Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/K0tgPQsr0AqLWocvBhyCYgnddO4.roa
File: K0tgPQsr0AqLWocvBhyCYgnddO4.roa (raw, json)
Hash identifier: eDPASbTvghMuIQueu+9p+ZIM6k2oiGBkP8y5HG9/siM=
Subject key identifier: 2B:4B:60:3D:0B:2B:D0:0A:8B:5A:87:2F:06:1C:82:62:09:DD:74:EE
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 0188735E2E182219B74AA7627C5C9F9450CA
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/K0tgPQsr0AqLWocvBhyCYgnddO4.roa
Signing time: Wed 31 May 2023 19:52:11 +0000
ROA not before: Wed 31 May 2023 19:52:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 91.184.46.0/23 maxlen: 23
91.184.48.0/20 maxlen: 20
2a01:198:ff00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:5e:2e:18:22:19:b7:4a:a7:62:7c:5c:9f:94:50:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: May 31 19:52:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b4b603d0b2bd00a8b5a872f061c826209dd74ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:af:9b:b9:59:22:ad:60:85:81:c4:01:83:
52:6f:80:c0:87:04:3d:d1:08:bc:fd:21:87:51:bb:
64:2c:49:4a:2c:e8:37:f5:70:44:2b:ce:9c:44:6a:
92:73:ed:72:24:ed:71:fb:08:ca:79:a3:6d:25:2c:
aa:36:e4:ce:21:13:aa:bf:2a:cb:93:e6:a2:95:7a:
4b:73:bf:66:0b:b0:8f:af:6c:95:5f:44:d6:05:f3:
e7:e8:d7:ef:09:50:7d:23:ed:c8:78:05:d4:91:c1:
3d:b4:48:cb:2f:ab:55:4b:28:54:e9:67:f5:af:0a:
19:9e:4b:61:4a:76:7c:18:00:40:f1:42:bd:5c:d5:
52:e4:64:ff:b3:2e:a3:04:37:83:a6:c4:28:27:78:
4c:c7:03:2e:3b:28:dc:41:bf:21:09:75:59:91:f4:
dc:61:43:8f:bb:96:e1:1e:ff:21:dc:b0:c6:55:5e:
3b:42:e6:52:5d:c0:5e:eb:3e:4d:2c:e3:28:9a:91:
fc:5c:f5:89:9c:e7:00:1c:c0:54:08:c4:7e:4e:e4:
63:40:7a:46:da:bc:11:31:86:f7:39:86:e3:7b:7a:
39:aa:4a:f7:f3:c2:bb:ce:37:6f:92:d1:27:e2:4b:
7d:d9:87:99:4b:9d:4e:2b:3e:9b:33:ce:56:63:72:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:60:3D:0B:2B:D0:0A:8B:5A:87:2F:06:1C:82:62:09:DD:74:EE
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/K0tgPQsr0AqLWocvBhyCYgnddO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.46.0-91.184.63.255
IPv6:
2a01:198:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
84:d9:e3:20:40:0d:75:0f:71:27:54:88:31:45:41:4e:f2:d6:
97:ec:30:7b:9d:73:86:b3:33:36:69:16:df:ed:38:66:65:99:
0c:86:e9:07:39:2c:28:c3:ae:44:98:90:99:aa:70:8f:f5:41:
5f:7b:84:69:bd:df:5a:c0:7f:19:36:bc:02:b2:35:6b:17:01:
65:20:8b:da:a9:ca:18:b5:21:07:6d:5e:1e:2c:58:48:28:73:
d1:99:f8:b8:b8:d5:3b:cf:a3:df:df:06:85:96:83:8e:e1:c6:
3a:93:30:01:86:f3:89:21:f4:7f:99:ba:8f:b9:62:0a:a3:62:
f8:b9:6e:af:a0:df:64:83:02:05:72:4d:05:ec:70:21:ad:7b:
0c:04:70:e6:d0:68:e3:b6:d1:12:f2:36:dc:3e:1f:33:5c:f6:
fd:55:8b:f4:cd:60:78:66:9c:07:fe:94:d3:3a:6c:f8:34:b4:
3c:10:d4:37:4a:a8:cf:e2:51:ae:3b:9a:a6:c5:8b:41:14:fa:
4c:2a:0a:6c:90:04:7d:e3:23:2a:e8:2d:b9:ce:ee:14:70:68:
89:0c:f4:fc:2b:3a:07:fe:08:84:24:71:7d:62:8c:88:83:d5:
a9:97:15:c5:b4:59:ea:e2:a2:5f:27:f0:bc:96:5a:6e:26:ca:
0f:b8:f6:5a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYhzXi4YIhm3SqdifFyflFDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjMwNTMxMTk1MjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjRiNjAzZDBiMmJkMDBhOGI1YTg3MmYwNjFjODI2MjA5ZGQ3NGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy6vm7lZIq1ghYHEAYNSb4DAhwQ9
0Qi8/SGHUbtkLElKLOg39XBEK86cRGqSc+1yJO1x+wjKeaNtJSyqNuTOIROqvyrL
k+ailXpLc79mC7CPr2yVX0TWBfPn6NfvCVB9I+3IeAXUkcE9tEjLL6tVSyhU6Wf1
rwoZnkthSnZ8GABA8UK9XNVS5GT/sy6jBDeDpsQoJ3hMxwMuOyjcQb8hCXVZkfTc
YUOPu5bhHv8h3LDGVV47QuZSXcBe6z5NLOMompH8XPWJnOcAHMBUCMR+TuRjQHpG
2rwRMYb3OYbje3o5qkr388K7zjdvktEn4kt92YeZS51OKz6bM85WY3JohQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCtLYD0LK9AKi1qHLwYcgmIJ3XTuMB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xL0swdGdQUXNyMEFxTFdvY3ZCaHlDWWduZGRPNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRkLTY2YmRmZmE4YmRj
MS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMBQEAgABMA4wDAMEAVu4
LgMEBlu4ADAOBAIAAjAIAwYAKgEBmP8wDQYJKoZIhvcNAQELBQADggEBAITZ4yBA
DXUPcSdUiDFFQU7y1pfsMHudc4azMzZpFt/tOGZlmQyG6Qc5LCjDrkSYkJmqcI/1
QV97hGm931rAfxk2vAKyNWsXAWUgi9qpyhi1IQdtXh4sWEgoc9GZ+Li41TvPo9/f
BoWWg47hxjqTMAGG84kh9H+Zuo+5YgqjYvi5bq+g32SDAgVyTQXscCGtewwEcObQ
aOO20RLyNtw+HzNc9v1Vi/TNYHhmnAf+lNM6bPg0tDwQ1DdKqM/iUa47mqbFi0EU
+kwqCmyQBH3jIyroLbnO7hRwaIkM9PwrOgf+CIQkcX1ijIiD1amXFcW0Weriol8n
8LyWWm4myg+49lo=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:27 2024 by rpki-client on console-fra.rpki-client.org