Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/uqXBXmlYW_Xb1T9DWcksOR9Ej3Y.roa
File: uqXBXmlYW_Xb1T9DWcksOR9Ej3Y.roa (raw, json)
Hash identifier: j7HK+iKXRwL5iYer9WfimVGhCLVctVEcYwEU+KIq6Xs=
Subject key identifier: BA:A5:C1:5E:69:58:5B:F5:DB:D5:3F:43:59:C9:2C:39:1F:44:8F:76
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01890751A05115571F2119A8CC8618FAFA35
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/uqXBXmlYW_Xb1T9DWcksOR9Ej3Y.roa
Signing time: Thu 29 Jun 2023 13:22:17 +0000
ROA not before: Thu 29 Jun 2023 13:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.44.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 08:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:51:a0:51:15:57:1f:21:19:a8:cc:86:18:fa:fa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jun 29 13:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baa5c15e69585bf5dbd53f4359c92c391f448f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:e8:5b:98:8b:f9:52:58:91:f6:02:23:46:
b3:7b:3c:da:36:81:0a:1c:e5:61:a7:dd:4e:ae:d8:
28:62:d5:e9:fe:02:03:28:a3:d1:86:a2:46:96:57:
7e:88:e6:a6:e5:c8:8f:fb:6a:7b:07:fd:71:25:22:
b5:a9:18:45:d8:3b:50:ed:94:e8:9e:dc:c1:8d:7e:
de:37:c3:0a:78:f3:70:6c:91:5b:2b:9b:f6:55:c1:
08:7a:32:24:a4:d4:9c:89:5d:73:16:42:9a:f8:24:
d7:d5:51:01:93:f8:9e:9f:81:80:af:11:61:90:e1:
00:7c:4f:1b:02:c9:f5:ff:4f:c5:d6:93:6e:cc:d9:
49:fd:ba:65:15:e7:17:53:b9:ea:44:81:d1:34:70:
01:71:6c:88:c3:4e:a7:52:e4:8a:6d:79:3d:66:87:
25:0a:3c:d0:61:c5:6c:5f:6a:48:0e:3e:81:f5:3a:
6b:5c:01:08:b9:b4:9e:94:9e:53:4b:28:c7:8a:5c:
5b:7e:3c:d9:6b:ed:e1:fb:a7:21:08:94:4e:0d:13:
db:30:ce:5e:52:18:43:91:3d:ce:e6:44:8f:d5:75:
a0:8e:f0:52:dc:72:51:df:d8:c6:75:1f:3f:6f:f0:
e2:d6:65:f1:db:de:90:44:e6:15:4e:e0:ca:8b:b4:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A5:C1:5E:69:58:5B:F5:DB:D5:3F:43:59:C9:2C:39:1F:44:8F:76
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/uqXBXmlYW_Xb1T9DWcksOR9Ej3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:48:10:42:d5:8b:b0:34:bc:0e:df:2b:cf:aa:b2:80:76:e2:
0e:c7:08:16:79:c6:5c:31:a1:bf:fd:c7:31:21:16:dd:9b:30:
09:1d:87:38:71:29:1f:05:62:91:28:85:90:4c:a3:d7:98:43:
76:98:08:f2:49:18:5a:3b:f2:a7:12:d6:ec:e1:34:c4:d9:aa:
75:ed:a4:e6:93:8d:69:fb:84:ee:c3:43:ba:99:fa:d1:57:f2:
d5:b5:33:8f:91:a2:5e:3c:a0:7e:bf:44:02:68:b5:d9:85:84:
be:dd:3f:17:0f:19:ec:40:7a:36:a3:5a:1a:04:cd:7a:dc:a5:
e2:53:ef:67:da:3f:54:5e:0f:73:aa:bc:b5:1b:4c:ba:83:b3:
9e:12:5a:dc:00:da:63:b8:3f:ac:f5:c4:e0:71:65:ae:6d:e8:
0d:d9:a0:e5:d2:19:e7:f3:fa:db:11:2b:59:1e:6d:37:b4:b2:
1f:c5:d6:88:e2:81:3f:40:be:02:62:91:ba:16:54:13:5e:02:
aa:c7:08:b5:5d:48:0c:59:46:d7:76:f9:6d:03:30:c9:91:e2:
61:eb:83:af:78:04:06:c0:a0:ec:a7:d5:83:33:7f:ef:89:57:
55:b6:ab:51:67:0f:20:f7:5c:6b:16:8a:ca:ca:22:ed:9e:dc:
8f:25:af:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkHUaBRFVcfIRmozIYY+vo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjMwNjI5MTMyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWE1YzE1ZTY5NTg1YmY1ZGJkNTNmNDM1OWM5MmMzOTFmNDQ4Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtHoW5iL+VJYkfYCI0azezzaNoEK
HOVhp91OrtgoYtXp/gIDKKPRhqJGlld+iOam5ciP+2p7B/1xJSK1qRhF2DtQ7ZTo
ntzBjX7eN8MKePNwbJFbK5v2VcEIejIkpNSciV1zFkKa+CTX1VEBk/ien4GArxFh
kOEAfE8bAsn1/0/F1pNuzNlJ/bplFecXU7nqRIHRNHABcWyIw06nUuSKbXk9Zocl
CjzQYcVsX2pIDj6B9TprXAEIubSelJ5TSyjHilxbfjzZa+3h+6chCJRODRPbMM5e
UhhDkT3O5kSP1XWgjvBS3HJR39jGdR8/b/Di1mXx296QROYVTuDKi7QaMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLqlwV5pWFv129U/Q1nJLDkfRI92MB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvdXFYQlhtbFlXX1hiMVQ5RFdja3NPUjlFajNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8csAwQA
W8cvMA0GCSqGSIb3DQEBCwUAA4IBAQAPSBBC1YuwNLwO3yvPqrKAduIOxwgWecZc
MaG//ccxIRbdmzAJHYc4cSkfBWKRKIWQTKPXmEN2mAjySRhaO/KnEtbs4TTE2ap1
7aTmk41p+4Tuw0O6mfrRV/LVtTOPkaJePKB+v0QCaLXZhYS+3T8XDxnsQHo2o1oa
BM163KXiU+9n2j9UXg9zqry1G0y6g7OeElrcANpjuD+s9cTgcWWubegN2aDl0hnn
8/rbEStZHm03tLIfxdaI4oE/QL4CYpG6FlQTXgKqxwi1XUgMWUbXdvltAzDJkeJh
64OveAQGwKDsp9WDM3/viVdVtqtRZw8g91xrForKyiLtntyPJa+u
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org