Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/p6MJGfujXS5z9L7L8cDr-VjDqio.roa
File: p6MJGfujXS5z9L7L8cDr-VjDqio.roa (raw, json)
Hash identifier: LmPm7F0AYYR27iw9crdLiCOn1R/A8vlW5sMqPaziTnI=
Subject key identifier: A7:A3:09:19:FB:A3:5D:2E:73:F4:BE:CB:F1:C0:EB:F9:58:C3:AA:2A
Certificate issuer: /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial: 018F68BD709801D9C3DD9A1826ED670375B9
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/p6MJGfujXS5z9L7L8cDr-VjDqio.roa
Signing time: Sat 11 May 2024 17:39:56 +0000
ROA not before: Sat 11 May 2024 17:39:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198031
IP address blocks: 91.146.120.0/21 maxlen: 21
2a03:a780::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:68:bd:70:98:01:d9:c3:dd:9a:18:26:ed:67:03:75:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Validity
Not Before: May 11 17:39:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7a30919fba35d2e73f4becbf1c0ebf958c3aa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:cb:08:38:47:c7:8a:80:7e:6c:11:ab:55:
06:81:0c:ab:91:e7:ba:f5:1c:75:57:f2:53:7a:a2:
17:18:7f:8e:4d:53:b1:43:e5:8d:fd:23:32:54:b6:
84:2c:8a:20:d4:67:08:4a:7f:af:f5:c2:3f:a4:c3:
5b:3d:6a:3b:cd:14:78:aa:19:72:7e:d9:d1:b1:aa:
64:6f:dd:9a:33:28:59:45:b9:e1:23:96:f0:54:8e:
7a:43:2f:9d:79:e9:0a:a7:0c:e9:cf:b9:b1:60:c5:
12:ce:45:58:b2:55:aa:d1:31:00:f1:30:f5:dc:fe:
13:cf:de:3c:e5:fd:a7:ea:33:4f:77:1c:af:c1:9b:
7c:f9:b9:9b:64:c1:ec:27:96:ae:61:55:b4:90:a3:
1a:44:6b:28:c7:2a:c6:d5:63:16:5b:53:c9:7a:9a:
06:47:fe:ee:0c:eb:ff:71:d8:e7:be:fe:1b:41:9e:
c7:86:c9:8e:f2:e3:bf:19:60:37:f0:a5:cf:2a:06:
c7:57:aa:3f:f1:bb:2d:3c:bb:7b:40:2d:86:2c:3a:
94:5c:38:e9:36:d7:66:12:51:e6:d8:62:27:50:a7:
d9:6a:05:38:0b:56:d8:b3:41:aa:e5:5c:01:52:fe:
02:08:0a:6d:49:33:6f:71:6d:2c:c8:6e:7b:4f:f7:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:09:19:FB:A3:5D:2E:73:F4:BE:CB:F1:C0:EB:F9:58:C3:AA:2A
X509v3 Authority Key Identifier:
keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/p6MJGfujXS5z9L7L8cDr-VjDqio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.120.0/21
IPv6:
2a03:a780::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a0:23:4d:38:cd:08:f7:85:c9:cb:89:99:11:26:17:05:ee:
f6:19:1b:9d:cd:0b:cd:e8:08:d2:28:a2:f4:87:4c:3d:27:c7:
2b:5a:0a:6c:4a:13:59:f3:18:2b:6e:c5:02:c8:e8:72:87:ac:
b8:81:43:02:0b:fc:6d:16:be:b4:21:b8:79:88:8a:6b:38:84:
8f:da:46:eb:31:e2:28:3f:12:d2:3a:fe:45:19:6d:11:58:b3:
5f:d4:89:ae:02:39:59:dc:18:a9:82:d5:97:9b:9e:ea:2b:6a:
c0:45:63:a3:6b:8b:c0:22:dc:3b:d2:39:c6:28:10:b4:ce:4b:
ed:a7:d1:25:64:52:29:ff:cd:d8:9d:ac:b1:25:1a:08:bb:cb:
50:10:7a:ca:f5:c9:63:9f:dd:5e:28:30:a1:e1:59:21:5e:f4:
13:fe:8d:c1:67:16:ec:59:a4:f0:c7:12:d1:ae:a7:6d:eb:e5:
22:93:34:92:9d:3e:89:1e:5d:97:13:ae:6f:90:45:60:35:f6:
09:ca:af:b5:81:07:4f:60:79:0e:5a:aa:cc:28:18:07:79:76:
f2:d8:35:80:62:36:76:8b:56:2c:52:2c:9a:a3:19:db:f1:49:
c2:50:c2:66:eb:ff:2e:d1:52:9d:cc:7c:65:53:d9:0d:93:c4:
fe:24:d7:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9ovXCYAdnD3ZoYJu1nA3W5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGY0NGJhODE0YjhjOTRiN2FmZTMwMjJlZTAxNDYyZjUx
M2JmZjcwHhcNMjQwNTExMTczOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2EzMDkxOWZiYTM1ZDJlNzNmNGJlY2JmMWMwZWJmOTU4YzNhYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTfLCDhHx4qAfmwRq1UGgQyrkee6
9Rx1V/JTeqIXGH+OTVOxQ+WN/SMyVLaELIog1GcISn+v9cI/pMNbPWo7zRR4qhly
ftnRsapkb92aMyhZRbnhI5bwVI56Qy+deekKpwzpz7mxYMUSzkVYslWq0TEA8TD1
3P4Tz9485f2n6jNPdxyvwZt8+bmbZMHsJ5auYVW0kKMaRGsoxyrG1WMWW1PJepoG
R/7uDOv/cdjnvv4bQZ7HhsmO8uO/GWA38KXPKgbHV6o/8bstPLt7QC2GLDqUXDjp
NtdmElHm2GInUKfZagU4C1bYs0Gq5VwBUv4CCAptSTNvcW0syG57T/cDVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKejCRn7o10uc/S+y/HA6/lYw6oqMB8GA1UdIwQY
MBaAFPpPRLqBS4yUt6/jAi7gFGL1E7/3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rOUV1b0ZMakpTM3ItTUNMdUFVWXZVVHZfYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvOTEyMTEwLTZmYzItNDI0YS1hOTU1
LWRhNjIxY2Q3NTZkNy8xL3A2TUpHZnVqWFM1ejlMN0w4Y0RyLVZqRHFpby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvOTEyMTEwLTZmYzItNDI0YS1hOTU1LWRhNjIxY2Q3NTZk
Ny8xLzEtazlFdW9GTGpKUzNyLU1DTHVBVVl2VVR2X2MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANbkngw
DQQCAAIwBwMFACoDp4AwDQYJKoZIhvcNAQELBQADggEBAJ+gI004zQj3hcnLiZkR
JhcF7vYZG53NC83oCNIoovSHTD0nxytaCmxKE1nzGCtuxQLI6HKHrLiBQwIL/G0W
vrQhuHmIims4hI/aRusx4ig/EtI6/kUZbRFYs1/Uia4COVncGKmC1ZebnuorasBF
Y6Nri8Ai3DvSOcYoELTOS+2n0SVkUin/zdidrLElGgi7y1AQesr1yWOf3V4oMKHh
WSFe9BP+jcFnFuxZpPDHEtGup23r5SKTNJKdPokeXZcTrm+QRWA19gnKr7WBB09g
eQ5aqswoGAd5dvLYNYBiNnaLVixSLJqjGdvxScJQwmbr/y7RUp3MfGVT2Q2TxP4k
178=
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:30:28 2025 by rpki-client