Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/J-VfOzCxClKGU8ySowHKWq93pGY.roa
File: J-VfOzCxClKGU8ySowHKWq93pGY.roa (raw, json)
Hash identifier: gNbXDB99VCsvOUWvYs2BL/AeFzdJaYhWsclejAm44Jg=
Subject key identifier: 27:E5:5F:3B:30:B1:0A:52:86:53:CC:92:A3:01:CA:5A:AF:77:A4:66
Certificate issuer: /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial: 01856CE632D640102C712F647DFBF02FCA7E
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/J-VfOzCxClKGU8ySowHKWq93pGY.roa
Signing time: Sun 01 Jan 2023 10:35:03 +0000
ROA not before: Sun 01 Jan 2023 10:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43164
IP address blocks: 91.198.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:32:d6:40:10:2c:71:2f:64:7d:fb:f0:2f:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Validity
Not Before: Jan 1 10:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e55f3b30b10a528653cc92a301ca5aaf77a466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:2f:3a:1f:44:3f:c7:84:04:5a:e8:6b:1a:
6c:8e:7d:ac:c7:ab:c5:37:f5:98:6c:48:71:54:5b:
b5:61:d8:0c:c3:d6:0e:2e:c2:a6:87:33:cc:08:dd:
82:a3:5a:2a:9c:40:36:6c:bc:88:4c:b5:2a:ef:ff:
85:e3:07:91:f5:41:f1:1a:22:d7:39:50:f1:09:49:
b1:d1:68:dc:ee:f7:12:f8:34:9e:0c:c1:5d:64:6f:
3a:f8:d2:cd:22:87:af:19:cc:fe:64:a3:11:69:10:
b5:4a:bd:f3:50:12:89:f0:ff:e0:83:b0:e7:89:91:
e2:63:f2:9c:ee:d9:3c:27:c4:c2:b7:bc:69:b7:d2:
11:f8:a0:f9:76:ae:82:7c:85:6b:4f:de:b9:a1:40:
28:e6:5f:67:91:71:ac:ab:53:fa:f4:62:d3:96:6a:
30:90:af:36:57:0c:9c:ab:01:0e:48:19:79:c6:8b:
78:c7:7b:45:dc:94:da:6f:e6:47:7a:0e:91:ae:d7:
0c:3e:b4:25:d9:73:1f:42:73:ff:0c:e2:65:3d:58:
36:73:9d:15:ea:ef:78:ab:16:f1:fc:d6:c1:26:66:
ab:78:50:7e:e2:06:22:fd:53:42:61:82:13:de:cd:
7a:cc:e8:c6:a4:ee:21:ea:81:58:1b:f5:1f:a0:f6:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:5F:3B:30:B1:0A:52:86:53:CC:92:A3:01:CA:5A:AF:77:A4:66
X509v3 Authority Key Identifier:
keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/J-VfOzCxClKGU8ySowHKWq93pGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ab:ed:49:ae:22:44:31:f3:cc:2c:0f:3b:e0:fa:0d:af:08:
2e:04:13:bb:68:b5:7f:0e:0f:41:58:f8:bc:b0:11:86:cf:87:
89:07:c3:6a:60:55:9b:53:fa:b1:89:1f:c8:43:c3:10:60:46:
39:8f:1f:1e:cd:57:ed:84:d8:03:02:05:6f:70:c2:21:1f:fa:
c1:cb:ad:f7:b5:f7:94:24:2a:7e:c4:d4:0c:33:13:a3:1a:84:
03:a1:fc:e4:40:4b:b2:3a:7b:12:85:e4:2e:f6:02:f2:63:24:
ae:b9:45:0c:4a:33:ed:fb:5c:21:37:ab:0c:b3:92:e5:33:46:
1c:e5:cb:f7:ed:2b:57:fd:20:94:0a:2b:53:3c:9d:e7:f5:b6:
e4:01:0b:03:c0:eb:8c:cc:71:52:a5:02:01:79:a5:5d:b0:d9:
f0:94:b5:9e:61:70:ab:58:d7:83:50:6b:48:3f:14:fb:88:56:
4a:6b:cc:9d:87:36:f5:3a:c7:cb:ff:49:1c:b6:76:9e:ab:a6:
c6:a1:ae:be:88:c1:1d:71:26:a3:56:69:29:b5:19:b5:85:41:
4a:92:b4:a5:3f:bf:ea:83:f3:fd:3c:8e:44:ab:a0:98:2e:da:
26:fe:31:8a:b9:23:6b:2a:10:9a:6b:84:1e:01:d6:c5:30:2f:
4e:6c:f2:57
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVs5jLWQBAscS9kffvwL8p+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWQwNGU2YzUwYmE5MDZmOWFjMTFjMmU3NWJmM2Y1ZDEw
NDJhNjIwHhcNMjMwMTAxMTAzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2U1NWYzYjMwYjEwYTUyODY1M2NjOTJhMzAxY2E1YWFmNzdhNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRwvOh9EP8eEBFroaxpsjn2sx6vF
N/WYbEhxVFu1YdgMw9YOLsKmhzPMCN2Co1oqnEA2bLyITLUq7/+F4weR9UHxGiLX
OVDxCUmx0Wjc7vcS+DSeDMFdZG86+NLNIoevGcz+ZKMRaRC1Sr3zUBKJ8P/gg7Dn
iZHiY/Kc7tk8J8TCt7xpt9IR+KD5dq6CfIVrT965oUAo5l9nkXGsq1P69GLTlmow
kK82VwycqwEOSBl5xot4x3tF3JTab+ZHeg6RrtcMPrQl2XMfQnP/DOJlPVg2c50V
6u94qxbx/NbBJmareFB+4gYi/VNCYYIT3s16zOjGpO4h6oFYG/UfoPaBBQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCflXzswsQpShlPMkqMBylqvd6RmMB8GA1UdIwQY
MBaAFPhdBObFC6kG+awRwudb8/XRBCpiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GMEU1c1VMcVFiNXJCSEM1MXZ6OWRFRUttSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTNhYTMxLTk2NGYtNGE4MS1iY2Vl
LWRlOGMyNjIwMmIxNy8xL0otVmZPekN4Q2xLR1U4eVNvd0hLV3E5M3BHWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvZTNhYTMxLTk2NGYtNGE4MS1iY2VlLWRlOGMyNjIwMmIx
Ny8xLzEtRjBFNXNVTHFRYjVyQkhDNTF2ejlkRUVLbUkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABbxgAw
DQYJKoZIhvcNAQELBQADggEBADmr7UmuIkQx88wsDzvg+g2vCC4EE7totX8OD0FY
+LywEYbPh4kHw2pgVZtT+rGJH8hDwxBgRjmPHx7NV+2E2AMCBW9wwiEf+sHLrfe1
95QkKn7E1AwzE6MahAOh/ORAS7I6exKF5C72AvJjJK65RQxKM+37XCE3qwyzkuUz
Rhzly/ftK1f9IJQKK1M8nef1tuQBCwPA64zMcVKlAgF5pV2w2fCUtZ5hcKtY14NQ
a0g/FPuIVkprzJ2HNvU6x8v/SRy2dp6rpsahrr6IwR1xJqNWaSm1GbWFQUqStKU/
v+qD8/08jkSroJgu2ib+MYq5I2sqEJprhB4B1sUwL05s8lc=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:33 2024 by rpki-client on console-ams.rpki-client.org