Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/w8M0Jraztrpl3tArLywe8tkQorE.roa
File: w8M0Jraztrpl3tArLywe8tkQorE.roa (raw, json)
Hash identifier: Jbyj4eiTskIORF3sFZNlHmOiw67MGQX+1mij4XQ+ljg=
Subject key identifier: C3:C3:34:26:B6:B3:B6:BA:65:DE:D0:2B:2F:2C:1E:F2:D9:10:A2:B1
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 018CB5EE8A796F6DE17266A8B08CD17E8806
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/w8M0Jraztrpl3tArLywe8tkQorE.roa
Signing time: Fri 29 Dec 2023 14:15:58 +0000
ROA not before: Fri 29 Dec 2023 14:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56597
IP address blocks: 91.225.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:ee:8a:79:6f:6d:e1:72:66:a8:b0:8c:d1:7e:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Dec 29 14:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3c33426b6b3b6ba65ded02b2f2c1ef2d910a2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:91:60:77:f9:c7:35:2b:18:9f:60:98:fa:
62:84:00:d0:3c:0d:1c:34:75:b1:16:b7:96:e8:01:
dc:3d:f8:8f:48:df:75:d2:4e:74:d8:56:7b:73:e2:
0e:a8:d4:55:bd:2b:1d:e6:fe:93:50:ed:2b:19:7a:
be:22:12:d7:2d:59:09:74:59:b7:a9:92:13:4b:7c:
31:60:4e:6e:d1:db:d0:b6:20:38:2c:05:c0:71:aa:
3c:ae:cb:1a:47:b8:9f:df:2f:fa:fe:6b:1f:52:c4:
1a:66:1f:62:f3:85:33:c2:a2:f3:38:67:3b:43:08:
ae:30:6c:45:b1:5b:e4:c0:41:47:4e:59:a5:5d:f5:
10:6a:60:f6:8f:ff:05:e5:c7:31:04:f2:1a:d3:8d:
c9:11:0d:c9:28:59:1c:e4:a3:72:f1:7d:a3:bd:38:
3d:30:e1:10:b1:1e:d0:2b:2b:81:6f:ab:89:9f:af:
79:15:29:b6:a8:2d:ef:a8:0d:f2:4f:22:ea:a7:7e:
9d:ec:a8:59:be:1d:3b:ed:d8:5e:14:00:27:e5:f3:
f2:c2:44:12:8c:39:ff:d2:7d:d0:30:11:de:7f:a7:
68:0f:3b:3b:64:f8:21:9a:21:b3:8e:2c:be:28:33:
27:3e:9c:12:bb:1f:96:70:7d:e2:7f:8f:12:5b:7c:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:34:26:B6:B3:B6:BA:65:DE:D0:2B:2F:2C:1E:F2:D9:10:A2:B1
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/w8M0Jraztrpl3tArLywe8tkQorE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.240.0/22
Signature Algorithm: sha256WithRSAEncryption
75:5b:36:bb:dd:a1:b5:cd:c3:b8:7a:0d:d5:20:ec:5c:e1:69:
8f:72:1b:6a:ba:33:b9:42:9c:b4:b3:04:97:05:a2:fb:46:92:
98:65:9c:7c:d9:72:15:cc:a9:48:b0:4d:0f:83:b6:d1:ef:fb:
83:22:7b:5b:78:5b:d0:79:07:aa:db:6f:81:26:4c:fd:13:18:
12:a1:04:f0:ea:75:69:b8:e3:63:bb:c2:38:c8:33:d2:17:34:
78:c1:9d:3f:12:52:f9:78:ce:e4:74:53:fe:a5:a2:13:c3:66:
83:9b:29:d0:8f:ba:0c:7e:6d:27:a9:34:f3:91:09:c4:9b:09:
55:d4:1d:e4:9d:04:e5:7a:67:e8:a0:9c:c4:27:0d:68:41:e9:
3f:7a:e0:94:47:bb:36:07:8e:33:6f:02:02:71:f1:18:c2:ad:
14:80:49:c6:61:1e:bf:39:32:92:8e:5c:22:e2:0d:6f:bf:10:
74:4e:08:76:ea:8a:fc:ba:b2:27:54:51:20:81:b7:65:e8:a3:
e9:72:2d:17:8a:01:67:0e:20:79:88:2a:9e:dd:2c:6c:01:5b:
68:ca:1b:c4:f0:29:08:00:d2:7f:be:94:92:ca:0b:be:46:17:
fc:f8:4b:36:bf:36:20:2b:f4:5d:aa:5e:8c:7c:76:53:e9:e2:
6f:2a:c3:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYy17op5b23hcmaosIzRfogGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm
OTgxYTgwHhcNMjMxMjI5MTQxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2MzMzQyNmI2YjNiNmJhNjVkZWQwMmIyZjJjMWVmMmQ5MTBhMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy2RYHf5xzUrGJ9gmPpihADQPA0c
NHWxFreW6AHcPfiPSN910k502FZ7c+IOqNRVvSsd5v6TUO0rGXq+IhLXLVkJdFm3
qZITS3wxYE5u0dvQtiA4LAXAcao8rssaR7if3y/6/msfUsQaZh9i84UzwqLzOGc7
QwiuMGxFsVvkwEFHTlmlXfUQamD2j/8F5ccxBPIa043JEQ3JKFkc5KNy8X2jvTg9
MOEQsR7QKyuBb6uJn695FSm2qC3vqA3yTyLqp36d7KhZvh077dheFAAn5fPywkQS
jDn/0n3QMBHef6doDzs7ZPghmiGzjiy+KDMnPpwSux+WcH3if48SW3zlLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPDNCa2s7a6Zd7QKy8sHvLZEKKxMB8GA1UdIwQY
MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt
ZjA3YTIxOGUxY2M3LzEvdzhNMEpyYXp0cnBsM3RBckx5d2U4dGtRb3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3
LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+HwMA0G
CSqGSIb3DQEBCwUAA4IBAQB1Wza73aG1zcO4eg3VIOxc4WmPchtqujO5Qpy0swSX
BaL7RpKYZZx82XIVzKlIsE0Pg7bR7/uDIntbeFvQeQeq22+BJkz9ExgSoQTw6nVp
uONju8I4yDPSFzR4wZ0/ElL5eM7kdFP+paITw2aDmynQj7oMfm0nqTTzkQnEmwlV
1B3knQTlemfooJzEJw1oQek/euCUR7s2B44zbwICcfEYwq0UgEnGYR6/OTKSjlwi
4g1vvxB0Tgh26or8urInVFEggbdl6KPpci0XigFnDiB5iCqe3SxsAVtoyhvE8CkI
ANJ/vpSSygu+Rhf8+Es2vzYgK/Rdql6MfHZT6eJvKsPP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:53 2024 by rpki-client on console-ams.rpki-client.org