Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/0t6jkaj5CMZhw2QOOFd2idkTIzY.roa
File: 0t6jkaj5CMZhw2QOOFd2idkTIzY.roa (raw, json)
Hash identifier: p7D0n3zurxSA4gTvwtGnSvnfWRbPM97WCIkF3eSVOvo=
Subject key identifier: D2:DE:A3:91:A8:F9:08:C6:61:C3:64:0E:38:57:76:89:D9:13:23:36
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 0189981CBC2C7F0FE03A96F0497E68C95C32
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/0t6jkaj5CMZhw2QOOFd2idkTIzY.roa
Signing time: Thu 27 Jul 2023 16:09:27 +0000
ROA not before: Thu 27 Jul 2023 16:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49644
IP address blocks: 91.213.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:1c:bc:2c:7f:0f:e0:3a:96:f0:49:7e:68:c9:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jul 27 16:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2dea391a8f908c661c3640e38577689d9132336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:5b:29:4e:71:44:be:71:5c:ed:7e:db:f7:
ca:03:35:66:a3:54:f8:28:66:75:82:cb:12:4a:c4:
18:6f:9d:59:38:56:04:cc:5c:ef:0a:0f:9f:83:80:
b6:63:41:2c:8b:29:6c:a0:cc:87:cb:43:f6:0e:75:
34:60:5e:c0:b9:d3:00:c9:0e:d8:32:1c:a6:ae:83:
20:52:c4:0a:38:8c:45:2f:aa:f0:03:86:c9:f1:8a:
ad:7d:ee:4e:7d:11:61:60:a8:4b:a2:f2:c7:7c:1c:
39:0f:88:a4:b2:8e:3a:cd:7f:3f:fc:ae:bf:9e:b7:
ee:9c:02:3e:1f:27:1d:5b:d3:90:2e:d8:47:90:99:
39:e6:31:ae:0d:93:73:33:61:ba:c4:9c:dd:26:85:
67:ce:72:77:c0:b4:16:6e:ea:29:17:ad:cb:25:2e:
da:b5:45:0c:46:2b:e8:d5:e1:2d:3b:c0:9e:b7:72:
8c:94:8b:98:fe:10:cf:d2:ea:5a:93:cb:bf:11:6a:
3f:37:eb:d9:bc:b2:b8:fe:50:38:c8:73:f2:73:fe:
97:ae:e3:cf:47:62:0e:4f:71:88:6d:9f:15:2d:5f:
45:c9:d9:5d:83:6a:9a:70:8f:cd:5c:eb:08:5b:55:
03:40:aa:07:05:2c:6b:d9:b5:18:85:33:d7:80:78:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:A3:91:A8:F9:08:C6:61:C3:64:0E:38:57:76:89:D9:13:23:36
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/0t6jkaj5CMZhw2QOOFd2idkTIzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.51.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a8:42:c6:c0:a2:22:b6:08:e4:a5:f4:01:92:ba:db:1a:b9:
3e:aa:6d:13:6f:44:82:cd:98:af:3b:a5:18:10:f8:60:f4:60:
53:32:b5:ff:3a:5a:82:ea:d0:1a:60:9f:33:65:0b:7f:7c:7e:
26:a9:a7:30:75:cc:15:26:0a:de:e5:73:1a:86:76:b3:dc:0f:
62:1b:c1:5e:0f:6f:6f:fb:1e:74:83:6e:ca:36:3b:75:71:3b:
6a:91:41:67:ff:62:b0:9e:bd:b5:88:2e:8f:5f:5e:d2:4b:63:
32:57:87:6f:88:d3:4e:e9:99:ad:c7:10:e9:75:c4:a7:64:a7:
6a:16:cd:3f:ed:ef:af:c7:16:a7:e4:76:bf:7d:b7:97:7d:38:
a5:43:37:ff:b6:ad:a2:d8:d6:7b:62:d3:a1:58:9f:1a:f8:b7:
85:24:8e:85:59:34:56:df:52:fe:f4:cc:4e:f0:29:3c:e4:7d:
67:6e:78:fb:42:79:20:60:b3:25:65:b8:9b:d3:47:b6:1b:34:
86:04:59:9f:54:90:d9:83:35:0d:97:fd:29:ea:eb:80:30:5f:
65:a4:6c:c7:d0:2b:b7:8a:68:e5:16:aa:87:5f:4c:c8:35:d6:
c4:48:e2:a4:df:27:f5:3c:00:d7:46:5d:1a:8c:04:ff:38:b5:
5a:ec:32:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmYHLwsfw/gOpbwSX5oyVwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTZiYzcyMWM3NDBjMTBmYzdiMGQ4YjFiMzU4YTJkMzVm
NDg4YjcwHhcNMjMwNzI3MTYwOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmRlYTM5MWE4ZjkwOGM2NjFjMzY0MGUzODU3NzY4OWQ5MTMyMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrxbKU5xRL5xXO1+2/fKAzVmo1T4
KGZ1gssSSsQYb51ZOFYEzFzvCg+fg4C2Y0EsiylsoMyHy0P2DnU0YF7AudMAyQ7Y
MhymroMgUsQKOIxFL6rwA4bJ8Yqtfe5OfRFhYKhLovLHfBw5D4ikso46zX8//K6/
nrfunAI+HycdW9OQLthHkJk55jGuDZNzM2G6xJzdJoVnznJ3wLQWbuopF63LJS7a
tUUMRivo1eEtO8Cet3KMlIuY/hDP0upak8u/EWo/N+vZvLK4/lA4yHPyc/6XruPP
R2IOT3GIbZ8VLV9Fydldg2qacI/NXOsIW1UDQKoHBSxr2bUYhTPXgHhIOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLeo5Go+QjGYcNkDjhXdonZEyM2MB8GA1UdIwQY
MBaAFGQWvHIcdAwQ/HsNixs1ii019Ii3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZGIyNjQtNzNkNC00M2FjLWE5N2Ut
NTkwYjFiMmE0NjA5LzEvMHQ2amthajVDTVpodzJRT09GZDJpZGtUSXpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82ZGIyNjQtNzNkNC00M2FjLWE5N2UtNTkwYjFiMmE0NjA5
LzEvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9UzMA0G
CSqGSIb3DQEBCwUAA4IBAQCXqELGwKIitgjkpfQBkrrbGrk+qm0Tb0SCzZivO6UY
EPhg9GBTMrX/OlqC6tAaYJ8zZQt/fH4mqacwdcwVJgre5XMahnaz3A9iG8FeD29v
+x50g27KNjt1cTtqkUFn/2Kwnr21iC6PX17SS2MyV4dviNNO6ZmtxxDpdcSnZKdq
Fs0/7e+vxxan5Ha/fbeXfTilQzf/tq2i2NZ7YtOhWJ8a+LeFJI6FWTRW31L+9MxO
8Ck85H1nbnj7QnkgYLMlZbib00e2GzSGBFmfVJDZgzUNl/0p6uuAMF9lpGzH0Cu3
imjlFqqHX0zINdbESOKk3yf1PADXRl0ajAT/OLVa7DIZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:43 2024 by rpki-client on console-fra.rpki-client.org