Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eaUEznDo2V7hJiCVsfkyDA0c7i8.roa
File: eaUEznDo2V7hJiCVsfkyDA0c7i8.roa (raw, json)
Hash identifier: GKvrPw4HBHaYk6yANmhzWHIPOoN87G1S5beiP14bZmQ=
Subject key identifier: 79:A5:04:CE:70:E8:D9:5E:E1:26:20:95:B1:F9:32:0C:0D:1C:EE:2F
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 0190E3525EEF7AD6733D5D317AE2C664594E
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eaUEznDo2V7hJiCVsfkyDA0c7i8.roa
Signing time: Wed 24 Jul 2024 05:59:04 +0000
ROA not before: Wed 24 Jul 2024 05:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 91.227.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:52:5e:ef:7a:d6:73:3d:5d:31:7a:e2:c6:64:59:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Jul 24 05:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a504ce70e8d95ee1262095b1f9320c0d1cee2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:bf:49:53:09:a5:1e:0c:f2:49:44:74:08:
3d:96:ac:dd:6a:7b:33:e1:e3:c9:b9:c7:c5:16:a0:
b6:1b:87:17:f0:4d:3d:6f:d9:14:4c:b6:63:f5:8b:
00:b4:9f:1d:e6:de:50:21:f3:e7:f1:7a:6b:c5:ba:
6f:b9:ff:29:18:e4:b9:5e:96:0f:7d:41:52:8e:d0:
ba:c7:16:7a:46:13:62:93:d9:1d:fe:65:87:5d:1a:
44:89:7f:98:63:c2:fe:4e:e4:b0:e6:19:4b:44:20:
ee:36:63:60:d9:12:6d:b6:6c:6b:1e:1f:ff:01:69:
0e:65:c3:4f:ea:2a:a2:94:a2:b4:51:a6:c6:96:0f:
e1:bb:b7:f8:12:f1:89:9a:49:68:bc:f3:d0:79:45:
87:10:c2:2c:46:2c:98:e7:3c:04:ed:30:a9:3a:bb:
44:22:5c:a5:22:de:cd:42:7e:b6:19:36:a3:2c:b9:
02:6b:24:bd:28:cc:1e:84:06:c8:6d:6c:db:e1:ea:
1e:81:d1:10:dd:6e:7b:dc:2d:2b:68:ac:7a:da:20:
49:06:18:0a:d4:89:0c:c3:22:0d:92:39:e7:02:a7:
d0:92:28:6f:df:5e:72:a6:80:9a:22:a7:6d:69:45:
63:ab:b5:01:47:e6:76:f7:b2:2f:03:b5:50:9f:2b:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:04:CE:70:E8:D9:5E:E1:26:20:95:B1:F9:32:0C:0D:1C:EE:2F
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eaUEznDo2V7hJiCVsfkyDA0c7i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.62.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0e:d0:bb:e7:60:2e:f1:e1:60:f3:51:e5:37:77:82:6e:a4:
c4:7c:64:85:55:e7:e1:58:d0:59:fc:fa:8f:40:b8:ab:ea:95:
3d:d0:d2:f3:ea:61:82:d1:69:a4:7f:72:08:cb:da:02:50:e9:
67:3a:f4:74:dd:17:e6:f8:8c:40:d2:31:87:4b:d9:5e:f6:95:
61:be:0a:99:a7:1c:d2:d4:dd:9c:95:c1:b5:9c:da:85:04:89:
67:8c:1f:13:3d:37:60:3c:0a:62:e6:21:38:66:0f:9a:49:7d:
1b:46:c3:4a:05:3d:af:7e:0a:5e:90:ac:9b:69:05:8c:e6:34:
00:d3:88:7d:eb:95:8e:9b:6c:1f:38:be:ae:af:8b:d5:74:7e:
05:aa:98:b8:d5:0f:fc:af:12:fd:39:fd:74:f0:8e:f3:3b:1e:
74:ea:87:f2:e4:38:be:10:39:54:bb:c9:0d:8e:e9:2f:5d:80:
d9:81:c7:36:4d:bc:26:08:10:1b:a4:9b:a6:ab:74:6a:29:f6:
71:9f:b8:de:44:70:b4:52:6a:db:5f:46:87:4c:9a:8c:b2:6a:
be:12:29:76:cc:c1:d5:d8:c8:fd:d8:c5:c3:a1:a4:a7:72:09:
45:ec:6e:5a:c0:8e:63:ef:51:f1:e0:06:96:e8:0b:02:2e:38:
a8:1c:dc:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDjUl7vetZzPV0xeuLGZFlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1
NDE5MWIwHhcNMjQwNzI0MDU1OTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE1MDRjZTcwZThkOTVlZTEyNjIwOTViMWY5MzIwYzBkMWNlZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2u/SVMJpR4M8klEdAg9lqzdansz
4ePJucfFFqC2G4cX8E09b9kUTLZj9YsAtJ8d5t5QIfPn8Xprxbpvuf8pGOS5XpYP
fUFSjtC6xxZ6RhNik9kd/mWHXRpEiX+YY8L+TuSw5hlLRCDuNmNg2RJttmxrHh//
AWkOZcNP6iqilKK0UabGlg/hu7f4EvGJmklovPPQeUWHEMIsRiyY5zwE7TCpOrtE
IlylIt7NQn62GTajLLkCayS9KMwehAbIbWzb4eoegdEQ3W573C0raKx62iBJBhgK
1IkMwyINkjnnAqfQkihv315ypoCaIqdtaUVjq7UBR+Z297IvA7VQnyvUjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmlBM5w6Nle4SYglbH5MgwNHO4vMB8GA1UdIwQY
MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt
M2UwNmEwMTgyNjE0LzEvZWFVRXpuRG8yVjdoSmlDVnNma3lEQTBjN2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0
LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+M+MA0G
CSqGSIb3DQEBCwUAA4IBAQBEDtC752Au8eFg81HlN3eCbqTEfGSFVefhWNBZ/PqP
QLir6pU90NLz6mGC0Wmkf3IIy9oCUOlnOvR03Rfm+IxA0jGHS9le9pVhvgqZpxzS
1N2clcG1nNqFBIlnjB8TPTdgPApi5iE4Zg+aSX0bRsNKBT2vfgpekKybaQWM5jQA
04h965WOm2wfOL6ur4vVdH4Fqpi41Q/8rxL9Of108I7zOx506ofy5Di+EDlUu8kN
jukvXYDZgcc2TbwmCBAbpJumq3RqKfZxn7jeRHC0UmrbX0aHTJqMsmq+Eil2zMHV
2Mj92MXDoaSncglF7G5awI5j71Hx4AaW6AsCLjioHNyq
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:28 2025 by rpki-client