Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/xIeiCDQ55ylNgt0GwlDapFKmoGU.roa
File: xIeiCDQ55ylNgt0GwlDapFKmoGU.roa (raw, json)
Hash identifier: VOLxeFU8nrpBrk5RfmW0Qo3sY/P8fb72Ui64pDkZG5M=
Subject key identifier: C4:87:A2:08:34:39:E7:29:4D:82:DD:06:C2:50:DA:A4:52:A6:A0:65
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 018674C7D04D8DDCA72A5C9A31D686008868
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/xIeiCDQ55ylNgt0GwlDapFKmoGU.roa
Signing time: Tue 21 Feb 2023 16:21:37 +0000
ROA not before: Tue 21 Feb 2023 16:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212052
IP address blocks: 91.228.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:c7:d0:4d:8d:dc:a7:2a:5c:9a:31:d6:86:00:88:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Feb 21 16:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c487a2083439e7294d82dd06c250daa452a6a065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:f3:35:4c:3b:2b:02:78:94:57:60:58:92:
80:71:7e:01:2d:ec:f1:ad:5e:1d:2c:69:59:64:05:
4a:05:4f:bd:56:38:05:24:b6:8a:00:d5:63:f5:20:
0b:c7:2a:db:b4:c1:a2:33:78:b7:48:51:da:9d:67:
bb:0c:c2:01:b7:ec:99:98:80:bb:41:6e:b4:a0:9d:
90:c9:02:38:ee:5e:c9:b9:2f:a1:48:86:d0:bd:7e:
3a:34:07:4e:f7:b0:c1:fb:48:0c:50:da:97:fc:b4:
44:c7:f5:09:8b:63:5c:06:82:9e:5e:c7:60:0a:6c:
5c:ec:8c:4a:1c:0a:24:89:16:d6:ec:71:81:2f:05:
9a:59:bc:be:55:1e:54:bb:b7:d0:38:59:8d:57:98:
2e:c4:21:c5:b5:0c:ba:88:c4:e3:52:c3:7c:9b:fe:
14:ca:a8:6d:fd:af:4f:42:78:21:80:8d:11:2d:d3:
4d:24:18:97:63:b2:0b:69:d7:02:0a:90:7c:83:d4:
f6:8f:1a:4d:88:52:6c:b4:5b:f4:17:95:b9:3b:15:
88:c3:2c:49:10:ed:8e:9e:4b:c2:37:fe:42:b6:53:
a2:78:5d:6f:17:4f:01:62:56:6c:9b:1b:cb:3d:d9:
a6:bf:58:62:57:90:46:70:f0:24:67:62:75:f5:ce:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:A2:08:34:39:E7:29:4D:82:DD:06:C2:50:DA:A4:52:A6:A0:65
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/xIeiCDQ55ylNgt0GwlDapFKmoGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3a:76:25:62:62:b5:46:1c:07:43:18:12:61:8c:6c:56:99:
49:63:7c:1c:bf:71:c9:4e:de:41:21:df:c5:69:c8:c7:3c:f7:
ef:f1:d6:ce:55:b2:91:62:a2:36:1c:77:75:29:8e:11:87:b9:
bf:45:05:b1:9d:11:1b:3a:45:7d:99:12:49:b6:07:54:55:80:
83:39:8a:01:c1:a3:05:9d:b7:d6:9d:9c:dc:ce:2e:05:ee:58:
65:98:58:b9:cc:8a:25:77:9f:6f:09:ea:3c:8b:39:a0:06:bf:
22:f0:21:a3:87:e8:4d:0b:60:be:35:c4:a1:8e:3f:d9:72:fb:
99:d0:91:12:df:11:cf:84:57:5a:5d:75:34:c2:7b:fa:09:60:
fa:fe:1f:39:b3:19:10:bb:59:23:1e:0e:eb:32:aa:a3:ba:70:
ea:c4:5c:90:0d:1d:b6:30:a8:01:c4:af:0e:aa:c8:c8:b8:a0:
da:62:72:f5:d8:8f:d9:a3:0b:b3:30:d2:40:25:d2:1d:af:d2:
c8:3a:f7:87:c8:e7:bc:25:bf:6f:c6:38:10:1e:df:5d:d7:40:
b1:4a:97:f0:8a:03:8e:88:bd:78:f3:a1:46:86:88:a4:f6:92:
28:dc:4c:c9:14:74:a2:31:6b:20:b9:12:e5:e6:01:a3:6b:8d:
2f:b1:7e:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ0x9BNjdynKlyaMdaGAIhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjMwMjIxMTYyMTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDg3YTIwODM0MzllNzI5NGQ4MmRkMDZjMjUwZGFhNDUyYTZhMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG3zNUw7KwJ4lFdgWJKAcX4BLezx
rV4dLGlZZAVKBU+9VjgFJLaKANVj9SALxyrbtMGiM3i3SFHanWe7DMIBt+yZmIC7
QW60oJ2QyQI47l7JuS+hSIbQvX46NAdO97DB+0gMUNqX/LREx/UJi2NcBoKeXsdg
Cmxc7IxKHAokiRbW7HGBLwWaWby+VR5Uu7fQOFmNV5guxCHFtQy6iMTjUsN8m/4U
yqht/a9PQnghgI0RLdNNJBiXY7ILadcCCpB8g9T2jxpNiFJstFv0F5W5OxWIwyxJ
EO2OnkvCN/5CtlOieF1vF08BYlZsmxvLPdmmv1hiV5BGcPAkZ2J19c7n/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMSHogg0OecpTYLdBsJQ2qRSpqBlMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEveEllaUNEUTU1eWxOZ3QwR3dsRGFwRkttb0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+TLMA0G
CSqGSIb3DQEBCwUAA4IBAQA/OnYlYmK1RhwHQxgSYYxsVplJY3wcv3HJTt5BId/F
acjHPPfv8dbOVbKRYqI2HHd1KY4Rh7m/RQWxnREbOkV9mRJJtgdUVYCDOYoBwaMF
nbfWnZzczi4F7lhlmFi5zIold59vCeo8izmgBr8i8CGjh+hNC2C+NcShjj/ZcvuZ
0JES3xHPhFdaXXU0wnv6CWD6/h85sxkQu1kjHg7rMqqjunDqxFyQDR22MKgBxK8O
qsjIuKDaYnL12I/ZowuzMNJAJdIdr9LIOveHyOe8Jb9vxjgQHt9d10CxSpfwigOO
iL1486FGhoik9pIo3EzJFHSiMWsguRLl5gGja40vsX4s
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:30 2024 by rpki-client on console-ams.rpki-client.org