Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/Ifd-gIOl9gXJsMu_qvz0cxykzAQ.roa
File: Ifd-gIOl9gXJsMu_qvz0cxykzAQ.roa (raw, json)
Hash identifier: CzIlnyHKEm2CnmMn/6iGyBSb4596Icy6BSYNwLMH/jA=
Subject key identifier: 21:F7:7E:80:83:A5:F6:05:C9:B0:CB:BF:AA:FC:F4:73:1C:A4:CC:04
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 01856CE62931F15F9517A971CF2EFECDA854
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/Ifd-gIOl9gXJsMu_qvz0cxykzAQ.roa
Signing time: Sun 01 Jan 2023 10:35:01 +0000
ROA not before: Sun 01 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25538
IP address blocks: 217.10.0.0/20 maxlen: 20
193.110.90.0/24 maxlen: 24
91.210.72.0/22 maxlen: 22
2001:1410::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:29:31:f1:5f:95:17:a9:71:cf:2e:fe:cd:a8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Jan 1 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f77e8083a5f605c9b0cbbfaafcf4731ca4cc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:c1:8a:9d:5b:08:2f:61:12:73:a3:4f:fa:
93:16:9f:e4:d4:30:29:b0:a5:7e:da:66:9e:3a:a4:
ea:a2:f1:23:0a:19:8f:b4:6f:54:b8:ab:d8:9e:6a:
6f:ae:cd:0f:5b:69:c9:cc:73:ed:f1:27:11:c1:c4:
f9:cf:5e:50:72:11:e5:f9:1b:83:bd:9d:24:93:72:
74:b1:eb:c9:64:48:c3:a1:e4:a6:42:31:49:80:3d:
e6:5c:0d:18:52:2b:ec:b3:04:31:c3:d5:3d:46:0c:
d6:ab:42:79:17:c3:e5:2e:b0:d9:89:3e:1d:bc:da:
53:5d:84:fa:79:98:ff:8f:c8:e5:fb:49:7c:c9:a7:
f3:5e:19:99:0e:ee:ba:01:f0:52:10:37:c5:b7:4e:
3c:2c:76:56:b6:7f:8f:0d:51:b9:d1:3e:26:81:3a:
c0:64:bc:ca:f5:d7:d2:1f:39:a5:0f:83:7d:e6:60:
a0:67:fd:e4:37:d1:17:52:03:6a:a5:7f:0e:d8:a9:
7b:1c:bd:45:0e:40:90:a6:d6:92:16:ed:ed:df:2c:
c5:a8:c0:5e:aa:29:01:d4:c2:0d:72:04:6c:13:55:
b0:60:be:19:af:b5:e7:61:f9:61:ff:98:e3:d5:cd:
aa:44:83:e1:0b:c6:a1:62:55:3c:bf:3c:d1:8e:73:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:7E:80:83:A5:F6:05:C9:B0:CB:BF:AA:FC:F4:73:1C:A4:CC:04
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/Ifd-gIOl9gXJsMu_qvz0cxykzAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.72.0/22
193.110.90.0/24
217.10.0.0/20
IPv6:
2001:1410::/32
Signature Algorithm: sha256WithRSAEncryption
61:4d:fb:45:5b:57:03:c0:47:4a:a8:d4:ca:8c:22:c3:2e:ba:
37:6c:a6:67:de:b5:d1:9c:15:e6:eb:03:46:cd:3c:22:b5:a3:
63:9d:f8:c8:32:40:2e:0d:d6:19:60:8e:4b:37:1f:ff:95:68:
cb:36:9e:a0:f8:3b:0d:11:9f:88:6d:61:98:32:2b:1b:fe:a6:
be:87:54:0d:05:90:d8:b3:3a:33:36:6c:67:8f:8c:d5:6f:8f:
4f:ea:de:69:38:e6:bd:45:ee:26:30:cc:cb:66:67:85:26:e8:
cc:e1:3e:b2:17:02:33:30:68:6f:94:21:90:19:94:0f:07:de:
14:5e:ae:2c:b8:ab:bd:da:f9:86:53:c1:e7:35:32:da:3f:81:
55:e7:61:65:2d:fb:87:13:c7:ac:72:e3:a4:c3:1e:f3:e5:76:
ab:39:e7:d7:74:03:ee:21:82:2b:77:b4:b5:a1:e4:7a:fa:f5:
97:3d:8b:ca:9e:16:74:4c:48:aa:bc:77:fa:60:5e:75:e0:0f:
1f:51:8e:43:e8:7d:21:bb:1d:2f:e6:58:34:4c:9c:f1:67:df:
ca:49:76:27:cc:6f:e7:32:8a:65:23:4a:45:9f:d4:9a:1d:72:
b5:00:e8:b9:cf:24:a2:63:43:be:28:8d:66:be:d8:07:38:0c:
93:fe:49:9c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVs5ikx8V+VF6lxzy7+zahUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDM2NDdlZmIyNDM2NjJlNTdlNjFkNGVjNDViNGEyNWEz
N2VhYzgwHhcNMjMwMTAxMTAzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWY3N2U4MDgzYTVmNjA1YzliMGNiYmZhYWZjZjQ3MzFjYTRjYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOXBip1bCC9hEnOjT/qTFp/k1DAp
sKV+2maeOqTqovEjChmPtG9UuKvYnmpvrs0PW2nJzHPt8ScRwcT5z15QchHl+RuD
vZ0kk3J0sevJZEjDoeSmQjFJgD3mXA0YUivsswQxw9U9RgzWq0J5F8PlLrDZiT4d
vNpTXYT6eZj/j8jl+0l8yafzXhmZDu66AfBSEDfFt048LHZWtn+PDVG50T4mgTrA
ZLzK9dfSHzmlD4N95mCgZ/3kN9EXUgNqpX8O2Kl7HL1FDkCQptaSFu3t3yzFqMBe
qikB1MINcgRsE1WwYL4Zr7XnYflh/5jj1c2qRIPhC8ahYlU8vzzRjnMUbQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFCH3foCDpfYFybDLv6r89HMcpMwEMB8GA1UdIwQY
MBaAFBkDZH77JDZi5X5h1OxFtKJaN+rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgt
YTRjMzQzMmZiMDBmLzEvSWZkLWdJT2w5Z1hKc011X3F2ejBjeHlrekFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgtYTRjMzQzMmZiMDBm
LzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCW9JIAwQA
wW5aAwQE2QoAMA0EAgACMAcDBQAgARQQMA0GCSqGSIb3DQEBCwUAA4IBAQBhTftF
W1cDwEdKqNTKjCLDLro3bKZn3rXRnBXm6wNGzTwitaNjnfjIMkAuDdYZYI5LNx//
lWjLNp6g+DsNEZ+IbWGYMisb/qa+h1QNBZDYszozNmxnj4zVb49P6t5pOOa9Re4m
MMzLZmeFJujM4T6yFwIzMGhvlCGQGZQPB94UXq4suKu92vmGU8HnNTLaP4FV52Fl
LfuHE8escuOkwx7z5XarOefXdAPuIYIrd7S1oeR6+vWXPYvKnhZ0TEiqvHf6YF51
4A8fUY5D6H0hux0v5lg0TJzxZ9/KSXYnzG/nMoplI0pFn9SaHXK1AOi5zySiY0O+
KI1mvtgHOAyT/kmc
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:16 2024 by rpki-client on console-fra.rpki-client.org