Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/91Hb0Ek8XlB4TfTmW43cvYZ2vUM.roa
File: 91Hb0Ek8XlB4TfTmW43cvYZ2vUM.roa (raw, json)
Hash identifier: xZXYd8hxPfn9+Rn+1bamvIr6C67SCbRhbGAgaOAB2q4=
Subject key identifier: F7:51:DB:D0:49:3C:5E:50:78:4D:F4:E6:5B:8D:DC:BD:86:76:BD:43
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 01896499DABF7D0DBAC7F6BE926987963465
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/91Hb0Ek8XlB4TfTmW43cvYZ2vUM.roa
Signing time: Mon 17 Jul 2023 16:05:51 +0000
ROA not before: Mon 17 Jul 2023 16:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.93.14.0/24 maxlen: 24
45.93.15.0/24 maxlen: 24
45.93.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:99:da:bf:7d:0d:ba:c7:f6:be:92:69:87:96:34:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jul 17 16:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f751dbd0493c5e50784df4e65b8ddcbd8676bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2a:7c:93:f8:b4:7d:71:15:ea:b0:24:d8:79:
cb:9f:61:1b:a7:a1:77:d7:09:19:05:17:b8:00:c8:
3a:56:23:85:84:20:f0:50:0c:42:a3:36:70:9e:bc:
5e:07:08:66:8e:e6:83:5f:a9:db:e4:81:4a:d5:47:
1e:17:66:5d:64:95:f2:22:73:05:17:60:22:28:11:
d2:08:66:ed:12:e3:07:81:e8:f5:01:9e:cb:98:9d:
4a:a3:54:b7:ab:a0:21:84:73:4e:4b:42:7e:06:81:
e0:1d:13:0f:cf:bd:0d:2d:bf:0a:ae:0e:d3:a7:45:
49:ea:0d:2c:62:43:c1:35:b9:d3:f1:9d:4c:6a:1b:
b9:37:a0:9a:77:95:2a:75:c4:fe:54:eb:ca:04:e2:
55:c7:be:3f:00:3b:91:fe:4d:1a:6d:4b:3c:06:1d:
0a:94:24:de:59:97:6a:06:57:e6:eb:21:2f:ee:45:
7e:f3:78:4f:ff:42:bc:c4:cc:42:55:c4:45:b9:bb:
01:e6:0b:a4:39:af:2c:99:42:4f:5f:03:b1:2a:8b:
bc:a9:bf:20:24:bd:5e:6c:a9:6a:cf:bf:7d:2c:8e:
fb:55:42:82:44:f4:d7:79:1a:84:0c:04:a6:49:02:
fe:d6:ad:26:c8:88:26:c1:82:76:9b:93:cb:74:7e:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:DB:D0:49:3C:5E:50:78:4D:F4:E6:5B:8D:DC:BD:86:76:BD:43
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/91Hb0Ek8XlB4TfTmW43cvYZ2vUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.12.0/24
45.93.14.0/23
Signature Algorithm: sha256WithRSAEncryption
29:84:14:e4:da:98:3c:53:44:21:81:c7:3e:21:68:4f:cc:1b:
90:24:cf:67:8b:7a:5b:50:d1:8f:82:23:70:e7:f1:ce:c4:a9:
a6:af:ca:0e:3e:5d:44:73:6a:57:d0:ed:01:55:31:16:e9:58:
c3:b0:57:05:11:c9:39:26:40:e1:16:90:5d:8e:54:37:3b:dd:
6a:14:8f:d9:7c:74:f2:48:a7:be:63:20:dd:7b:05:6b:01:90:
40:11:6b:91:71:a5:58:44:dd:f4:28:30:50:01:ef:2a:63:8e:
25:ed:80:f0:0d:b1:2e:5f:1d:a3:ea:d6:10:70:57:af:76:d7:
cd:a3:2f:61:3d:d8:5a:28:cd:17:9e:f0:5b:1c:55:eb:b6:0a:
c8:47:e6:1f:d1:7a:00:8e:c5:3b:a0:04:40:00:36:39:73:ad:
d5:9c:90:2f:18:34:89:6a:63:14:aa:7d:ec:a5:cd:d2:6a:84:
23:fe:87:31:41:0a:46:ce:d6:5d:c3:a6:c5:af:3e:b8:05:7a:
56:0d:28:42:80:c2:f3:14:21:ff:e3:b6:fc:43:2e:0c:be:7f:
48:fb:d3:ee:7e:4b:d1:f2:70:3f:bc:d1:77:50:c9:28:d5:48:
84:fc:ea:c6:8e:b8:a8:2b:82:63:54:64:9b:6e:ee:19:34:e0:
d1:d3:52:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlkmdq/fQ26x/a+kmmHljRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YmUxODFhYWJkYjE5NTUxM2EyNmM2N2I2MjFlMjk4Njgx
OGQwM2QwHhcNMjMwNzE3MTYwNTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzUxZGJkMDQ5M2M1ZTUwNzg0ZGY0ZTY1YjhkZGNiZDg2NzZiZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyp8k/i0fXEV6rAk2HnLn2Ebp6F3
1wkZBRe4AMg6ViOFhCDwUAxCozZwnrxeBwhmjuaDX6nb5IFK1UceF2ZdZJXyInMF
F2AiKBHSCGbtEuMHgej1AZ7LmJ1Ko1S3q6AhhHNOS0J+BoHgHRMPz70NLb8Krg7T
p0VJ6g0sYkPBNbnT8Z1Mahu5N6Cad5UqdcT+VOvKBOJVx74/ADuR/k0abUs8Bh0K
lCTeWZdqBlfm6yEv7kV+83hP/0K8xMxCVcRFubsB5gukOa8smUJPXwOxKou8qb8g
JL1ebKlqz799LI77VUKCRPTXeRqEDASmSQL+1q0myIgmwYJ2m5PLdH6CDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPdR29BJPF5QeE305luN3L2Gdr1DMB8GA1UdIwQY
MBaAFOm+GBqr2xlVE6JsZ7Yh4phoGNA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmI0WUdxdmJHVlVUb214bnRpSGltR2dZMEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iZWNkMTYtYTllOS00Y2Q2LTgwMGUt
ZjAwOGRkODNlMzJhLzEvOTFIYjBFazhYbEI0VGZUbVc0M2N2WVoydlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iZWNkMTYtYTllOS00Y2Q2LTgwMGUtZjAwOGRkODNlMzJh
LzEvNmI0WUdxdmJHVlVUb214bnRpSGltR2dZMEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV0MAwQB
LV0OMA0GCSqGSIb3DQEBCwUAA4IBAQAphBTk2pg8U0Qhgcc+IWhPzBuQJM9ni3pb
UNGPgiNw5/HOxKmmr8oOPl1Ec2pX0O0BVTEW6VjDsFcFEck5JkDhFpBdjlQ3O91q
FI/ZfHTySKe+YyDdewVrAZBAEWuRcaVYRN30KDBQAe8qY44l7YDwDbEuXx2j6tYQ
cFevdtfNoy9hPdhaKM0XnvBbHFXrtgrIR+Yf0XoAjsU7oARAADY5c63VnJAvGDSJ
amMUqn3spc3SaoQj/ocxQQpGztZdw6bFrz64BXpWDShCgMLzFCH/47b8Qy4Mvn9I
+9PufkvR8nA/vNF3UMko1UiE/OrGjrioK4JjVGSbbu4ZNODR01Ki
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-fra.rpki-client.org