Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/SoIaKoS2AmdCw0w-DCknxjEGCFk.roa
File: SoIaKoS2AmdCw0w-DCknxjEGCFk.roa (raw, json)
Hash identifier: GqrqiNDKcEvae39AyH650f/zYuCfHSo5zCYMn1I+cXM=
Subject key identifier: 4A:82:1A:2A:84:B6:02:67:42:C3:4C:3E:0C:29:27:C6:31:06:08:59
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0187652AE3CCBF0AFEDE27180E0FC04E12E9
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/SoIaKoS2AmdCw0w-DCknxjEGCFk.roa
Signing time: Sun 09 Apr 2023 08:38:42 +0000
ROA not before: Sun 09 Apr 2023 08:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.225.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 04:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:2a:e3:cc:bf:0a:fe:de:27:18:0e:0f:c0:4e:12:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 9 08:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a821a2a84b6026742c34c3e0c2927c631060859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:c0:5e:e2:8b:ca:e9:a5:38:fe:c9:df:05:
dc:48:6d:cb:7a:99:90:d3:1a:81:a7:15:68:34:1b:
a2:a6:61:1e:b5:19:ae:c7:5f:cc:23:7a:55:2e:e0:
e3:6e:0a:7c:62:6b:6c:a7:9e:03:14:0a:06:ad:18:
6d:93:94:4e:ef:bd:64:ae:03:2d:d1:e9:92:ba:cb:
69:1e:bb:7b:ef:f8:3e:88:8c:8e:09:2c:4a:c6:8e:
60:e9:0e:f3:cc:ac:5c:c8:08:03:4b:b4:d4:2f:9a:
11:b6:98:37:34:cd:12:9f:ca:4d:e1:77:70:d3:35:
e7:e5:f5:77:77:70:bc:40:1f:c2:43:96:58:02:24:
d6:a9:a5:61:9e:b2:e2:23:1a:25:c1:b6:cc:be:11:
84:91:01:f7:78:78:d2:bc:e8:14:64:d6:b1:70:ab:
05:bc:7d:1d:7a:0b:4d:e3:8d:2c:2b:13:ab:90:8f:
39:e0:73:c2:24:b5:c5:81:a1:fe:3c:15:da:11:ea:
44:bc:81:59:b5:3e:3f:90:5f:a8:98:27:a1:58:62:
26:23:46:6d:37:20:55:f7:08:82:d2:4d:d7:31:13:
90:d7:92:bb:cb:e5:be:21:9a:62:0f:b7:2f:2c:9b:
3b:5b:ee:07:be:69:ae:c3:48:4d:db:f2:ba:51:e0:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:82:1A:2A:84:B6:02:67:42:C3:4C:3E:0C:29:27:C6:31:06:08:59
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/SoIaKoS2AmdCw0w-DCknxjEGCFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.226.0/24
Signature Algorithm: sha256WithRSAEncryption
13:40:6d:6c:f4:44:41:71:9e:df:60:f0:cf:41:85:f8:fb:c6:
cc:40:28:f9:be:93:15:cd:eb:98:bb:9b:7e:53:05:ea:c0:f2:
99:25:03:74:ef:71:18:c0:a5:03:c4:99:57:52:5b:c0:a1:13:
0a:d5:71:42:62:ee:95:c6:da:0e:76:9f:b3:b3:95:5a:e9:f8:
40:81:f3:31:8f:e7:d8:64:74:d7:fd:a1:40:9f:b5:ec:c9:1c:
27:b1:85:f7:f3:56:45:fc:78:1f:76:de:c0:8b:1f:aa:92:8e:
c8:0c:51:6c:2b:89:50:fd:34:05:05:62:29:4a:53:dc:51:88:
ca:4e:8c:45:96:2a:b8:0b:54:5a:e8:5b:e2:9a:26:f3:d0:db:
80:2d:c6:73:5f:15:b9:da:a3:52:9c:c0:d2:b5:e0:58:42:cc:
49:b7:15:56:a8:e5:52:77:e2:bd:70:af:cb:93:83:22:80:f7:
bc:7f:7c:a9:17:c7:1b:99:7a:f1:70:41:3f:f5:37:2d:4c:2e:
8a:5b:81:1e:53:1a:05:11:20:8d:16:28:9d:94:b6:26:d1:0e:
d0:88:0f:ad:50:7d:6c:fb:4c:7f:31:11:6e:b9:36:d5:3e:f2:
6b:15:a6:c8:6f:f4:e6:1c:a4:5d:3e:09:1b:fc:d4:cb:b8:5f:
71:7c:3e:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdlKuPMvwr+3icYDg/AThLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjMwNDA5MDgzODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTgyMWEyYTg0YjYwMjY3NDJjMzRjM2UwYzI5MjdjNjMxMDYwODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFXAXuKLyumlOP7J3wXcSG3LepmQ
0xqBpxVoNBuipmEetRmux1/MI3pVLuDjbgp8Ymtsp54DFAoGrRhtk5RO771krgMt
0emSustpHrt77/g+iIyOCSxKxo5g6Q7zzKxcyAgDS7TUL5oRtpg3NM0Sn8pN4Xdw
0zXn5fV3d3C8QB/CQ5ZYAiTWqaVhnrLiIxolwbbMvhGEkQH3eHjSvOgUZNaxcKsF
vH0degtN440sKxOrkI854HPCJLXFgaH+PBXaEepEvIFZtT4/kF+omCehWGImI0Zt
NyBV9wiC0k3XMROQ15K7y+W+IZpiD7cvLJs7W+4Hvmmuw0hN2/K6UeDukQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqCGiqEtgJnQsNMPgwpJ8YxBghZMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvU29JYUtvUzJBbWRDdzB3LURDa254akVHQ0ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+HiMA0G
CSqGSIb3DQEBCwUAA4IBAQATQG1s9ERBcZ7fYPDPQYX4+8bMQCj5vpMVzeuYu5t+
UwXqwPKZJQN073EYwKUDxJlXUlvAoRMK1XFCYu6VxtoOdp+zs5Va6fhAgfMxj+fY
ZHTX/aFAn7XsyRwnsYX381ZF/Hgfdt7Aix+qko7IDFFsK4lQ/TQFBWIpSlPcUYjK
ToxFliq4C1Ra6Fvimibz0NuALcZzXxW52qNSnMDSteBYQsxJtxVWqOVSd+K9cK/L
k4MigPe8f3ypF8cbmXrxcEE/9TctTC6KW4EeUxoFESCNFiidlLYm0Q7QiA+tUH1s
+0x/MRFuuTbVPvJrFabIb/TmHKRdPgkb/NTLuF9xfD5y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org