Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/q2mDBd9j7BBkT6SIyHsCFc7icyw.roa
File: q2mDBd9j7BBkT6SIyHsCFc7icyw.roa (raw, json)
Hash identifier: uio8Vqek0fVtOsZMULyEis6WbgvxbNM970++u7yCr48=
Subject key identifier: AB:69:83:05:DF:63:EC:10:64:4F:A4:88:C8:7B:02:15:CE:E2:73:2C
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 018571556189EDEECB183FB4C720D2188636
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/q2mDBd9j7BBkT6SIyHsCFc7icyw.roa
Signing time: Mon 02 Jan 2023 07:14:58 +0000
ROA not before: Mon 02 Jan 2023 07:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41666
IP address blocks: 91.216.79.0/24 maxlen: 32
2001:67c:8e4::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:61:89:ed:ee:cb:18:3f:b4:c7:20:d2:18:86:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jan 2 07:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab698305df63ec10644fa488c87b0215cee2732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:82:e9:ad:57:c7:a8:95:5b:82:fd:bf:ec:
37:78:98:5a:56:e1:04:ef:9e:e3:5e:8c:b7:03:a3:
b1:08:0d:fc:fe:8d:c2:ca:fa:f2:c6:23:59:c6:e4:
d1:0c:77:b1:c8:67:8e:9c:70:79:65:26:77:6b:5c:
fc:01:96:d5:f3:5b:2a:96:5a:75:b9:8a:cc:36:00:
23:a1:26:c4:ad:34:05:53:bd:68:02:b0:70:8c:2b:
22:78:6d:78:2f:a8:20:c6:92:f1:5b:7b:2a:3e:ce:
59:cc:29:7d:4f:3c:8b:db:e0:1d:ee:f8:96:1f:33:
17:b1:b5:34:3f:2e:4f:af:a0:5e:a3:7e:63:ed:ad:
3f:57:cb:70:88:e4:ce:89:58:35:89:a1:9a:d3:bc:
37:f1:b6:8c:58:0d:2c:b5:ef:10:3e:00:d2:82:30:
fb:c0:c9:dd:22:91:98:44:44:14:73:51:19:3f:67:
32:e7:b6:71:0a:82:23:d9:e0:6a:50:e2:06:db:b3:
d5:06:94:8c:4f:c1:73:18:47:da:a4:90:58:ce:76:
86:28:44:1b:66:f2:68:6e:f3:9d:06:fa:b5:74:a6:
2e:97:1a:9c:83:be:7a:e0:f0:ae:6d:da:43:35:96:
a0:3a:e0:4c:8d:d3:d9:2e:89:20:da:4d:db:ca:e9:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:83:05:DF:63:EC:10:64:4F:A4:88:C8:7B:02:15:CE:E2:73:2C
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/q2mDBd9j7BBkT6SIyHsCFc7icyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.79.0/24
IPv6:
2001:67c:8e4::/48
Signature Algorithm: sha256WithRSAEncryption
11:d7:4c:75:a6:71:34:22:a0:35:64:40:ad:d0:cb:c8:f5:aa:
e6:d1:c7:9a:ff:48:a5:25:ec:0b:f6:64:95:ed:60:8c:f3:a5:
0d:c5:b5:7e:3f:aa:ea:98:89:b4:74:d7:34:0b:f8:11:c0:b7:
d4:20:01:c4:75:89:70:0f:f2:49:35:e0:44:ef:72:c1:68:9b:
a8:1b:36:7e:ea:73:b2:34:f2:a3:21:3a:5b:f4:95:a7:b9:2a:
e4:42:74:40:bb:07:8d:cb:ad:b6:72:a6:1b:34:6e:5d:da:49:
9b:39:72:be:72:f2:d2:a0:b2:d5:c0:af:e1:aa:44:e7:a3:b3:
b2:e6:e2:ec:59:e4:fc:ce:c5:68:a4:e4:84:02:aa:b9:ad:7f:
f6:18:9c:ee:7c:2d:d9:cf:c5:61:30:5e:25:1a:5f:fc:e9:e9:
52:be:52:d9:ce:b8:06:ca:d1:c7:44:96:54:50:94:25:7c:d8:
e4:f4:b2:94:97:5d:a8:6c:73:10:34:10:25:b7:9f:f5:aa:33:
10:54:e4:ff:61:d7:78:49:ba:c5:06:71:12:3d:2a:70:7d:25:
4a:a7:69:a2:a9:4c:d8:55:df:80:37:d4:09:fd:1d:16:41:98:
2a:12:db:92:ad:02:bc:81:b8:85:49:51:99:38:86:19:b1:f4:
10:cc:ea:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxVWGJ7e7LGD+0xyDSGIY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy
NTIyYzUwHhcNMjMwMTAyMDcxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjY5ODMwNWRmNjNlYzEwNjQ0ZmE0ODhjODdiMDIxNWNlZTI3MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJCC6a1Xx6iVW4L9v+w3eJhaVuEE
757jXoy3A6OxCA38/o3CyvryxiNZxuTRDHexyGeOnHB5ZSZ3a1z8AZbV81sqllp1
uYrMNgAjoSbErTQFU71oArBwjCsieG14L6ggxpLxW3sqPs5ZzCl9TzyL2+Ad7viW
HzMXsbU0Py5Pr6Beo35j7a0/V8twiOTOiVg1iaGa07w38baMWA0ste8QPgDSgjD7
wMndIpGYREQUc1EZP2cy57ZxCoIj2eBqUOIG27PVBpSMT8FzGEfapJBYznaGKEQb
ZvJobvOdBvq1dKYulxqcg7564PCubdpDNZagOuBMjdPZLokg2k3byunJLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKtpgwXfY+wQZE+kiMh7AhXO4nMsMB8GA1UdIwQY
MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt
M2E1NzY4MDIxNDE4LzEvcTJtREJkOWo3QkJrVDZTSXlIc0NGYzdpY3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4
LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9hPMA8E
AgACMAkDBwAgAQZ8COQwDQYJKoZIhvcNAQELBQADggEBABHXTHWmcTQioDVkQK3Q
y8j1qubRx5r/SKUl7Av2ZJXtYIzzpQ3FtX4/quqYibR01zQL+BHAt9QgAcR1iXAP
8kk14ETvcsFom6gbNn7qc7I08qMhOlv0lae5KuRCdEC7B43LrbZyphs0bl3aSZs5
cr5y8tKgstXAr+GqROejs7Lm4uxZ5PzOxWik5IQCqrmtf/YYnO58LdnPxWEwXiUa
X/zp6VK+UtnOuAbK0cdEllRQlCV82OT0spSXXahscxA0ECW3n/WqMxBU5P9h13hJ
usUGcRI9KnB9JUqnaaKpTNhV34A31An9HRZBmCoS25KtAryBuIVJUZk4hhmx9BDM
6nk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:16 2024 by rpki-client on console-fra.rpki-client.org