Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1RETgPj-74AEsDajo2Uf9sZTOWQ.roa
File: 1RETgPj-74AEsDajo2Uf9sZTOWQ.roa (raw, json)
Hash identifier: AwDt9IuCSMLD8AwbOhIa06awqW8HMnHCl46g83ugZCo=
Subject key identifier: D5:11:13:80:F8:FE:EF:80:04:B0:36:A3:A3:65:1F:F6:C6:53:39:64
Certificate issuer: /CN=f9b10878ce301a26c7f841723ebe973dd5a91fa9
Certificate serial: 01856FA71937B5B11EAA610CA6FADB391E09
Authority key identifier: F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1RETgPj-74AEsDajo2Uf9sZTOWQ.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58281
IP address blocks: 91.240.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:19:37:b5:b1:1e:aa:61:0c:a6:fa:db:39:1e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b10878ce301a26c7f841723ebe973dd5a91fa9
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5111380f8feef8004b036a3a3651ff6c6533964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:15:39:63:8e:c8:86:25:cb:ba:e6:29:eb:
d9:9c:7d:eb:d5:6d:38:19:81:ee:95:ec:a7:2c:2c:
07:45:46:14:21:25:27:9c:42:6d:d3:55:7f:49:6d:
62:f7:fb:84:ff:48:6c:cc:41:8e:53:4a:f6:bb:fb:
4b:44:b7:e2:ee:92:9f:3e:a3:05:e3:2a:91:51:4e:
98:fd:3e:9d:bb:b2:3b:b1:cd:f0:d3:c9:78:a9:e5:
15:d2:05:4e:28:05:c6:7b:70:8d:2b:ac:92:45:50:
29:44:ac:7c:ea:88:13:40:5d:2a:84:63:f6:1e:02:
bd:22:b4:9c:be:41:de:99:30:9d:53:69:a5:e0:b9:
dc:34:86:4d:b6:9e:b2:68:29:38:d3:48:ce:15:76:
31:f1:2a:66:05:0d:52:97:67:cd:d0:12:e0:dc:f7:
15:cf:e6:75:6f:94:5f:53:75:b5:3c:f5:29:ab:5e:
36:19:b6:80:1b:e5:a6:e4:d5:2b:71:eb:fc:38:bd:
9c:e2:d9:c6:8b:af:66:92:4f:68:c7:0d:de:fe:36:
d8:83:e1:c5:68:04:b6:b4:0c:4e:71:66:b4:e6:b6:
20:d4:fc:f7:24:78:22:af:52:ba:50:91:79:f7:14:
bc:db:71:f5:c1:60:9a:3c:75:ea:0e:ed:50:f5:6b:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:13:80:F8:FE:EF:80:04:B0:36:A3:A3:65:1F:F6:C6:53:39:64
X509v3 Authority Key Identifier:
keyid:F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1RETgPj-74AEsDajo2Uf9sZTOWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1-bEIeM4wGibH-EFyPr6XPdWpH6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.69.0/24
Signature Algorithm: sha256WithRSAEncryption
57:70:91:e4:5b:cb:3e:ee:54:8c:2c:bc:93:08:1e:9f:5d:b3:
db:74:83:c6:29:5c:5b:15:f7:02:73:b4:73:97:b5:41:29:16:
63:32:66:72:ff:07:f0:a7:bf:53:b2:58:c0:d2:ef:94:a6:cd:
4c:8f:7a:bb:78:ab:c1:6e:31:d3:5a:29:ca:ab:35:c7:67:38:
02:34:c7:4c:1e:ef:dd:52:f5:e5:3e:14:c2:1d:5a:48:17:24:
84:bb:d1:c5:5e:55:c6:6e:8c:d5:b8:ff:8c:8d:0a:50:cc:30:
94:7b:49:ba:da:3b:23:af:6c:cd:4b:72:12:f9:cc:ad:0c:c9:
96:fd:70:0f:ba:85:ac:c5:28:3f:e7:fe:b3:d5:75:7b:fa:86:
70:b6:e1:1a:d5:70:46:d9:71:56:3f:cd:8c:9d:62:43:f0:56:
48:69:dd:20:7a:0b:94:88:f2:9f:24:17:61:f3:bd:5f:e8:17:
6f:2b:fe:e1:95:5e:8f:18:1c:85:89:f2:40:8e:22:98:8c:00:
ca:2b:72:cb:5e:d4:0d:72:64:bb:9a:37:2a:68:f1:d0:e4:d7:
24:48:e6:37:13:e4:43:bc:ee:bc:02:1f:03:c0:44:8f:4f:e7:
e2:30:b5:22:fa:34:a2:02:d3:c0:e6:66:62:44:6a:28:a4:c8:
94:51:d7:f6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVvpxk3tbEeqmEMpvrbOR4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjEwODc4Y2UzMDFhMjZjN2Y4NDE3MjNlYmU5NzNkZDVh
OTFmYTkwHhcNMjMwMTAxMjMyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTExMTM4MGY4ZmVlZjgwMDRiMDM2YTNhMzY1MWZmNmM2NTMzOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3UVOWOOyIYly7rmKevZnH3r1W04
GYHuleynLCwHRUYUISUnnEJt01V/SW1i9/uE/0hszEGOU0r2u/tLRLfi7pKfPqMF
4yqRUU6Y/T6du7I7sc3w08l4qeUV0gVOKAXGe3CNK6ySRVApRKx86ogTQF0qhGP2
HgK9IrScvkHemTCdU2ml4LncNIZNtp6yaCk400jOFXYx8SpmBQ1Sl2fN0BLg3PcV
z+Z1b5RfU3W1PPUpq142GbaAG+Wm5NUrcev8OL2c4tnGi69mkk9oxw3e/jbYg+HF
aAS2tAxOcWa05rYg1Pz3JHgir1K6UJF59xS823H1wWCaPHXqDu1Q9Wt4wwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNURE4D4/u+ABLA2o6NlH/bGUzlkMB8GA1UdIwQY
MBaAFPmxCHjOMBomx/hBcj6+lz3VqR+pMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRUllTTR3R2liSC1FRnlQcjZYUGRXcEg2ay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvNGU4YzhmLTYxZTgtNDczOS1iMjgy
LWM1N2FjM2MwMTdlYy8xLzFSRVRnUGotNzRBRXNEYWpvMlVmOXNaVE9XUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTkvNGU4YzhmLTYxZTgtNDczOS1iMjgyLWM1N2FjM2MwMTdl
Yy8xLzEtYkVJZU00d0dpYkgtRUZ5UHI2WFBkV3BINmsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb8EUw
DQYJKoZIhvcNAQELBQADggEBAFdwkeRbyz7uVIwsvJMIHp9ds9t0g8YpXFsV9wJz
tHOXtUEpFmMyZnL/B/Cnv1OyWMDS75SmzUyPert4q8FuMdNaKcqrNcdnOAI0x0we
791S9eU+FMIdWkgXJIS70cVeVcZujNW4/4yNClDMMJR7SbraOyOvbM1LchL5zK0M
yZb9cA+6hazFKD/n/rPVdXv6hnC24RrVcEbZcVY/zYydYkPwVkhp3SB6C5SI8p8k
F2HzvV/oF28r/uGVXo8YHIWJ8kCOIpiMAMorcste1A1yZLuaNypo8dDk1yRI5jcT
5EO87rwCHwPARI9P5+IwtSL6NKIC08DmZmJEaiikyJRR1/Y=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:16 2024 by rpki-client on console-ams.rpki-client.org