Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/e1MRB_VNBO4aCzCyJJ7juxbqW0E.roa
File: e1MRB_VNBO4aCzCyJJ7juxbqW0E.roa (raw, json)
Hash identifier: v3Mxys7xuiRSt3QNX8VbVSQXhozp36nMjYUgChFejYw=
Subject key identifier: 7B:53:11:07:F5:4D:04:EE:1A:0B:30:B2:24:9E:E3:BB:16:EA:5B:41
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 0185715E78D06FAE1F4A3631165DFB31020D
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/e1MRB_VNBO4aCzCyJJ7juxbqW0E.roa
Signing time: Mon 02 Jan 2023 07:24:54 +0000
ROA not before: Mon 02 Jan 2023 07:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51746
IP address blocks: 91.220.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:78:d0:6f:ae:1f:4a:36:31:16:5d:fb:31:02:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Jan 2 07:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b531107f54d04ee1a0b30b2249ee3bb16ea5b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:21:96:56:eb:b8:23:4d:96:f3:cb:3a:0d:
a6:a2:1c:94:5a:60:52:cd:83:34:88:24:55:c9:25:
f9:41:90:65:74:de:90:f4:9b:9b:65:ea:e6:eb:64:
a4:ef:ce:89:cb:fa:a2:51:f9:09:c8:03:ca:35:7e:
c8:2e:11:b2:95:bf:e4:71:8f:f8:e3:79:02:6f:96:
42:c1:20:b5:ff:cc:88:2a:1c:c0:41:c7:a0:ac:e2:
87:76:63:b2:70:59:d0:95:d1:a6:5d:d2:56:b3:bc:
ab:2a:22:78:0d:67:ab:25:4c:fa:11:be:5d:e3:3b:
0b:c6:22:48:fe:86:08:71:17:8c:7b:6e:a6:2a:f5:
ac:c4:ca:6e:94:bb:f0:3b:4a:66:57:33:4b:3d:f0:
ef:68:18:43:32:dd:80:fd:92:21:b1:dd:d0:f3:4f:
f0:4c:95:e5:a0:85:7c:4a:26:bd:3a:a8:92:b5:f2:
43:2d:d1:c5:75:fa:84:79:42:8a:64:a4:a8:b3:42:
41:03:27:fd:bd:03:78:5e:3d:fe:a4:f4:7c:1c:9c:
fc:73:cb:ea:b9:82:14:fb:3a:12:cb:82:21:b7:eb:
eb:d0:92:b2:3d:c5:fe:9e:1f:fd:1c:7c:c3:8f:ef:
41:aa:1e:30:7f:10:9c:24:b4:2f:7b:c8:7f:1c:dd:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:11:07:F5:4D:04:EE:1A:0B:30:B2:24:9E:E3:BB:16:EA:5B:41
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/e1MRB_VNBO4aCzCyJJ7juxbqW0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.86.0/24
Signature Algorithm: sha256WithRSAEncryption
77:47:f0:fe:cd:d6:38:8d:34:9b:05:f1:83:3f:4b:04:47:f8:
a7:dd:f0:46:44:21:32:2d:74:1b:c8:1f:20:66:81:1b:8d:a1:
45:a7:9e:08:82:04:90:1b:03:2c:08:c2:0c:40:d7:65:ff:d8:
45:23:67:a9:0e:8c:99:ed:9c:b5:d4:d8:d8:9c:ee:a1:5b:3d:
ef:bc:2d:7d:db:88:f5:e8:c9:d9:36:1b:4b:89:6d:f0:b2:b6:
36:e0:e5:cd:3f:62:33:50:2a:d1:ae:a2:67:c9:a4:74:26:a4:
f8:5f:e6:7b:bc:f4:72:a8:e7:c1:b9:13:fd:b5:53:09:58:33:
3b:b8:72:8b:a7:34:de:b9:8a:12:95:98:65:83:26:2e:56:9b:
5d:48:c9:c2:3e:fa:40:65:4c:13:b8:46:1d:ca:ac:67:99:ee:
d3:af:fc:98:81:8a:1f:b7:a8:ac:9a:a8:19:eb:94:c7:fa:ef:
ac:ff:17:d1:c8:4e:68:1f:e7:ba:93:82:3a:48:4f:3d:91:b9:
8a:b2:37:59:48:a3:3b:60:5b:aa:e3:0c:82:1d:77:72:ee:c9:
0e:73:67:3e:28:06:00:a1:c0:5f:9f:df:87:f4:60:b4:37:58:
2e:37:69:38:45:ce:c9:3c:36:fd:74:46:b1:5f:80:f1:a9:63:
12:8e:19:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXnjQb64fSjYxFl37MQINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh
NGQ2MzUwHhcNMjMwMTAyMDcyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjUzMTEwN2Y1NGQwNGVlMWEwYjMwYjIyNDllZTNiYjE2ZWE1YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRwhllbruCNNlvPLOg2mohyUWmBS
zYM0iCRVySX5QZBldN6Q9JubZerm62Sk786Jy/qiUfkJyAPKNX7ILhGylb/kcY/4
43kCb5ZCwSC1/8yIKhzAQcegrOKHdmOycFnQldGmXdJWs7yrKiJ4DWerJUz6Eb5d
4zsLxiJI/oYIcReMe26mKvWsxMpulLvwO0pmVzNLPfDvaBhDMt2A/ZIhsd3Q80/w
TJXloIV8Sia9OqiStfJDLdHFdfqEeUKKZKSos0JBAyf9vQN4Xj3+pPR8HJz8c8vq
uYIU+zoSy4Iht+vr0JKyPcX+nh/9HHzDj+9Bqh4wfxCcJLQve8h/HN3QKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtTEQf1TQTuGgswsiSe47sW6ltBMB8GA1UdIwQY
MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt
ZmMwMTQ4MTE5NjM4LzEvZTFNUkJfVk5CTzRhQ3pDeUpKN2p1eGJxVzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4
LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xWMA0G
CSqGSIb3DQEBCwUAA4IBAQB3R/D+zdY4jTSbBfGDP0sER/in3fBGRCEyLXQbyB8g
ZoEbjaFFp54IggSQGwMsCMIMQNdl/9hFI2epDoyZ7Zy11NjYnO6hWz3vvC1924j1
6MnZNhtLiW3wsrY24OXNP2IzUCrRrqJnyaR0JqT4X+Z7vPRyqOfBuRP9tVMJWDM7
uHKLpzTeuYoSlZhlgyYuVptdSMnCPvpAZUwTuEYdyqxnme7Tr/yYgYoft6ismqgZ
65TH+u+s/xfRyE5oH+e6k4I6SE89kbmKsjdZSKM7YFuq4wyCHXdy7skOc2c+KAYA
ocBfn9+H9GC0N1guN2k4Rc7JPDb9dEaxX4DxqWMSjhnT
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:36 2024 by rpki-client on console-ams.rpki-client.org