Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/6JYoO2QeYYBW3QOhCneHyDIQ1t8.roa
File: 6JYoO2QeYYBW3QOhCneHyDIQ1t8.roa (raw, json)
Hash identifier: q1SG4bmPkfXZYlmTkHb4cHPL2TmJZrP2LaKYAZ2/4PY=
Subject key identifier: E8:96:28:3B:64:1E:61:80:56:DD:03:A1:0A:77:87:C8:32:10:D6:DF
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 01856F0B6BB2FB91B8285643E0F168854438
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/6JYoO2QeYYBW3QOhCneHyDIQ1t8.roa
Signing time: Sun 01 Jan 2023 20:34:57 +0000
ROA not before: Sun 01 Jan 2023 20:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41737
IP address blocks: 91.202.160.0/22 maxlen: 24
194.145.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6b:b2:fb:91:b8:28:56:43:e0:f1:68:85:44:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Jan 1 20:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e896283b641e618056dd03a10a7787c83210d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:61:1f:5d:8f:25:b4:df:29:92:ea:1c:76:44:
e1:29:69:50:39:ae:5f:08:d5:da:3f:dd:2d:73:4f:
af:32:fd:15:1b:cf:af:68:ba:96:0b:e1:b1:df:4e:
12:20:c0:e2:f0:49:c0:a9:7c:dc:8a:12:e8:cf:d0:
81:79:54:4e:d5:50:cd:86:89:26:3f:e5:1a:36:31:
e2:10:3d:d8:2b:31:37:a6:38:d6:f2:9e:77:c9:14:
3c:9f:5a:7d:26:f0:3a:0d:63:a7:62:a9:8b:88:55:
dc:86:95:ef:54:51:68:c5:2b:15:06:9b:d7:c1:3a:
ea:28:19:b8:82:7a:f0:53:70:be:1e:1a:23:dd:f5:
2b:72:cf:67:21:bd:9b:a5:cc:3d:19:95:5d:7e:dc:
4c:b8:1f:cd:06:d8:ce:8b:fb:be:c8:40:80:45:47:
62:81:cd:5c:3c:0e:4b:d9:f9:b1:d5:23:2a:d3:6a:
4b:ea:fa:f8:5f:ff:18:b1:af:df:a4:6c:0e:a1:aa:
5f:fb:93:2f:66:de:82:d7:2d:cc:8b:81:19:9b:7a:
25:95:53:5c:5d:12:24:53:a6:99:5b:bb:51:22:9c:
37:20:a7:de:72:37:12:a4:c1:20:6b:1a:01:c8:5a:
77:cf:3b:68:9e:74:f3:5b:59:d9:cb:9b:a8:16:98:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:28:3B:64:1E:61:80:56:DD:03:A1:0A:77:87:C8:32:10:D6:DF
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/6JYoO2QeYYBW3QOhCneHyDIQ1t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.160.0/22
194.145.220.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a5:09:3f:84:ed:4d:26:63:31:b9:84:91:6b:37:88:d1:d2:
4a:67:6b:6e:9d:cb:ab:7d:c7:c6:ce:f6:58:6b:6d:64:f2:3c:
d5:c7:6e:27:57:8f:9a:03:c6:9f:17:22:d0:66:f1:ed:38:d9:
32:fb:10:87:e2:cc:c8:33:89:4f:b6:2c:0c:e5:0a:5f:b7:2c:
e8:eb:cc:c6:76:5f:74:91:ad:17:8d:bc:57:02:02:1f:84:ae:
ad:ec:7e:98:2e:b3:88:78:e9:3a:ed:a2:4b:55:0d:aa:73:14:
35:2c:30:3a:82:3f:e8:f5:14:2e:2c:b6:b7:3b:2e:ab:ab:79:
30:9c:0d:5c:62:f9:61:cb:51:98:a7:97:07:3b:e7:c7:19:09:
f2:bc:ae:02:1d:dd:1f:ef:7e:17:fd:c9:96:b5:e9:02:2e:af:
6e:54:db:19:38:33:ec:ca:b3:d9:79:59:d9:da:5e:a5:14:a9:
3f:7b:86:48:92:51:0d:3f:82:f9:3a:dc:44:ab:88:79:a1:9c:
71:22:c5:7d:06:d8:36:2f:6e:95:44:73:7a:a0:c0:5c:1f:45:
6f:2a:1b:7c:fa:12:f2:aa:fb:9f:3f:b0:a1:c3:09:7e:5c:de:
c3:2e:46:53:d0:f8:55:70:74:1d:d5:48:90:17:99:c5:62:b0:
fb:52:13:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvC2uy+5G4KFZD4PFohUQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYjI1YTZjMzkyYjhlNjdhM2FkMjFmNjBmZDMzMTFkNmI3
ZjFlNWMwHhcNMjMwMTAxMjAzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODk2MjgzYjY0MWU2MTgwNTZkZDAzYTEwYTc3ODdjODMyMTBkNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WEfXY8ltN8pkuocdkThKWlQOa5f
CNXaP90tc0+vMv0VG8+vaLqWC+Gx304SIMDi8EnAqXzcihLoz9CBeVRO1VDNhokm
P+UaNjHiED3YKzE3pjjW8p53yRQ8n1p9JvA6DWOnYqmLiFXchpXvVFFoxSsVBpvX
wTrqKBm4gnrwU3C+Hhoj3fUrcs9nIb2bpcw9GZVdftxMuB/NBtjOi/u+yECARUdi
gc1cPA5L2fmx1SMq02pL6vr4X/8Ysa/fpGwOoapf+5MvZt6C1y3Mi4EZm3ollVNc
XRIkU6aZW7tRIpw3IKfecjcSpMEgaxoByFp3zztonnTzW1nZy5uoFpgGTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOiWKDtkHmGAVt0DoQp3h8gyENbfMB8GA1UdIwQY
MBaAFFqyWmw5K45no60h9g/TMR1rfx5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3JKYWJEa3JqbWVqclNIMkQ5TXhIV3RfSGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84MWY3NmYtZDg3OC00NGExLTgyYzct
MmNjYjVmMGM1ZjZiLzEvNkpZb08yUWVZWUJXM1FPaENuZUh5RElRMXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84MWY3NmYtZDg3OC00NGExLTgyYzctMmNjYjVmMGM1ZjZi
LzEvV3JKYWJEa3JqbWVqclNIMkQ5TXhIV3RfSGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8qgAwQB
wpHcMA0GCSqGSIb3DQEBCwUAA4IBAQBBpQk/hO1NJmMxuYSRazeI0dJKZ2tuncur
fcfGzvZYa21k8jzVx24nV4+aA8afFyLQZvHtONky+xCH4szIM4lPtiwM5Qpftyzo
68zGdl90ka0XjbxXAgIfhK6t7H6YLrOIeOk67aJLVQ2qcxQ1LDA6gj/o9RQuLLa3
Oy6rq3kwnA1cYvlhy1GYp5cHO+fHGQnyvK4CHd0f734X/cmWtekCLq9uVNsZODPs
yrPZeVnZ2l6lFKk/e4ZIklENP4L5OtxEq4h5oZxxIsV9Btg2L26VRHN6oMBcH0Vv
Kht8+hLyqvufP7Chwwl+XN7DLkZT0PhVcHQd1UiQF5nFYrD7UhO0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:59 2024 by rpki-client on console-fra.rpki-client.org