Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/oqx7BU_Bnw0QAAXAaDO4Bz5qdDU.roa
File: oqx7BU_Bnw0QAAXAaDO4Bz5qdDU.roa (raw, json)
Hash identifier: EpmXdfh1t+9HstjoNmalVRH8MxEgChRHcuKzW1QgNI4=
Subject key identifier: A2:AC:7B:05:4F:C1:9F:0D:10:00:05:C0:68:33:B8:07:3E:6A:74:35
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018CC94CA67CE5523E0060B73E34668FD039
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/oqx7BU_Bnw0QAAXAaDO4Bz5qdDU.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 188.191.96.0/24 maxlen: 24
188.191.107.0/24 maxlen: 24
91.225.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a6:7c:e5:52:3e:00:60:b7:3e:34:66:8f:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2ac7b054fc19f0d100005c06833b8073e6a7435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:cd:02:b5:d5:f3:78:15:3d:b9:b3:3d:61:
47:ac:89:19:7e:ad:81:eb:4f:3e:a8:47:9d:4c:b0:
fb:c2:f7:80:6e:26:2f:3f:80:f1:95:08:9a:0a:51:
c9:c8:21:6e:0a:a1:5c:f2:65:00:df:2b:f2:6e:bb:
f9:92:31:96:2a:69:17:e0:38:b7:86:ad:84:06:47:
99:33:2f:09:33:d5:85:f7:73:58:92:7b:e0:1d:f5:
20:4b:c8:82:59:02:cc:ea:aa:eb:a5:0a:de:ae:6e:
ec:bd:e0:19:46:d8:a4:41:24:29:76:85:44:a4:56:
a3:8b:b3:29:b5:9e:f9:c5:b7:a3:76:92:28:f1:39:
9a:ce:31:80:8a:ea:e0:0e:f1:3b:90:ac:81:45:cc:
0a:24:31:bd:93:f9:9a:72:f6:5e:98:31:4d:08:4e:
56:4d:de:f8:f0:e5:80:4b:c1:4f:b2:76:4d:a2:90:
df:62:3d:12:ff:59:0c:22:43:06:5d:14:ca:8c:df:
cf:16:ef:da:0c:74:71:38:a8:78:ed:89:b4:46:ab:
bf:55:be:bc:bd:8e:f1:02:88:71:a5:7c:4f:89:ad:
13:d0:3e:66:d2:94:fd:3c:86:44:3c:b7:36:f1:50:
cf:7e:3a:85:42:43:52:20:d3:7c:f8:bb:72:66:f7:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:7B:05:4F:C1:9F:0D:10:00:05:C0:68:33:B8:07:3E:6A:74:35
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/oqx7BU_Bnw0QAAXAaDO4Bz5qdDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
188.191.96.0/24
188.191.107.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4b:52:42:06:a0:80:48:a9:75:37:b6:bc:99:cc:0d:9f:df:
7a:40:6c:0e:0d:e3:8f:81:a7:7c:29:50:d3:b0:c7:e2:99:00:
94:9f:e3:b6:41:33:1e:06:97:85:3f:01:40:2f:d9:93:b9:5b:
a0:e5:ef:b4:32:f1:25:da:68:2f:35:d8:d2:36:ec:10:fd:37:
98:8f:86:9a:12:07:05:6d:7b:77:93:77:44:fb:f0:1b:21:4a:
30:c2:8d:8e:33:6a:e2:cf:7e:06:f1:dc:4a:17:72:c5:94:7b:
2b:b1:e7:05:d1:e3:37:4d:20:9b:40:d0:d3:7c:2e:33:ff:0d:
50:95:0e:e7:b3:fc:45:b5:e2:23:4d:6f:35:99:3a:8e:c6:d4:
19:7b:4c:9d:73:e8:79:ba:84:8d:30:b4:2c:cc:e4:cc:f7:3c:
b5:1d:cf:db:73:09:a3:58:17:98:8a:50:c9:63:29:88:95:8b:
d9:7c:e8:71:ca:81:4e:b1:c3:a2:cc:2a:e6:a1:a4:20:fe:5f:
65:57:23:48:4e:f6:9b:08:db:80:a6:9e:25:5e:8c:cc:67:5e:
4e:c2:7d:7c:b5:95:5d:ee:b4:4c:f7:fe:08:61:cb:4d:89:60:
51:d8:17:37:e9:b5:76:33:4c:e1:6f:cd:40:3b:b1:8b:9e:92:
8a:9f:e1:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJTKZ85VI+AGC3PjRmj9A5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwMTAyMDgzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmFjN2IwNTRmYzE5ZjBkMTAwMDA1YzA2ODMzYjgwNzNlNmE3NDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTfNArXV83gVPbmzPWFHrIkZfq2B
608+qEedTLD7wveAbiYvP4DxlQiaClHJyCFuCqFc8mUA3yvybrv5kjGWKmkX4Di3
hq2EBkeZMy8JM9WF93NYknvgHfUgS8iCWQLM6qrrpQrerm7sveAZRtikQSQpdoVE
pFaji7MptZ75xbejdpIo8TmazjGAiurgDvE7kKyBRcwKJDG9k/macvZemDFNCE5W
Td748OWAS8FPsnZNopDfYj0S/1kMIkMGXRTKjN/PFu/aDHRxOKh47Ym0Rqu/Vb68
vY7xAohxpXxPia0T0D5m0pT9PIZEPLc28VDPfjqFQkNSINN8+LtyZvdvTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKKsewVPwZ8NEAAFwGgzuAc+anQ1MB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvb3F4N0JVX0JudzBRQUFYQWFETzRCejVxZERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+HhAwQA
vL9gAwQAvL9rMA0GCSqGSIb3DQEBCwUAA4IBAQAES1JCBqCASKl1N7a8mcwNn996
QGwODeOPgad8KVDTsMfimQCUn+O2QTMeBpeFPwFAL9mTuVug5e+0MvEl2mgvNdjS
NuwQ/TeYj4aaEgcFbXt3k3dE+/AbIUowwo2OM2riz34G8dxKF3LFlHsrsecF0eM3
TSCbQNDTfC4z/w1QlQ7ns/xFteIjTW81mTqOxtQZe0ydc+h5uoSNMLQszOTM9zy1
Hc/bcwmjWBeYilDJYymIlYvZfOhxyoFOscOizCrmoaQg/l9lVyNITvabCNuApp4l
XozMZ15Own18tZVd7rRM9/4IYctNiWBR2Bc36bV2M0zhb81AO7GLnpKKn+Gh
-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:04 2024 by rpki-client on console-fra.rpki-client.org