Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/rTuWQ3LgHhAaZNJZEeXRK07nOjc.roa
File: rTuWQ3LgHhAaZNJZEeXRK07nOjc.roa (raw, json)
Hash identifier: DGWlVvd8nUCHucOMJWTo/YC9HrhqOt5C9Da1qgMCvtc=
Subject key identifier: AD:3B:96:43:72:E0:1E:10:1A:64:D2:59:11:E5:D1:2B:4E:E7:3A:37
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 01856FCBA65D57E7C69F58A2B722278464E9
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/rTuWQ3LgHhAaZNJZEeXRK07nOjc.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51644
IP address blocks: 91.199.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a6:5d:57:e7:c6:9f:58:a2:b7:22:27:84:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad3b964372e01e101a64d25911e5d12b4ee73a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:dc:f2:00:24:31:06:0b:9c:95:02:d5:aa:
bb:fb:a0:26:6d:14:7f:e7:6e:90:d9:9b:90:ba:6f:
2e:6b:e7:cd:40:ec:5b:f3:e9:fd:e2:87:8a:8e:f7:
84:13:28:8f:68:1a:7e:18:0a:d4:8b:de:96:68:79:
65:ca:be:a4:23:7b:32:6d:be:65:8f:9d:b3:b5:7d:
f5:ba:77:aa:9a:24:22:16:d1:c0:3f:48:f4:75:18:
4a:7a:4e:cb:d5:af:8a:97:96:d7:da:eb:86:da:f8:
6d:e7:0d:4f:9c:15:23:66:0e:bc:75:4f:f2:a1:88:
e5:a8:6f:ff:6a:bb:bf:19:b8:65:66:e4:15:2d:7d:
f9:d5:da:86:d2:9b:9f:f9:92:17:a4:2b:85:a3:67:
f0:02:74:14:89:58:f8:15:3b:d6:08:0e:b1:a3:f4:
26:5b:66:fd:f3:b4:57:d8:0b:24:23:47:87:16:4a:
34:2e:d2:f1:74:28:1e:de:8c:74:e3:7e:db:1d:46:
a6:e2:f4:ad:7a:b4:a8:64:0d:fc:75:d8:db:2f:ee:
d1:31:89:93:49:30:22:a1:a5:3d:e9:96:44:07:6a:
3d:ad:15:fa:ad:41:46:0c:62:e0:83:03:06:38:ca:
63:8a:30:53:34:80:7a:b6:1c:b6:b7:51:ae:ac:11:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:96:43:72:E0:1E:10:1A:64:D2:59:11:E5:D1:2B:4E:E7:3A:37
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/rTuWQ3LgHhAaZNJZEeXRK07nOjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.61.0/24
Signature Algorithm: sha256WithRSAEncryption
35:60:4a:d3:93:5c:03:1f:e7:45:43:72:32:5f:e2:7b:6d:ca:
a1:5c:b8:87:3d:63:a6:0d:7d:bc:18:3a:1c:72:d5:1b:58:7a:
b5:b2:f3:65:0a:2c:03:38:aa:49:06:5c:9c:b4:c5:17:fa:8d:
f5:49:1f:13:2a:29:f9:9d:4a:6d:df:8a:d8:97:3c:a7:dd:dd:
0a:a4:72:e3:6b:c7:cd:08:00:3b:48:41:85:d0:69:b0:bc:34:
28:ee:dc:1b:f5:c9:d0:b3:70:7c:bf:0d:1a:c9:92:62:12:ad:
dd:de:ab:f4:a3:14:07:9a:60:3b:f3:7d:c2:4e:ec:f7:b8:9a:
06:2a:f1:b1:b3:9b:6d:4f:5e:bc:e5:90:d1:37:7f:df:2a:9c:
2e:b3:0f:88:bc:32:b0:50:71:92:d3:9c:39:d1:87:bd:e8:8b:
1c:ca:a9:7d:5a:0b:12:3f:c0:bd:6f:0f:d8:6b:d2:e5:53:95:
74:df:1f:fb:c9:3f:a5:39:29:76:f3:c4:0f:5f:74:88:d6:4a:
3d:61:85:3c:cd:a2:07:30:6f:4a:45:0a:c3:7c:a3:77:6f:8e:
7f:3c:70:a3:70:15:04:55:e4:b8:01:3e:2a:f7:fd:c5:21:15:
9d:5b:3a:5f:f3:e7:be:78:a6:28:a7:05:7d:3b:e7:d7:d4:03:
5f:b9:82:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy6ZdV+fGn1iityInhGTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjgyNGI4NWFiYTdiYzM1MTJiMTIxNGIzODVkZTU3MGZi
Mjk0YmYwHhcNMjMwMTAyMDAwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDNiOTY0MzcyZTAxZTEwMWE2NGQyNTkxMWU1ZDEyYjRlZTczYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhTc8gAkMQYLnJUC1aq7+6AmbRR/
526Q2ZuQum8ua+fNQOxb8+n94oeKjveEEyiPaBp+GArUi96WaHllyr6kI3sybb5l
j52ztX31uneqmiQiFtHAP0j0dRhKek7L1a+Kl5bX2uuG2vht5w1PnBUjZg68dU/y
oYjlqG//aru/GbhlZuQVLX351dqG0puf+ZIXpCuFo2fwAnQUiVj4FTvWCA6xo/Qm
W2b987RX2AskI0eHFko0LtLxdCge3ox0437bHUam4vSterSoZA38ddjbL+7RMYmT
STAioaU96ZZEB2o9rRX6rUFGDGLggwMGOMpjijBTNIB6thy2t1GurBGUqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK07lkNy4B4QGmTSWRHl0StO5zo3MB8GA1UdIwQY
MBaAFGG4JLhaunvDUSsSFLOF3lcPspS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAt
ZWE2ZWQyOWNhYjVlLzEvclR1V1EzTGdIaEFhWk5KWkVlWFJLMDduT2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAtZWE2ZWQyOWNhYjVl
LzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8c9MA0G
CSqGSIb3DQEBCwUAA4IBAQA1YErTk1wDH+dFQ3IyX+J7bcqhXLiHPWOmDX28GDoc
ctUbWHq1svNlCiwDOKpJBlyctMUX+o31SR8TKin5nUpt34rYlzyn3d0KpHLja8fN
CAA7SEGF0GmwvDQo7twb9cnQs3B8vw0ayZJiEq3d3qv0oxQHmmA7833CTuz3uJoG
KvGxs5ttT1685ZDRN3/fKpwusw+IvDKwUHGS05w50Ye96Iscyql9WgsSP8C9bw/Y
a9LlU5V03x/7yT+lOSl288QPX3SI1ko9YYU8zaIHMG9KRQrDfKN3b45/PHCjcBUE
VeS4AT4q9/3FIRWdWzpf8+e+eKYopwV9O+fX1ANfuYJ0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:04 2024 by rpki-client on console-fra.rpki-client.org