Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/ajHxA6KcslsKzi0o41xoCsyjX98.roa
File: ajHxA6KcslsKzi0o41xoCsyjX98.roa (raw, json)
Hash identifier: vKofI2pM84XCsfLixlywW0P7+rH16S0TQR0H95dAXxI=
Subject key identifier: 6A:31:F1:03:A2:9C:B2:5B:0A:CE:2D:28:E3:5C:68:0A:CC:A3:5F:DF
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 018570CC009184915621D69175F54C549D58
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/ajHxA6KcslsKzi0o41xoCsyjX98.roa
Signing time: Mon 02 Jan 2023 04:44:55 +0000
ROA not before: Mon 02 Jan 2023 04:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212777
IP address blocks: 91.194.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:00:91:84:91:56:21:d6:91:75:f5:4c:54:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jan 2 04:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a31f103a29cb25b0ace2d28e35c680acca35fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:eb:87:63:aa:cd:ee:98:e1:59:64:04:f8:
a5:f0:00:f6:05:c4:d8:14:66:17:56:02:88:f0:2a:
64:20:59:c4:e8:9d:94:ab:99:3f:f1:0d:36:ac:ca:
1a:7b:1b:d3:1c:1a:ce:51:52:1d:83:84:29:97:7c:
29:bf:87:d7:d4:59:73:45:7e:a7:86:b6:18:1e:fa:
93:bf:8e:8e:bc:2b:86:1a:b0:8e:2d:16:de:ea:e1:
8c:c3:4c:64:d3:94:6f:f8:db:60:d4:c2:c1:36:98:
91:66:66:b8:4c:42:78:d7:ed:e1:98:74:2f:83:22:
fd:e4:b7:39:7f:a1:c8:fe:d2:da:99:8a:e0:cb:8d:
8c:3c:a6:0a:c5:43:ae:71:07:44:c2:43:6b:94:2c:
09:f0:85:95:b4:2d:61:69:98:b5:de:67:64:06:9e:
ec:20:fd:c8:51:3b:40:98:9b:1c:1d:90:a1:56:b3:
3f:fe:93:36:cc:43:3b:9a:03:f3:16:05:e7:fb:0b:
38:fa:1a:a9:57:3b:c5:02:75:7f:a5:10:8b:66:e5:
7e:c2:5a:2c:e8:7f:94:88:8a:be:6c:ae:8f:f7:8b:
3c:5d:8d:62:16:2c:30:e2:9f:83:b9:a0:97:7c:97:
88:1c:aa:84:ce:60:2d:64:0f:06:49:48:cd:44:2d:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:F1:03:A2:9C:B2:5B:0A:CE:2D:28:E3:5C:68:0A:CC:A3:5F:DF
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/ajHxA6KcslsKzi0o41xoCsyjX98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1f:bb:98:a1:c3:19:15:2d:fa:05:a3:6b:f0:e9:c9:af:2c:
d8:d5:2d:a9:1e:3e:84:c9:88:dd:d5:64:81:ea:8e:07:b5:95:
67:08:5d:6d:8f:f8:96:f5:d3:46:b1:d9:32:ad:03:08:25:3a:
e6:2b:33:0e:06:e6:93:01:1a:0c:1a:a0:03:e9:d3:27:71:ae:
38:19:30:f2:37:b2:08:e7:2a:39:4e:b3:2c:ce:d5:4a:e6:80:
45:46:76:b0:93:d1:16:3f:13:bc:1c:c1:b8:a9:80:96:54:5d:
8d:5a:ec:72:90:c9:d4:b4:40:88:d4:06:7e:7a:90:ad:a2:28:
fa:5d:f6:85:05:44:1d:8d:7c:9c:02:55:d1:9c:14:4b:95:1c:
31:e7:33:6e:0f:17:8f:5b:5e:d5:f5:d0:71:31:2e:7b:a5:58:
05:24:4e:df:2f:0a:60:88:dc:f6:9e:67:05:28:bd:f5:89:43:
63:32:9b:02:51:d2:89:98:5a:d2:e3:00:86:76:81:90:0f:10:
b7:4d:79:ee:7d:b2:bc:93:a9:c1:9e:0f:20:5f:ff:37:b0:d9:
57:d5:e1:af:0f:74:8a:57:5d:18:a2:94:d1:28:fe:81:36:e2:
d0:39:99:1b:d5:ae:f1:6f:fb:e7:84:5f:71:01:da:ba:42:df:
4f:70:9f:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwzACRhJFWIdaRdfVMVJ1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDZiYWVjYjYzYWU0NmZlZWEzMGNhYjg2MjFkNDZjNTlm
NzI4MDgwHhcNMjMwMTAyMDQ0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTMxZjEwM2EyOWNiMjViMGFjZTJkMjhlMzVjNjgwYWNjYTM1ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cXrh2Oqze6Y4VlkBPil8AD2BcTY
FGYXVgKI8CpkIFnE6J2Uq5k/8Q02rMoaexvTHBrOUVIdg4Qpl3wpv4fX1FlzRX6n
hrYYHvqTv46OvCuGGrCOLRbe6uGMw0xk05Rv+Ntg1MLBNpiRZma4TEJ41+3hmHQv
gyL95Lc5f6HI/tLamYrgy42MPKYKxUOucQdEwkNrlCwJ8IWVtC1haZi13mdkBp7s
IP3IUTtAmJscHZChVrM//pM2zEM7mgPzFgXn+ws4+hqpVzvFAnV/pRCLZuV+wlos
6H+UiIq+bK6P94s8XY1iFiww4p+DuaCXfJeIHKqEzmAtZA8GSUjNRC2rpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGox8QOinLJbCs4tKONcaArMo1/fMB8GA1UdIwQY
MBaAFLHWuuy2OuRv7qMMq4Yh1GxZ9ygIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RhNjdMWTY1R191b3d5cmhpSFViRm4zS0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MDNkOTYtZTM0Yi00YzI0LTljOWMt
N2FmNzlkYWE2OWI5LzEvYWpIeEE2S2NzbHNLemkwbzQxeG9Dc3lqWDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MDNkOTYtZTM0Yi00YzI0LTljOWMtN2FmNzlkYWE2OWI5
LzEvc2RhNjdMWTY1R191b3d5cmhpSFViRm4zS0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8JvMA0G
CSqGSIb3DQEBCwUAA4IBAQClH7uYocMZFS36BaNr8OnJryzY1S2pHj6EyYjd1WSB
6o4HtZVnCF1tj/iW9dNGsdkyrQMIJTrmKzMOBuaTARoMGqAD6dMnca44GTDyN7II
5yo5TrMsztVK5oBFRnawk9EWPxO8HMG4qYCWVF2NWuxykMnUtECI1AZ+epCtoij6
XfaFBUQdjXycAlXRnBRLlRwx5zNuDxePW17V9dBxMS57pVgFJE7fLwpgiNz2nmcF
KL31iUNjMpsCUdKJmFrS4wCGdoGQDxC3TXnufbK8k6nBng8gX/83sNlX1eGvD3SK
V10YopTRKP6BNuLQOZkb1a7xb/vnhF9xAdq6Qt9PcJ+K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org