Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/xsCVc3ZW_PazMjmpv3qee2VH2yE.roa
File: xsCVc3ZW_PazMjmpv3qee2VH2yE.roa (raw, json)
Hash identifier: uyn9VKMmYZ0I8DyMPwgqS4pCXcKH9yE895DE3/mjJZs=
Subject key identifier: C6:C0:95:73:76:56:FC:F6:B3:32:39:A9:BF:7A:9E:7B:65:47:DB:21
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 0188239DE315F4FA7AF3CF5CFDCD4CF06CD2
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/xsCVc3ZW_PazMjmpv3qee2VH2yE.roa
Signing time: Tue 16 May 2023 08:12:09 +0000
ROA not before: Tue 16 May 2023 08:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.44.0/24 maxlen: 24
91.199.42.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 12:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:9d:e3:15:f4:fa:7a:f3:cf:5c:fd:cd:4c:f0:6c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: May 16 08:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c095737656fcf6b33239a9bf7a9e7b6547db21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:ec:ca:cd:1e:14:19:94:e8:e9:4e:f7:c8:
b5:80:35:f8:f8:ea:a5:c6:c4:42:83:1b:36:b9:32:
75:1b:8b:96:6c:6d:dd:96:e2:84:c2:83:88:30:84:
7e:14:4b:b1:ba:1c:9c:61:94:84:c3:cf:1c:1e:16:
f7:2f:fb:4f:e6:bc:65:57:ce:6e:57:dc:08:50:e5:
c7:7e:1b:db:e5:03:fc:41:46:f1:51:b9:1b:37:2b:
9a:e0:1a:cb:94:c9:54:17:4a:8a:59:f7:fb:36:d7:
74:74:44:30:32:0c:ce:3c:ba:9b:cc:f8:2c:d4:0a:
f4:00:f4:f8:94:6c:c6:63:cc:58:67:9e:dc:9a:a3:
ac:a7:70:7c:0e:a5:56:61:a0:7a:37:9b:6e:81:42:
83:c7:db:8e:d3:4e:1c:85:02:23:f6:d9:e7:40:68:
df:88:26:5c:22:24:50:7a:92:74:7b:ee:ad:65:74:
81:ed:f0:3b:9e:92:44:1a:5a:6f:46:85:bf:a5:55:
46:45:eb:4b:f3:a5:99:97:d9:24:b0:29:fb:69:bf:
cd:4e:0c:99:f8:3c:fe:b1:17:2a:c3:65:fd:f8:b7:
05:40:1c:6b:a2:60:20:50:9c:81:6b:38:ad:96:6a:
ef:f0:35:05:f4:08:c7:bb:82:26:89:c0:0f:bf:86:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:95:73:76:56:FC:F6:B3:32:39:A9:BF:7A:9E:7B:65:47:DB:21
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/xsCVc3ZW_PazMjmpv3qee2VH2yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fc:37:9d:36:3d:86:bd:bf:2f:22:f7:05:28:f0:17:7e:16:
52:78:b3:13:e6:b2:dc:ea:8f:12:01:27:b4:5d:63:95:93:2d:
12:9e:90:e4:a0:69:49:a6:b6:60:df:a6:8f:48:b3:b5:39:be:
1f:73:56:07:cb:f3:bb:9f:a9:d8:98:6b:4c:a8:f8:26:b3:48:
41:6f:01:5a:e5:a0:0e:f7:db:f1:61:25:99:40:de:a1:e6:d0:
15:65:db:72:14:65:03:a2:53:2c:23:a5:af:41:ae:de:9f:7d:
ad:cc:a5:3c:53:e3:6a:45:45:b0:2c:4e:bc:72:94:7a:e0:7d:
0c:37:31:d9:0a:09:33:a4:ec:db:9c:33:4c:f8:b8:d7:49:1d:
8d:40:13:d8:fd:b8:d3:af:80:1f:a2:f5:01:78:dd:79:86:22:
cd:87:bc:32:58:ab:31:55:b0:07:f8:ca:63:9a:30:ff:2f:36:
69:68:2d:eb:c9:1f:7a:81:21:f2:a7:06:c1:9d:b2:c0:ca:72:
0a:6d:e7:78:af:9e:97:8d:91:01:21:55:3f:57:e1:b9:70:1d:
68:34:ca:6f:db:37:8e:95:00:cf:96:61:48:ba:84:27:22:ac:
73:3d:3d:34:5d:6f:7a:a2:1c:98:59:53:41:fd:0e:5f:32:75:
ac:8d:af:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYgjneMV9Pp6889c/c1M8GzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjMwNTE2MDgxMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmMwOTU3Mzc2NTZmY2Y2YjMzMjM5YTliZjdhOWU3YjY1NDdkYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplvsys0eFBmU6OlO98i1gDX4+Oql
xsRCgxs2uTJ1G4uWbG3dluKEwoOIMIR+FEuxuhycYZSEw88cHhb3L/tP5rxlV85u
V9wIUOXHfhvb5QP8QUbxUbkbNyua4BrLlMlUF0qKWff7Ntd0dEQwMgzOPLqbzPgs
1Ar0APT4lGzGY8xYZ57cmqOsp3B8DqVWYaB6N5tugUKDx9uO004chQIj9tnnQGjf
iCZcIiRQepJ0e+6tZXSB7fA7npJEGlpvRoW/pVVGRetL86WZl9kksCn7ab/NTgyZ
+Dz+sRcqw2X9+LcFQBxromAgUJyBazitlmrv8DUF9AjHu4ImicAPv4bO0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMbAlXN2Vvz2szI5qb96nntlR9shMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEveHNDVmMzWldfUGF6TWptcHYzcWVlMlZIMnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8cqAwQA
W8csAwQAW8cvMA0GCSqGSIb3DQEBCwUAA4IBAQBS/DedNj2Gvb8vIvcFKPAXfhZS
eLMT5rLc6o8SASe0XWOVky0SnpDkoGlJprZg36aPSLO1Ob4fc1YHy/O7n6nYmGtM
qPgms0hBbwFa5aAO99vxYSWZQN6h5tAVZdtyFGUDolMsI6WvQa7en32tzKU8U+Nq
RUWwLE68cpR64H0MNzHZCgkzpOzbnDNM+LjXSR2NQBPY/bjTr4AfovUBeN15hiLN
h7wyWKsxVbAH+MpjmjD/LzZpaC3ryR96gSHypwbBnbLAynIKbed4r56XjZEBIVU/
V+G5cB1oNMpv2zeOlQDPlmFIuoQnIqxzPT00XW96ohyYWVNB/Q5fMnWsja9j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org