Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/7b-8CtgK23mv0svMNN1miZzPuvk.roa
File: 7b-8CtgK23mv0svMNN1miZzPuvk.roa (raw, json)
Hash identifier: n+ULZAiHIWausUeK0GxWTU22huCGa8Ibu6TnlAapdpo=
Subject key identifier: ED:BF:BC:0A:D8:0A:DB:79:AF:D2:CB:CC:34:DD:66:89:9C:CF:BA:F9
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01919FD32C931DD6B89FC21C6D0284066250
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/7b-8CtgK23mv0svMNN1miZzPuvk.roa
Signing time: Thu 29 Aug 2024 20:28:22 +0000
ROA not before: Thu 29 Aug 2024 20:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 91.238.180.0/24 maxlen: 24
91.238.181.0/24 maxlen: 24
91.239.208.0/24 maxlen: 24
194.24.161.0/24 maxlen: 24
2a12:5e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Sep 2024 20:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:d3:2c:93:1d:d6:b8:9f:c2:1c:6d:02:84:06:62:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Aug 29 20:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edbfbc0ad80adb79afd2cbcc34dd66899ccfbaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:18:56:1f:aa:c5:13:8f:d3:8f:2d:d7:b9:
e0:51:72:ef:28:bb:14:49:23:7b:e2:4b:12:bb:36:
67:90:13:f1:ba:33:3a:b9:28:a6:30:cc:51:4a:c1:
96:da:df:bb:8f:65:10:6b:fb:33:5b:d3:37:e0:55:
3c:e9:2b:3b:b9:42:68:e2:b5:30:60:b2:cb:03:10:
b8:c9:9f:55:11:26:00:b1:60:82:e5:75:a6:88:93:
62:7b:4c:5a:14:00:9a:30:cc:07:84:2c:18:4f:23:
f5:3c:97:48:60:02:c5:84:93:51:94:94:b6:df:96:
6e:1d:22:6a:2f:b7:ba:a6:ad:cb:91:f9:02:0a:d5:
14:cb:97:b4:7a:87:c0:ce:b5:74:6a:3a:a1:e2:94:
09:b2:0a:6f:ef:0c:0e:09:8c:2e:78:f7:80:7b:fc:
42:c5:08:f8:4c:8a:4b:ba:ea:62:06:2d:8b:e6:7a:
3d:5d:a3:a4:e1:78:47:55:dc:a5:7c:b1:4d:37:77:
4a:e6:cd:58:c8:b0:68:68:3c:84:1b:dc:7c:b3:a9:
53:7a:c1:77:e3:a6:f4:60:c1:8e:9b:63:27:5b:a6:
89:cc:33:3f:16:2e:d4:b9:ec:43:0d:e4:1e:b0:94:
7a:34:c9:90:d7:df:0a:b5:a3:f8:1e:32:e3:2f:97:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:BC:0A:D8:0A:DB:79:AF:D2:CB:CC:34:DD:66:89:9C:CF:BA:F9
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/7b-8CtgK23mv0svMNN1miZzPuvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.180.0/23
91.239.208.0/24
194.24.161.0/24
IPv6:
2a12:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
97:e5:42:b0:e6:b7:d7:10:68:e3:3c:8a:2a:6c:26:42:5d:9f:
95:1e:8d:fc:0f:71:92:f9:89:05:a1:3d:41:39:7d:49:8d:12:
ae:4f:56:8d:e8:c3:b5:be:cf:d0:67:92:eb:22:14:a9:69:7c:
11:c1:77:26:82:57:dd:75:46:c6:f1:8d:c1:04:81:39:26:91:
74:71:e5:1a:27:ae:60:28:bb:2e:d3:39:cd:b0:dc:52:0f:aa:
0b:d7:5c:e0:c5:2d:e8:e3:94:8b:34:c5:d9:47:d5:46:f2:86:
5c:df:49:03:cd:77:83:a3:9d:ab:ae:f4:29:12:89:65:12:65:
f4:6f:bf:45:99:92:05:b9:ca:af:8d:be:71:67:5c:72:55:94:
7e:51:e9:83:ff:c1:b3:ee:0e:66:3c:dd:a5:70:9e:8e:bc:e6:
14:fb:26:36:f1:89:0f:95:65:a8:63:00:c4:76:11:bc:ac:b6:
95:98:fb:4f:72:98:0a:fe:b4:4a:d8:21:98:14:10:1e:08:86:
61:72:db:f0:87:3e:53:55:57:ae:a5:b0:e5:b6:2e:d0:86:ae:
49:e7:02:c1:70:7d:c0:75:23:3b:96:a9:94:77:3d:7a:95:83:
11:d5:22:20:2b:66:a2:09:c9:d1:98:09:db:79:6e:33:72:3f:
13:12:79:3d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZGf0yyTHda4n8IcbQKEBmJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjQwODI5MjAyODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGJmYmMwYWQ4MGFkYjc5YWZkMmNiY2MzNGRkNjY4OTljY2ZiYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqcYVh+qxROP048t17ngUXLvKLsU
SSN74ksSuzZnkBPxujM6uSimMMxRSsGW2t+7j2UQa/szW9M34FU86Ss7uUJo4rUw
YLLLAxC4yZ9VESYAsWCC5XWmiJNie0xaFACaMMwHhCwYTyP1PJdIYALFhJNRlJS2
35ZuHSJqL7e6pq3LkfkCCtUUy5e0eofAzrV0ajqh4pQJsgpv7wwOCYwuePeAe/xC
xQj4TIpLuupiBi2L5no9XaOk4XhHVdylfLFNN3dK5s1YyLBoaDyEG9x8s6lTesF3
46b0YMGOm2MnW6aJzDM/Fi7UuexDDeQesJR6NMmQ198KtaP4HjLjL5dv/wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFO2/vArYCtt5r9LLzDTdZomcz7r5MB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvN2ItOEN0Z0syM212MHN2TU5OMW1pWnpQdXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBW+60AwQA
W+/QAwQAwhihMA0EAgACMAcDBQAqEl5AMA0GCSqGSIb3DQEBCwUAA4IBAQCX5UKw
5rfXEGjjPIoqbCZCXZ+VHo38D3GS+YkFoT1BOX1JjRKuT1aN6MO1vs/QZ5LrIhSp
aXwRwXcmglfddUbG8Y3BBIE5JpF0ceUaJ65gKLsu0znNsNxSD6oL11zgxS3o45SL
NMXZR9VG8oZc30kDzXeDo52rrvQpEollEmX0b79FmZIFucqvjb5xZ1xyVZR+UemD
/8Gz7g5mPN2lcJ6OvOYU+yY28YkPlWWoYwDEdhG8rLaVmPtPcpgK/rRK2CGYFBAe
CIZhctvwhz5TVVeupbDlti7Qhq5J5wLBcH3AdSM7lqmUdz16lYMR1SIgK2aiCcnR
mAnbeW4zcj8TEnk9
-----END CERTIFICATE-----
Generated at Thu Sep 26 22:07:59 2024 by rpki-client on console-fra.rpki-client.org