Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/dHb--72wxR-UyA8zOk9OHvTUBFk.roa
File: dHb--72wxR-UyA8zOk9OHvTUBFk.roa (raw, json)
Hash identifier: gMCBBuW5aX6AfczA3Ycpr4EMjnmeJFr8Hs7rMGGDLqk=
Subject key identifier: 74:76:FE:FB:BD:B0:C5:1F:94:C8:0F:33:3A:4F:4E:1E:F4:D4:04:59
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 01856BD35DA2709667034A4FEDCC098BF53C
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/dHb--72wxR-UyA8zOk9OHvTUBFk.roa
Signing time: Sun 01 Jan 2023 05:34:52 +0000
ROA not before: Sun 01 Jan 2023 05:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210612
IP address blocks: 91.246.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 01:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:5d:a2:70:96:67:03:4a:4f:ed:cc:09:8b:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jan 1 05:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7476fefbbdb0c51f94c80f333a4f4e1ef4d40459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:0a:59:16:6a:94:94:df:e2:ec:f5:07:17:
28:09:2c:5d:37:5d:64:52:4b:b7:7d:ee:40:af:f6:
71:79:07:b6:64:d2:d6:a1:5d:b1:5e:f7:fe:3b:83:
1a:94:9d:f1:d9:33:27:5a:9c:f1:e5:d6:ad:68:d2:
c6:c6:de:13:00:47:8e:33:41:18:64:be:09:13:57:
d0:e4:e0:28:3a:8b:9e:58:fa:8a:a5:89:54:3a:d0:
ff:34:14:45:a2:73:5c:4a:92:91:11:27:f3:e4:3e:
8c:96:0f:27:23:94:ee:82:4f:20:99:b4:d3:f2:4e:
2c:1a:ca:5a:a3:74:26:6a:22:d4:a6:4a:8c:88:6b:
ce:06:5c:8a:45:8f:d0:9e:90:0a:92:db:f8:44:0c:
9b:27:1e:fc:7e:e8:5d:8c:74:b5:6d:e3:3a:67:40:
0f:c9:00:eb:9e:db:f6:12:91:e8:c8:8a:86:11:22:
09:6f:86:d0:58:0f:7e:6f:6c:37:0e:d7:f0:ad:e0:
50:22:13:57:fa:31:0b:28:b2:01:8e:6d:99:8e:6a:
e6:94:7f:bb:68:f9:8f:5d:15:83:9a:6b:b5:a1:61:
a3:f1:ff:5d:e3:e0:ca:87:10:bb:98:71:ef:ba:bd:
55:78:10:35:a9:0d:99:0b:ca:73:47:e8:f1:9c:fd:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:76:FE:FB:BD:B0:C5:1F:94:C8:0F:33:3A:4F:4E:1E:F4:D4:04:59
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/dHb--72wxR-UyA8zOk9OHvTUBFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.61.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3c:17:28:f1:de:dc:d8:4b:8b:87:d5:c4:f1:e0:7b:20:d5:
d2:11:65:ef:2b:00:ce:0c:95:93:42:9f:2c:a9:cb:e2:65:62:
05:c7:d4:e1:dd:17:4b:2c:e5:77:7c:2a:39:c0:46:c7:8a:14:
91:d9:1e:7f:c7:16:1f:d0:60:23:6c:f8:d6:20:eb:8a:96:33:
2b:9a:27:f3:2e:b4:89:60:c3:36:63:7f:ba:a6:e7:21:f3:ee:
f3:40:2f:fd:2e:1c:20:b3:ba:b8:67:0e:6a:e0:85:27:80:04:
73:79:49:51:d4:16:b9:10:1f:b3:1d:73:35:6e:4d:fa:92:5a:
8a:1e:b9:16:93:dc:6c:eb:ac:1f:9e:89:5c:3e:d5:d5:e4:e3:
14:8c:d9:a0:52:70:1c:b8:90:bd:4c:d7:e5:dd:5c:c2:0c:b4:
39:a7:16:0c:f9:51:e6:a7:ac:07:8b:d1:c8:01:66:ab:df:23:
f0:70:13:2b:40:f1:5f:04:8e:cb:8d:06:79:46:2f:4c:13:c0:
a2:88:d1:08:3d:27:90:74:19:5f:da:dd:0a:a5:e6:b9:dc:c5:
37:b3:62:20:1f:52:60:0b:dd:5e:ec:82:09:df:a6:a7:d5:04:
6d:83:5b:65:dd:ec:e6:80:f9:83:7c:5f:39:4a:94:f5:b5:30:
79:8a:53:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr012icJZnA0pP7cwJi/U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjMwMTAxMDUzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDc2ZmVmYmJkYjBjNTFmOTRjODBmMzMzYTRmNGUxZWY0ZDQwNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj20KWRZqlJTf4uz1BxcoCSxdN11k
Uku3fe5Ar/ZxeQe2ZNLWoV2xXvf+O4MalJ3x2TMnWpzx5dataNLGxt4TAEeOM0EY
ZL4JE1fQ5OAoOoueWPqKpYlUOtD/NBRFonNcSpKRESfz5D6Mlg8nI5Tugk8gmbTT
8k4sGspao3QmaiLUpkqMiGvOBlyKRY/QnpAKktv4RAybJx78fuhdjHS1beM6Z0AP
yQDrntv2EpHoyIqGESIJb4bQWA9+b2w3DtfwreBQIhNX+jELKLIBjm2ZjmrmlH+7
aPmPXRWDmmu1oWGj8f9d4+DKhxC7mHHvur1VeBA1qQ2ZC8pzR+jxnP0LawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHR2/vu9sMUflMgPMzpPTh701ARZMB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvZEhiLS03Mnd4Ui1VeUE4ek9rOU9IdlRVQkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y9MA0G
CSqGSIb3DQEBCwUAA4IBAQBwPBco8d7c2EuLh9XE8eB7INXSEWXvKwDODJWTQp8s
qcviZWIFx9Th3RdLLOV3fCo5wEbHihSR2R5/xxYf0GAjbPjWIOuKljMrmifzLrSJ
YMM2Y3+6puch8+7zQC/9Lhwgs7q4Zw5q4IUngARzeUlR1Ba5EB+zHXM1bk36klqK
HrkWk9xs66wfnolcPtXV5OMUjNmgUnAcuJC9TNfl3VzCDLQ5pxYM+VHmp6wHi9HI
AWar3yPwcBMrQPFfBI7LjQZ5Ri9ME8CiiNEIPSeQdBlf2t0Kpea53MU3s2IgH1Jg
C91e7IIJ36an1QRtg1tl3ezmgPmDfF85SpT1tTB5ilNb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org