Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/b0SO37PRJMxlRwxeTyU3q_iB8dI.roa
File: b0SO37PRJMxlRwxeTyU3q_iB8dI.roa (raw, json)
Hash identifier: eHYe7ej20X9YfP6+xrxUuHho95sUCBo7T9ufHCY22KQ=
Subject key identifier: 6F:44:8E:DF:B3:D1:24:CC:65:47:0C:5E:4F:25:37:AB:F8:81:F1:D2
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01862651A278B2796220A6E1D5FDA7C3B086
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/b0SO37PRJMxlRwxeTyU3q_iB8dI.roa
Signing time: Mon 06 Feb 2023 10:42:09 +0000
ROA not before: Mon 06 Feb 2023 10:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.32.0/24 maxlen: 24
91.199.42.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 07:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:51:a2:78:b2:79:62:20:a6:e1:d5:fd:a7:c3:b0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Feb 6 10:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f448edfb3d124cc65470c5e4f2537abf881f1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:92:ea:94:29:0a:c4:96:cf:91:e6:b9:57:
6a:df:29:8b:78:2a:97:a7:d9:4c:17:32:a4:8b:02:
cc:cd:cf:e3:3e:33:06:ed:01:c3:33:2f:1a:6b:5d:
7f:49:09:c9:cc:40:ab:45:68:24:21:9e:d4:e8:d6:
55:6e:5c:be:26:ea:66:12:c3:ca:d2:7a:22:e9:49:
86:35:b2:c7:b1:dc:d3:d5:24:81:b5:8d:e6:01:7b:
cd:48:71:4e:af:b8:17:43:da:69:99:b7:7f:d7:fd:
ac:9b:ce:e8:42:7a:75:28:e3:d5:cc:d7:99:20:9d:
5e:2d:b1:2a:98:77:75:32:c9:89:43:d1:d4:05:c1:
fe:11:2a:c4:73:91:02:4d:c1:ea:c9:68:19:6b:71:
1d:25:85:71:72:5d:41:a3:1c:92:9f:1a:17:60:61:
80:b1:ed:19:c7:4b:c5:32:de:92:09:3a:df:b0:75:
a7:0c:e5:f3:f0:6f:93:dd:95:18:15:e9:a8:3c:6b:
ed:a4:cc:67:55:aa:72:b9:a4:77:c9:c5:f4:20:f7:
cc:fc:b7:fa:72:bb:be:c6:1b:95:ed:3a:6c:b8:67:
5d:b4:cd:dc:9e:be:24:4a:a2:b0:93:01:a9:e3:0d:
dc:ba:d7:2d:c8:97:7b:23:aa:b0:73:e3:1d:eb:c2:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:8E:DF:B3:D1:24:CC:65:47:0C:5E:4F:25:37:AB:F8:81:F1:D2
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/b0SO37PRJMxlRwxeTyU3q_iB8dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.32.0/24
91.199.42.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:88:60:b1:32:00:58:e9:9b:55:25:35:2a:17:5a:e6:f6:f2:
1f:06:97:88:a0:fe:91:14:d3:ba:52:cc:f3:c4:28:49:5f:db:
c2:ae:1e:ac:b9:79:b4:b2:7c:53:d8:0e:72:17:95:8f:82:f8:
51:25:b2:80:eb:53:59:0f:28:1a:a7:b6:44:49:49:17:25:23:
79:53:fa:83:2d:30:ea:56:16:76:94:7c:0f:8b:e9:d6:1f:6f:
0d:82:1f:36:ce:5d:20:88:6d:b2:19:4b:35:6b:1d:2d:1a:72:
7a:58:f8:86:54:f8:f3:16:18:c0:85:a6:c9:42:eb:eb:dd:f0:
17:d3:6a:14:ae:1a:c3:bc:07:93:cf:58:9f:bc:15:0e:f2:0a:
dc:b0:c7:4a:8e:c9:92:2d:5c:09:fb:05:c0:b7:fc:f0:0f:57:
89:4d:75:72:e6:3e:56:6a:60:1a:89:e8:d9:b0:db:50:09:9c:
d6:3c:db:b2:35:66:5c:70:23:fe:9b:ae:61:a2:0d:67:a3:0a:
30:5d:c4:cf:95:17:4b:3f:5c:8b:c1:16:9f:7b:53:7e:0a:2b:
94:a2:0c:91:47:3c:d8:a0:8e:38:74:7b:a6:c0:d0:c8:92:13:
54:99:2c:8b:06:5b:bb:07:e7:55:fc:7d:2b:b2:e2:3b:c6:24:
29:ac:83:50
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYmUaJ4snliIKbh1f2nw7CGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjMwMjA2MTA0MjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQ0OGVkZmIzZDEyNGNjNjU0NzBjNWU0ZjI1MzdhYmY4ODFmMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIaS6pQpCsSWz5HmuVdq3ymLeCqX
p9lMFzKkiwLMzc/jPjMG7QHDMy8aa11/SQnJzECrRWgkIZ7U6NZVbly+JupmEsPK
0noi6UmGNbLHsdzT1SSBtY3mAXvNSHFOr7gXQ9ppmbd/1/2sm87oQnp1KOPVzNeZ
IJ1eLbEqmHd1MsmJQ9HUBcH+ESrEc5ECTcHqyWgZa3EdJYVxcl1BoxySnxoXYGGA
se0Zx0vFMt6SCTrfsHWnDOXz8G+T3ZUYFemoPGvtpMxnVapyuaR3ycX0IPfM/Lf6
cru+xhuV7TpsuGddtM3cnr4kSqKwkwGp4w3cutctyJd7I6qwc+Md68LvUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG9Ejt+z0STMZUcMXk8lN6v4gfHSMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvYjBTTzM3UFJKTXhsUnd4ZVR5VTNxX2lCOGRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8cgAwQA
W8cqAwQAW8cvMA0GCSqGSIb3DQEBCwUAA4IBAQAbiGCxMgBY6ZtVJTUqF1rm9vIf
BpeIoP6RFNO6UszzxChJX9vCrh6suXm0snxT2A5yF5WPgvhRJbKA61NZDygap7ZE
SUkXJSN5U/qDLTDqVhZ2lHwPi+nWH28Ngh82zl0giG2yGUs1ax0tGnJ6WPiGVPjz
FhjAhabJQuvr3fAX02oUrhrDvAeTz1ifvBUO8grcsMdKjsmSLVwJ+wXAt/zwD1eJ
TXVy5j5WamAaiejZsNtQCZzWPNuyNWZccCP+m65hog1nowowXcTPlRdLP1yLwRaf
e1N+CiuUogyRRzzYoI44dHumwNDIkhNUmSyLBlu7B+dV/H0rsuI7xiQprINQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org