Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/oQHQVHl-orwGOluxmyjrTswa5A0.roa
File: oQHQVHl-orwGOluxmyjrTswa5A0.roa (raw, json)
Hash identifier: gIKoBk5UIkqAQYF46Q8tydOqAU1QP/O064yYqpSx7ZU=
Subject key identifier: A1:01:D0:54:79:7E:A2:BC:06:3A:5B:B1:9B:28:EB:4E:CC:1A:E4:0D
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0185723A19A477B06B7C6599CAE7F572C135
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/oQHQVHl-orwGOluxmyjrTswa5A0.roa
Signing time: Mon 02 Jan 2023 11:24:48 +0000
ROA not before: Mon 02 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 91.192.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:19:a4:77:b0:6b:7c:65:99:ca:e7:f5:72:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 2 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a101d054797ea2bc063a5bb19b28eb4ecc1ae40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:6a:b8:98:58:f4:92:ed:ad:c3:17:a4:9d:
76:b9:4d:66:3c:a2:ca:71:69:a0:a2:d4:b8:0d:57:
01:06:99:64:e0:af:53:00:02:1f:b1:46:17:5a:70:
ff:ca:95:91:a8:ac:f3:bf:9b:47:dd:83:ab:46:d1:
82:4f:9b:7b:35:d2:f1:4f:bf:cc:9e:1f:c1:09:2d:
b9:f7:d3:3f:83:1d:7e:8c:f9:90:5a:04:dc:b3:94:
58:90:71:a2:b2:7f:96:63:fc:22:35:97:72:e2:e1:
41:48:e5:17:46:b9:fa:02:ca:9b:ef:5d:eb:30:be:
2c:b9:af:b3:40:4b:95:e1:a2:00:b1:ae:a0:6f:e1:
4a:12:0b:79:f3:1c:b0:05:2e:72:ee:60:a8:3c:41:
87:22:eb:f3:e8:e5:c0:23:47:21:11:0b:64:6c:e7:
b0:4d:a9:09:75:f1:86:04:c5:c7:bc:f7:b5:92:a2:
32:d1:45:12:82:de:a9:01:6f:fa:18:9b:56:18:dd:
d3:3a:8b:68:67:fb:85:84:78:09:6c:74:c6:e9:bf:
7a:8a:3b:fc:df:1c:fc:e2:4e:21:5b:fd:c4:de:2c:
2e:31:9e:75:49:06:e3:46:4c:cb:67:cd:bb:2a:76:
08:14:a5:15:e7:63:d5:e1:55:d4:d7:51:22:2f:41:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:D0:54:79:7E:A2:BC:06:3A:5B:B1:9B:28:EB:4E:CC:1A:E4:0D
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/oQHQVHl-orwGOluxmyjrTswa5A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.107.0/24
Signature Algorithm: sha256WithRSAEncryption
70:24:4f:09:ea:18:d7:35:31:04:6a:a9:36:95:93:40:60:35:
1e:01:63:f5:39:c9:c1:ec:0b:c2:94:fd:72:37:f0:12:43:c0:
fd:a8:cf:74:66:7a:e1:ae:ca:63:c2:d1:d6:2c:a2:58:30:21:
e7:d6:c1:ca:e9:de:24:8a:d3:f5:28:92:1c:ed:f5:77:a7:29:
4a:69:7e:14:6e:29:27:a5:3f:70:5b:69:43:f7:6a:a5:ad:90:
31:87:b5:74:5e:1a:8c:57:96:9c:b3:37:68:1e:dc:38:16:a1:
2e:f0:69:d4:b3:b5:b0:13:eb:5c:4c:70:cf:4a:49:7e:65:33:
43:c1:ac:04:76:0a:d2:f8:20:e5:72:ba:79:c9:b7:ee:90:db:
60:7b:56:f4:b1:cf:20:e2:b0:e6:69:98:31:ed:67:c0:9c:ad:
19:8b:2c:83:6c:b5:1b:70:2b:f8:cf:d0:7e:fd:9d:68:88:9a:
f2:7d:f9:dc:07:ad:8a:3b:94:db:ee:94:1a:14:06:c4:fb:62:
ae:68:c4:49:5a:5e:51:74:ef:26:ff:af:84:9a:39:de:49:ff:
41:49:a4:68:ff:aa:0f:8f:1a:ce:13:db:a9:3d:87:66:cf:6e:
13:af:21:f1:7c:7b:18:f1:c2:a2:4f:21:34:56:77:b3:16:e5:
61:72:b0:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyOhmkd7BrfGWZyuf1csE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjMwMTAyMTEyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTAxZDA1NDc5N2VhMmJjMDYzYTViYjE5YjI4ZWI0ZWNjMWFlNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvhquJhY9JLtrcMXpJ12uU1mPKLK
cWmgotS4DVcBBplk4K9TAAIfsUYXWnD/ypWRqKzzv5tH3YOrRtGCT5t7NdLxT7/M
nh/BCS2599M/gx1+jPmQWgTcs5RYkHGisn+WY/wiNZdy4uFBSOUXRrn6Asqb713r
ML4sua+zQEuV4aIAsa6gb+FKEgt58xywBS5y7mCoPEGHIuvz6OXAI0chEQtkbOew
TakJdfGGBMXHvPe1kqIy0UUSgt6pAW/6GJtWGN3TOotoZ/uFhHgJbHTG6b96ijv8
3xz84k4hW/3E3iwuMZ51SQbjRkzLZ827KnYIFKUV52PV4VXU11EiL0FVpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEB0FR5fqK8BjpbsZso607MGuQNMB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvb1FIUVZIbC1vcndHT2x1eG15anJUc3dhNUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8BrMA0G
CSqGSIb3DQEBCwUAA4IBAQBwJE8J6hjXNTEEaqk2lZNAYDUeAWP1OcnB7AvClP1y
N/ASQ8D9qM90ZnrhrspjwtHWLKJYMCHn1sHK6d4kitP1KJIc7fV3pylKaX4Ubikn
pT9wW2lD92qlrZAxh7V0XhqMV5acszdoHtw4FqEu8GnUs7WwE+tcTHDPSkl+ZTND
wawEdgrS+CDlcrp5ybfukNtge1b0sc8g4rDmaZgx7WfAnK0ZiyyDbLUbcCv4z9B+
/Z1oiJryffncB62KO5Tb7pQaFAbE+2KuaMRJWl5RdO8m/6+EmjneSf9BSaRo/6oP
jxrOE9upPYdmz24TryHxfHsY8cKiTyE0VnezFuVhcrAq
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:52 2024 by rpki-client on console-fra.rpki-client.org