEqybTUxq4OzfbqnHvHqMrRcXl8I3+F16Pnq6jmXkzlhLIE
8sqhINK1SOvl3UNlJNlrHEM+ZQOfbJLb0sxcR4GRNji6C5IjvmvYsNkdtQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJqtVJKfbcRjXZRWrmbTMQDulWrEMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvbXExVWtwOXR4R05kbEZhdVp0TXhBTzZWYXNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFb8lYD
BAFb8lwDBABb8mADBABb8mowDQYJKoZIhvcNAQELBQADggEBACx8Jt6BQNRohgos
J5tQFdfYQyP9aHnpKLX3fu5KnN6Jfv9r5WpCwuDZwghfgDQEib0KIauDyNxunk+6
+POH7P0sZQUUd1WquCTmhL5CMPMlFXux9OFjl12YpNsYRYV2zbQKrfUHHNJ6kLxk
OsnHZxOokBRU8vh5Lrnx9Zij64DUXeDEoHBeyuZf29sLJ8k8BigCj5yDm9rc4LOx
JbSkzky3GdesQXN6EDrxdL+2Oe0C20D2u+tdHEThu7F0SNvqQx7sumP1+cZQ/nuH
ARGtnLQuECKc/HORmbhHb7eruh669Q/P6lHI4RQ5UvmXXpsE59sMIdNwAnBJhxbY
texHz8Y=
-----END CERTIFICATE-----
Generated at Tue Mar 12 08:44:19 2024 by rpki-client on console-fra.rpki-client.org