Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/pZmvJyjzJFqFIzW6gVNNywW6KOc.roa
File: pZmvJyjzJFqFIzW6gVNNywW6KOc.roa (raw, json)
Hash identifier: WEwIBKloVYwf1ePN2HhdyqRLVMKM5GatHVebB0aO7nI=
Subject key identifier: A5:99:AF:27:28:F3:24:5A:85:23:35:BA:81:53:4D:CB:05:BA:28:E7
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 018A21BBA400BE71BFD260889B1DAD933052
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/pZmvJyjzJFqFIzW6gVNNywW6KOc.roa
Signing time: Wed 23 Aug 2023 09:30:59 +0000
ROA not before: Wed 23 Aug 2023 09:30:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 91.199.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:bb:a4:00:be:71:bf:d2:60:88:9b:1d:ad:93:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Aug 23 09:30:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a599af2728f3245a852335ba81534dcb05ba28e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:75:35:e6:58:ee:b1:5c:12:bd:81:f6:ac:99:
49:9d:f7:c0:8f:68:44:4d:c8:e3:c3:a7:22:3d:19:
cb:77:50:51:93:16:a2:70:04:e2:58:7a:ca:90:d5:
0d:1b:9c:68:eb:37:d5:b7:87:16:7a:86:d1:58:d7:
4a:8d:e0:17:90:aa:fb:e1:8e:90:9f:32:0b:d8:52:
f4:ff:b4:0d:7b:9e:a8:09:c7:e0:17:af:3d:9a:33:
53:61:4c:21:01:ee:57:61:10:68:90:ec:e9:1e:e0:
b1:13:6a:88:6a:0d:f7:86:2e:92:42:da:15:67:82:
0d:82:3e:2f:01:f8:52:35:43:d6:51:74:55:dc:d7:
5c:b5:3d:b5:8a:3a:3b:11:1a:16:6f:0c:6c:93:f3:
ae:4c:1a:3c:4d:82:2c:35:e8:c8:f1:7d:f7:d2:2b:
d0:83:52:0b:e6:a8:17:d2:ec:a8:07:dc:15:1e:16:
88:7c:2a:3a:7b:b1:ff:72:ec:35:8b:f2:ef:b3:1e:
f5:81:70:93:14:59:e8:eb:72:fa:38:49:f2:48:b0:
80:a2:ab:5f:3e:d0:94:e7:c5:3a:9d:03:24:6b:52:
d2:39:b7:63:f4:62:3c:61:7d:b7:6b:84:b5:59:f5:
04:14:04:15:a3:bf:6d:9a:12:9a:13:0f:18:fb:95:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:AF:27:28:F3:24:5A:85:23:35:BA:81:53:4D:CB:05:BA:28:E7
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/pZmvJyjzJFqFIzW6gVNNywW6KOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7a:07:ac:ad:a9:34:f3:ab:ba:91:89:20:ee:dc:67:a9:b3:
d7:e7:c5:f8:1b:b5:37:83:fd:e9:8c:47:7b:1e:46:8e:0b:4b:
e5:5f:e5:03:d2:81:94:d0:dc:b2:2b:cf:1b:87:e6:4f:ab:07:
e4:af:0c:f8:07:5a:3b:93:51:a1:0a:41:8b:e0:7d:91:19:1e:
d7:0f:23:15:85:58:58:ec:5f:d1:b0:82:0d:42:67:68:33:ac:
29:97:23:f5:47:0e:d8:a5:bc:d8:1d:e6:58:40:be:72:87:90:
45:0b:61:0e:92:50:14:0c:ee:18:52:6b:e1:be:d1:45:f8:c7:
0c:2b:ca:0c:c2:94:6f:f7:fb:32:04:cf:9d:5f:5d:71:37:f6:
47:12:5b:88:08:17:f3:15:a2:4e:d0:54:77:8e:22:08:43:9f:
7a:af:ad:5b:6d:83:b7:37:64:e7:34:8f:19:ee:64:21:7b:9a:
6c:cf:56:1e:27:4c:9c:b8:61:b2:2d:c4:a9:b5:ab:a0:05:24:
d7:e9:1b:f7:57:a7:c1:36:e9:5f:02:4b:04:20:d7:da:be:7b:
0d:29:a1:ed:f3:af:eb:c1:64:12:d1:c8:30:a9:0e:ad:34:1e:
33:06:a0:17:ae:93:81:9f:ff:88:86:c9:7e:50:1b:ae:01:1c:
33:21:43:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYohu6QAvnG/0mCImx2tkzBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjMwODIzMDkzMDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTk5YWYyNzI4ZjMyNDVhODUyMzM1YmE4MTUzNGRjYjA1YmEyOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3U15ljusVwSvYH2rJlJnffAj2hE
Tcjjw6ciPRnLd1BRkxaicATiWHrKkNUNG5xo6zfVt4cWeobRWNdKjeAXkKr74Y6Q
nzIL2FL0/7QNe56oCcfgF689mjNTYUwhAe5XYRBokOzpHuCxE2qIag33hi6SQtoV
Z4INgj4vAfhSNUPWUXRV3NdctT21ijo7ERoWbwxsk/OuTBo8TYIsNejI8X330ivQ
g1IL5qgX0uyoB9wVHhaIfCo6e7H/cuw1i/Lvsx71gXCTFFno63L6OEnySLCAoqtf
PtCU58U6nQMka1LSObdj9GI8YX23a4S1WfUEFAQVo79tmhKaEw8Y+5XIkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWZryco8yRahSM1uoFTTcsFuijnMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvcFptdkp5anpKRnFGSXpXNmdWTk55d1c2S09jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cqMA0G
CSqGSIb3DQEBCwUAA4IBAQAjegesrak086u6kYkg7txnqbPX58X4G7U3g/3pjEd7
HkaOC0vlX+UD0oGU0NyyK88bh+ZPqwfkrwz4B1o7k1GhCkGL4H2RGR7XDyMVhVhY
7F/RsIINQmdoM6wplyP1Rw7YpbzYHeZYQL5yh5BFC2EOklAUDO4YUmvhvtFF+McM
K8oMwpRv9/syBM+dX11xN/ZHEluICBfzFaJO0FR3jiIIQ596r61bbYO3N2TnNI8Z
7mQhe5psz1YeJ0ycuGGyLcSptaugBSTX6Rv3V6fBNulfAksEINfavnsNKaHt86/r
wWQS0cgwqQ6tNB4zBqAXrpOBn/+Ihsl+UBuuARwzIUPp
-----END CERTIFICATE-----
Generated at Wed Nov 22 12:23:05 2023 by rpki-client on console-ams.rpki-client.org