Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1-oJdBA0A3avl3oKIM947xzkmJoQ.roa
File: 1-oJdBA0A3avl3oKIM947xzkmJoQ.roa (raw, json)
Hash identifier: YPZTkzG1EZS3j8DYZEKjVUtNQjjlcBc3vQJQex8D3ic=
Subject key identifier: FA:82:5D:04:0D:00:DD:AB:E5:DE:82:88:33:DE:3B:C7:39:26:26:84
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018571BA10867AC3FBBACFC5A00EABD530E3
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1-oJdBA0A3avl3oKIM947xzkmJoQ.roa
Signing time: Mon 02 Jan 2023 09:04:57 +0000
ROA not before: Mon 02 Jan 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 91.225.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 08:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:10:86:7a:c3:fb:ba:cf:c5:a0:0e:ab:d5:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa825d040d00ddabe5de828833de3bc739262684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:71:84:9c:7e:bd:7e:55:20:ba:85:8d:d6:
6b:f4:55:57:67:e2:e5:d6:16:3d:c1:e9:73:ac:77:
45:32:43:81:6c:88:07:c6:fe:14:76:0e:a2:fe:de:
fd:54:f0:2d:50:f8:38:f2:36:c0:97:c9:9d:68:f7:
6a:c5:9c:4c:a1:b3:9e:b7:6e:8d:5a:6b:dd:8b:fd:
44:e3:47:e4:f6:ad:a1:58:35:dc:79:31:c7:87:25:
cc:bb:05:96:cb:4d:ed:82:1d:94:7d:dc:07:28:24:
10:12:78:d7:7e:91:f9:23:03:11:d2:90:ff:7a:92:
df:39:bc:d3:b9:40:e1:fa:fb:20:25:fb:6a:29:0a:
cb:32:10:a2:eb:a5:b1:2b:d6:10:52:f9:b9:64:3e:
d6:f7:eb:53:5b:80:70:a1:88:f3:03:4b:4c:e7:88:
43:e7:b5:a9:97:b6:39:5d:8b:35:72:63:f9:36:67:
e1:87:ea:7f:18:0e:29:c5:4c:38:bc:54:b9:d2:30:
af:56:26:c7:8a:af:78:f5:2e:13:86:c1:b7:47:86:
7f:45:9e:89:e7:88:5b:4f:81:29:30:95:b6:f8:cb:
6e:ff:7b:46:a6:f2:93:d8:d8:74:70:1e:ac:c9:dc:
67:81:08:48:a3:84:5d:ed:20:fa:95:d7:3d:93:1a:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:82:5D:04:0D:00:DD:AB:E5:DE:82:88:33:DE:3B:C7:39:26:26:84
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1-oJdBA0A3avl3oKIM947xzkmJoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6b:0d:93:ff:14:87:8a:ba:81:e7:8a:a4:30:b6:fd:03:14:
08:60:7f:58:8a:9b:d8:ee:d4:1e:3f:88:64:01:29:25:a8:a2:
6d:bd:1c:88:ca:be:7f:57:00:ee:f8:65:54:54:e4:a1:48:85:
4e:5d:5c:cc:50:b8:0e:0e:94:ae:de:aa:30:f2:ac:23:9c:d4:
97:8c:7e:f4:e1:c6:75:f4:8f:1d:05:b3:ca:50:d2:7d:38:bd:
b1:8e:79:33:f3:59:5d:e3:c7:38:1c:43:45:70:90:bf:08:5c:
53:e8:11:43:a4:06:77:00:09:c4:2e:49:3c:89:c4:fb:e8:da:
35:f9:f4:5a:cc:23:dd:13:36:a6:3b:d6:fd:0c:96:1e:40:6d:
de:4f:b2:3d:3f:35:d5:5c:3b:17:a6:ac:2a:7b:60:e4:92:98:
6f:5c:72:02:02:12:64:4d:d6:32:75:8b:ef:e9:b8:07:93:9d:
37:2f:8e:0b:d9:e3:45:26:10:ce:7e:b0:cf:f6:52:67:b3:6e:
4b:b0:85:85:54:fd:16:d5:a1:a9:94:b6:91:b6:bc:51:ab:d5:
e4:f4:02:b7:69:85:77:61:dc:83:ba:62:9a:10:c6:01:c9:44:
90:ee:cf:ec:b0:91:8c:64:41:eb:5e:f1:b9:ad:71:07:51:fc:
3a:f4:3a:29
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxuhCGesP7us/FoA6r1TDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjMwMTAyMDkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTgyNWQwNDBkMDBkZGFiZTVkZTgyODgzM2RlM2JjNzM5MjYyNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipJxhJx+vX5VILqFjdZr9FVXZ+Ll
1hY9welzrHdFMkOBbIgHxv4Udg6i/t79VPAtUPg48jbAl8mdaPdqxZxMobOet26N
Wmvdi/1E40fk9q2hWDXceTHHhyXMuwWWy03tgh2UfdwHKCQQEnjXfpH5IwMR0pD/
epLfObzTuUDh+vsgJftqKQrLMhCi66WxK9YQUvm5ZD7W9+tTW4BwoYjzA0tM54hD
57Wpl7Y5XYs1cmP5Nmfhh+p/GA4pxUw4vFS50jCvVibHiq949S4ThsG3R4Z/RZ6J
54hbT4EpMJW2+Mtu/3tGpvKT2Nh0cB6sydxngQhIo4Rd7SD6ldc9kxpRxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqCXQQNAN2r5d6CiDPeO8c5JiaEMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvMS1vSmRCQTBBM2F2bDNvS0lNOTQ3eHprbUpvUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvNGFiZjNmLTE1OGYtNGY2Mi1hOWViLWRkZjU2N2VkZWQw
My8xL2pScklQdU9qLVdqV2F0TDk5R0Z1ZTdIazBkYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvh4jAN
BgkqhkiG9w0BAQsFAAOCAQEADGsNk/8Uh4q6geeKpDC2/QMUCGB/WIqb2O7UHj+I
ZAEpJaiibb0ciMq+f1cA7vhlVFTkoUiFTl1czFC4Dg6Urt6qMPKsI5zUl4x+9OHG
dfSPHQWzylDSfTi9sY55M/NZXePHOBxDRXCQvwhcU+gRQ6QGdwAJxC5JPInE++ja
Nfn0Wswj3RM2pjvW/QyWHkBt3k+yPT811Vw7F6asKntg5JKYb1xyAgISZE3WMnWL
7+m4B5OdNy+OC9njRSYQzn6wz/ZSZ7NuS7CFhVT9FtWhqZS2kba8UavV5PQCt2mF
d2Hcg7pimhDGAclEkO7P7LCRjGRB617xua1xB1H8OvQ6KQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:05 2024 by rpki-client on console-fra.rpki-client.org