Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nVpRHRrIkPaeVQ9tQANwdFHNMbo.roa
File: nVpRHRrIkPaeVQ9tQANwdFHNMbo.roa (raw, json)
Hash identifier: lMkt+MMcTZlbhpx46mCXxR2f2iLLV8XYRop/ik6iuPk=
Subject key identifier: 9D:5A:51:1D:1A:C8:90:F6:9E:55:0F:6D:40:03:70:74:51:CD:31:BA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01874F856326C6EB501939208843F610316F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nVpRHRrIkPaeVQ9tQANwdFHNMbo.roa
Signing time: Wed 05 Apr 2023 03:45:54 +0000
ROA not before: Wed 05 Apr 2023 03:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.132.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Apr 2023 05:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:85:63:26:c6:eb:50:19:39:20:88:43:f6:10:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 5 03:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5a511d1ac890f69e550f6d4003707451cd31ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:97:8e:c1:d4:15:4a:da:73:0a:03:45:9c:
a6:80:30:a4:58:af:43:ff:7e:a1:39:e7:7b:ff:4f:
b8:bc:9f:d3:64:c5:e9:0d:8d:b6:8f:fb:0e:6e:2e:
d6:2f:8b:bb:54:e7:e4:4a:58:45:d1:cc:a7:5f:ac:
af:b1:af:af:7b:49:64:1e:53:26:2e:ae:dd:1f:a4:
9e:55:13:1d:a7:56:4f:8d:50:ac:21:79:25:5f:8b:
61:e0:fa:16:63:b4:29:da:86:6f:32:66:a7:a5:31:
7f:7c:75:f6:97:20:cb:a3:41:7b:3b:3a:73:f7:a9:
ea:c0:da:0c:6d:c3:8b:14:3f:c6:ff:ae:d1:ab:ff:
40:0e:f8:b7:1f:77:c8:fe:a4:b6:4b:d9:3c:52:b3:
1a:ae:ad:d3:ba:c7:4a:04:97:28:d4:4f:96:97:4d:
ad:5f:1b:49:b0:de:54:5e:95:6b:d4:49:26:e3:4e:
f0:01:45:7b:69:b7:34:8b:99:5b:37:06:3b:51:6b:
30:18:32:bc:65:d3:43:02:26:f3:61:8b:45:f1:3c:
a9:69:74:29:6f:c9:fe:82:50:16:de:1c:20:19:a9:
01:a5:b6:27:f5:62:71:6e:1c:97:80:f8:12:53:ee:
81:7d:9c:82:74:1c:e1:4c:85:c1:56:0a:37:57:5f:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:51:1D:1A:C8:90:F6:9E:55:0F:6D:40:03:70:74:51:CD:31:BA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nVpRHRrIkPaeVQ9tQANwdFHNMbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.48.0/22
Signature Algorithm: sha256WithRSAEncryption
86:df:10:fa:c4:6f:e3:13:46:09:a2:e1:0b:9f:01:c2:dd:60:
04:83:42:ac:f3:ac:53:ba:4b:7b:61:5c:10:c8:c7:89:45:61:
5b:ed:23:7d:8f:0f:4a:d2:0b:40:d5:8f:8b:21:10:a3:d1:60:
5b:55:b8:c3:b9:29:3b:8b:c6:6c:b2:bf:e6:9f:e1:4f:df:4e:
18:eb:8d:e0:ef:11:ff:d2:22:b3:e5:ca:e2:8d:5a:5a:b9:60:
ae:3a:0b:45:c0:19:59:67:04:f4:aa:37:f3:40:4f:c6:e0:eb:
5d:15:c4:07:a4:18:f2:e5:d8:37:ca:c5:d3:53:b8:05:1c:f5:
62:99:39:c0:d1:5d:e6:46:22:1c:d4:41:e9:46:5e:bf:78:27:
2e:6b:54:af:c2:7e:bc:61:11:7f:53:18:55:f1:10:eb:d2:75:
c6:75:3b:90:2f:19:e4:91:86:e0:86:a9:9f:c1:60:6d:42:23:
57:5a:7b:c4:1c:f2:16:c6:58:e6:f6:d2:2c:d8:cf:71:30:33:
fa:82:a1:75:1a:f0:ae:40:74:d8:aa:b7:1a:6f:23:e0:64:49:
33:ea:c1:0e:ee:34:3f:84:a8:61:cf:39:15:f7:6c:3a:ef:03:
a4:3e:fe:7c:dd:79:2e:3d:71:47:ab:26:e7:1d:ff:32:1d:18:
f4:da:ea:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdPhWMmxutQGTkgiEP2EDFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNDA1MDM0NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDVhNTExZDFhYzg5MGY2OWU1NTBmNmQ0MDAzNzA3NDUxY2QzMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMeXjsHUFUracwoDRZymgDCkWK9D
/36hOed7/0+4vJ/TZMXpDY22j/sObi7WL4u7VOfkSlhF0cynX6yvsa+ve0lkHlMm
Lq7dH6SeVRMdp1ZPjVCsIXklX4th4PoWY7Qp2oZvMmanpTF/fHX2lyDLo0F7Ozpz
96nqwNoMbcOLFD/G/67Rq/9ADvi3H3fI/qS2S9k8UrMarq3TusdKBJco1E+Wl02t
XxtJsN5UXpVr1Ekm407wAUV7abc0i5lbNwY7UWswGDK8ZdNDAibzYYtF8TypaXQp
b8n+glAW3hwgGakBpbYn9WJxbhyXgPgSU+6BfZyCdBzhTIXBVgo3V19/1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ1aUR0ayJD2nlUPbUADcHRRzTG6MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvblZwUkhScklrUGFlVlE5dFFBTndkRkhOTWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4QwMA0G
CSqGSIb3DQEBCwUAA4IBAQCG3xD6xG/jE0YJouELnwHC3WAEg0Ks86xTukt7YVwQ
yMeJRWFb7SN9jw9K0gtA1Y+LIRCj0WBbVbjDuSk7i8Zssr/mn+FP304Y643g7xH/
0iKz5crijVpauWCuOgtFwBlZZwT0qjfzQE/G4OtdFcQHpBjy5dg3ysXTU7gFHPVi
mTnA0V3mRiIc1EHpRl6/eCcua1Svwn68YRF/UxhV8RDr0nXGdTuQLxnkkYbghqmf
wWBtQiNXWnvEHPIWxljm9tIs2M9xMDP6gqF1GvCuQHTYqrcabyPgZEkz6sEO7jQ/
hKhhzzkV92w67wOkPv583XkuPXFHqybnHf8yHRj02ur/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org