Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/iazK8tE109nrZZwOZ4tSxAUVoYo.roa
File: iazK8tE109nrZZwOZ4tSxAUVoYo.roa (raw, json)
Hash identifier: B9vh1XSVbhsphRU1MfB0tvLtXuXw+mIgS8FM9h2ce9o=
Subject key identifier: 89:AC:CA:F2:D1:35:D3:D9:EB:65:9C:0E:67:8B:52:C4:05:15:A1:8A
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 018D2D6D4257B57AD22E456B490452FC50BC
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/iazK8tE109nrZZwOZ4tSxAUVoYo.roa
Signing time: Sun 21 Jan 2024 19:09:11 +0000
ROA not before: Sun 21 Jan 2024 19:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 91.206.11.0/24 maxlen: 24
2a10:a1c0::/32 maxlen: 32
2a10:a1c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 21 Jan 2024 19:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:6d:42:57:b5:7a:d2:2e:45:6b:49:04:52:fc:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Jan 21 19:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89accaf2d135d3d9eb659c0e678b52c40515a18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:1b:00:c8:2d:7a:ec:7e:fd:8c:57:fb:b1:
d0:af:dc:f1:67:bc:e7:b0:ff:76:93:d7:34:25:19:
d7:3a:70:08:cf:1f:25:fa:dd:fa:70:5a:58:7f:07:
33:71:bd:22:4d:43:89:67:72:3e:38:67:32:43:40:
c0:54:11:dc:9e:cf:1c:34:0d:b7:42:70:2b:48:f5:
fc:6d:00:2f:de:f6:15:8c:db:f7:a1:b4:44:5d:fe:
d7:5c:49:f4:fd:a0:f2:12:3b:5f:bc:8c:f0:7c:5e:
41:0b:a4:96:dd:ff:c6:b2:c1:91:a1:a7:be:76:61:
fa:96:41:62:ed:28:66:1c:9b:8c:bb:8b:c1:66:ff:
72:c3:ec:95:db:08:75:84:e9:f8:22:39:c2:be:7a:
15:ab:ba:73:4c:bf:80:69:2f:8c:14:c4:f0:2d:4d:
2c:7f:88:3f:f2:40:84:21:88:d3:d1:50:1f:c4:d0:
56:21:c6:51:27:38:31:12:bc:31:09:81:fc:d7:1c:
90:a0:6a:ab:40:76:2a:bf:ca:44:36:99:33:fe:65:
28:ea:24:f2:33:1a:8a:25:48:76:b1:a1:ce:77:17:
00:10:52:f2:23:b3:f1:fb:ff:5a:b4:aa:46:9c:82:
98:b8:53:7b:e3:db:5d:ee:38:93:7f:e6:c7:58:63:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:CA:F2:D1:35:D3:D9:EB:65:9C:0E:67:8B:52:C4:05:15:A1:8A
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/iazK8tE109nrZZwOZ4tSxAUVoYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.11.0/24
IPv6:
2a10:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
56:e2:01:90:c5:46:48:dc:a2:b8:a5:75:da:4c:32:ee:4a:27:
c8:d1:f2:cf:a2:52:7f:db:ee:01:8e:db:c2:27:11:80:3a:44:
5d:1a:79:6a:67:51:d4:2a:37:4b:4a:30:4a:1c:ae:d8:7b:45:
c1:51:b0:e5:67:73:4d:e5:1c:ce:e5:66:5a:5a:15:97:13:a2:
8d:96:54:21:2d:fd:dc:a8:6f:18:4e:42:8f:f2:b6:2d:2d:21:
9d:27:9b:03:4c:26:ee:7a:fe:6b:dd:6e:19:9b:53:18:ac:9e:
25:60:25:b4:b8:40:e2:22:09:7b:6c:2b:6b:f4:38:00:84:cb:
2f:b0:64:7a:da:42:74:b5:25:d4:e6:b3:55:ae:5c:e4:a3:cf:
92:b0:28:eb:5f:65:46:8b:93:39:2b:1e:d9:20:4b:a9:01:2b:
6f:1c:a4:58:1f:c3:58:6a:39:55:69:63:b9:01:9d:d5:6b:f0:
9c:43:a1:36:ee:e3:c3:2f:bb:ca:10:b8:54:ea:c4:92:b2:3f:
b6:f4:97:15:0a:b2:d9:a4:29:76:e7:8b:ff:b9:89:0b:bc:80:
ea:58:2a:30:5c:6f:d7:94:7b:5c:c9:57:92:0a:5d:8c:9f:dd:
35:9c:08:d9:5c:7f:f5:d8:6a:9b:e5:93:e9:93:3f:b3:7e:8a:
6d:71:e6:18
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY0tbUJXtXrSLkVrSQRS/FC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm
MDk1MTYwHhcNMjQwMTIxMTkwOTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWFjY2FmMmQxMzVkM2Q5ZWI2NTljMGU2NzhiNTJjNDA1MTVhMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIbAMgteux+/YxX+7HQr9zxZ7zn
sP92k9c0JRnXOnAIzx8l+t36cFpYfwczcb0iTUOJZ3I+OGcyQ0DAVBHcns8cNA23
QnArSPX8bQAv3vYVjNv3obREXf7XXEn0/aDyEjtfvIzwfF5BC6SW3f/GssGRoae+
dmH6lkFi7ShmHJuMu4vBZv9yw+yV2wh1hOn4IjnCvnoVq7pzTL+AaS+MFMTwLU0s
f4g/8kCEIYjT0VAfxNBWIcZRJzgxErwxCYH81xyQoGqrQHYqv8pENpkz/mUo6iTy
MxqKJUh2saHOdxcAEFLyI7Px+/9atKpGnIKYuFN749td7jiTf+bHWGO7kwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFImsyvLRNdPZ62WcDmeLUsQFFaGKMB8GA1UdIwQY
MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt
NWFlNTNhMDZlYWE3LzEvaWF6Szh0RTEwOW5yWlp3T1o0dFN4QVVWb1lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3
LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW84LMA0E
AgACMAcDBQAqEKHAMA0GCSqGSIb3DQEBCwUAA4IBAQBW4gGQxUZI3KK4pXXaTDLu
SifI0fLPolJ/2+4BjtvCJxGAOkRdGnlqZ1HUKjdLSjBKHK7Ye0XBUbDlZ3NN5RzO
5WZaWhWXE6KNllQhLf3cqG8YTkKP8rYtLSGdJ5sDTCbuev5r3W4Zm1MYrJ4lYCW0
uEDiIgl7bCtr9DgAhMsvsGR62kJ0tSXU5rNVrlzko8+SsCjrX2VGi5M5Kx7ZIEup
AStvHKRYH8NYajlVaWO5AZ3Va/CcQ6E27uPDL7vKELhU6sSSsj+29JcVCrLZpCl2
54v/uYkLvIDqWCowXG/XlHtcyVeSCl2Mn901nAjZXH/12Gqb5ZPpkz+zfoptceYY
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:00:07 2025 by rpki-client