Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UNw6-Ry6fUnFRCjL67LfPvDO3DM.roa
File: UNw6-Ry6fUnFRCjL67LfPvDO3DM.roa (raw, json)
Hash identifier: huIq/asK7IBYTdLn9C8rZgge3D0ioJceEiQR+LYOosQ=
Subject key identifier: 50:DC:3A:F9:1C:BA:7D:49:C5:44:28:CB:EB:B2:DF:3E:F0:CE:DC:33
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018F863A1524FD38E5CC39947046B2FCDDC9
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UNw6-Ry6fUnFRCjL67LfPvDO3DM.roa
Signing time: Fri 17 May 2024 11:05:04 +0000
ROA not before: Fri 17 May 2024 11:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 11:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:3a:15:24:fd:38:e5:cc:39:94:70:46:b2:fc:dd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 17 11:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50dc3af91cba7d49c54428cbebb2df3ef0cedc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:38:8d:3a:e9:b9:2d:e0:e5:d2:6b:fb:4f:
d4:00:34:50:b2:00:c8:46:48:25:12:85:30:58:1e:
ec:b4:95:ad:85:75:55:18:d5:46:1d:53:94:e7:6f:
75:5f:b1:38:bd:8f:27:82:f2:aa:72:60:c7:c4:07:
fc:91:cc:ca:84:0e:b5:8a:06:32:fb:15:17:98:10:
88:fa:b2:78:16:08:ac:10:7a:51:49:c2:26:ab:03:
b6:8b:82:83:b6:ba:f0:70:fd:27:a2:23:bd:c8:6c:
d4:ec:33:d8:50:65:74:65:25:ce:8e:9c:09:86:ca:
ec:fa:b1:46:13:8a:03:85:b2:8b:24:ea:07:84:68:
15:3e:da:07:c7:8b:d7:ec:ec:c1:6c:ed:91:84:e5:
41:2d:c8:39:e0:f5:a5:9e:3b:b1:c0:b9:a0:1e:77:
00:d8:ad:08:78:f9:f6:2c:26:9d:7c:7a:d2:f1:d8:
b2:7e:2f:66:a6:99:71:04:43:34:2d:cb:ca:6b:86:
4b:4e:76:03:d6:87:00:69:c1:1a:38:e6:34:5c:b4:
c9:1f:f6:4a:d8:75:66:ba:6b:86:54:de:65:b6:fe:
59:14:78:7c:f3:7b:fa:68:a9:75:87:84:d2:e2:43:
54:48:2e:38:d2:db:86:38:51:aa:72:a4:2f:7c:82:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:3A:F9:1C:BA:7D:49:C5:44:28:CB:EB:B2:DF:3E:F0:CE:DC:33
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UNw6-Ry6fUnFRCjL67LfPvDO3DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
Signature Algorithm: sha256WithRSAEncryption
22:b8:19:46:9b:83:c0:6e:28:a2:6b:a8:61:ad:23:a1:89:f7:
08:d7:0c:e4:e5:db:62:8f:00:00:60:95:7c:cb:9c:b9:d5:68:
19:2c:8e:fd:c5:55:2b:31:fb:38:fd:2f:de:24:65:ff:1b:66:
db:da:7d:2a:e3:a4:79:43:25:cc:05:62:26:28:60:fa:98:96:
c8:74:1a:7a:f3:9c:2b:3c:45:df:59:74:90:01:8a:59:4c:1f:
a4:b1:d9:36:41:78:75:c4:d8:fc:6e:4c:0d:70:12:2f:cb:eb:
6b:36:27:b4:ef:e2:60:63:5c:91:bf:1d:83:bf:7e:e1:08:25:
a7:f1:6d:0f:0e:3e:de:7d:75:8d:87:a7:5b:fa:68:cd:63:6b:
28:23:01:48:52:42:ce:74:c8:2c:ff:3b:96:3b:bd:2f:a5:93:
d0:39:2c:bf:a0:1e:80:0b:ee:04:ed:bc:99:8d:6a:a7:23:94:
2a:c6:e8:44:f8:db:f1:5e:00:79:f9:39:6b:0c:7c:bf:ba:a8:
d4:09:b5:95:3f:20:61:47:15:85:25:a7:ec:3e:cc:f8:a3:54:
ba:e0:91:2c:8f:53:1b:ff:29:14:0a:47:44:92:a9:7f:b5:a9:
52:ba:15:09:57:15:1f:27:86:fa:60:77:38:45:b7:14:85:03:
92:a2:f5:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+GOhUk/TjlzDmUcEay/N3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNTE3MTEwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGRjM2FmOTFjYmE3ZDQ5YzU0NDI4Y2JlYmIyZGYzZWYwY2VkYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr04jTrpuS3g5dJr+0/UADRQsgDI
RkglEoUwWB7stJWthXVVGNVGHVOU5291X7E4vY8ngvKqcmDHxAf8kczKhA61igYy
+xUXmBCI+rJ4FgisEHpRScImqwO2i4KDtrrwcP0noiO9yGzU7DPYUGV0ZSXOjpwJ
hsrs+rFGE4oDhbKLJOoHhGgVPtoHx4vX7OzBbO2RhOVBLcg54PWlnjuxwLmgHncA
2K0IePn2LCadfHrS8diyfi9mpplxBEM0LcvKa4ZLTnYD1ocAacEaOOY0XLTJH/ZK
2HVmumuGVN5ltv5ZFHh883v6aKl1h4TS4kNUSC440tuGOFGqcqQvfIJyxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDcOvkcun1JxUQoy+uy3z7wztwzMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvVU53Ni1SeTZmVW5GUkNqTDY3TGZQdkRPM0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+QMMA0G
CSqGSIb3DQEBCwUAA4IBAQAiuBlGm4PAbiiia6hhrSOhifcI1wzk5dtijwAAYJV8
y5y51WgZLI79xVUrMfs4/S/eJGX/G2bb2n0q46R5QyXMBWImKGD6mJbIdBp685wr
PEXfWXSQAYpZTB+ksdk2QXh1xNj8bkwNcBIvy+trNie07+JgY1yRvx2Dv37hCCWn
8W0PDj7efXWNh6db+mjNY2soIwFIUkLOdMgs/zuWO70vpZPQOSy/oB6AC+4E7byZ
jWqnI5QqxuhE+NvxXgB5+TlrDHy/uqjUCbWVPyBhRxWFJafsPsz4o1S64JEsj1Mb
/ykUCkdEkql/talSuhUJVxUfJ4b6YHc4RbcUhQOSovXe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:26 2024 by rpki-client on console-ams.rpki-client.org