Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/L1Z1cLoyC5AsDbnSvRuL79hCE20.roa
File: L1Z1cLoyC5AsDbnSvRuL79hCE20.roa (raw, json)
Hash identifier: Gx6pTtScVX8dWyWiY5ra7cvjOTLQs7RzjriZnIZleAc=
Subject key identifier: 2F:56:75:70:BA:32:0B:90:2C:0D:B9:D2:BD:1B:8B:EF:D8:42:13:6D
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C1C55E9D8A92C6A5A61CAA93717203998
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/L1Z1cLoyC5AsDbnSvRuL79hCE20.roa
Signing time: Wed 29 Nov 2023 18:27:21 +0000
ROA not before: Wed 29 Nov 2023 18:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.102.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 07:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:55:e9:d8:a9:2c:6a:5a:61:ca:a9:37:17:20:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Nov 29 18:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f567570ba320b902c0db9d2bd1b8befd842136d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:a1:e7:b0:57:30:e4:83:62:c9:0e:f8:13:
92:65:de:a1:8b:62:ce:ea:6d:55:4e:3b:81:87:7f:
73:c4:b1:e1:62:12:1b:64:86:b7:1a:7f:c7:59:45:
97:4f:70:55:68:ca:dd:37:21:70:2e:22:81:8f:ed:
83:5d:b9:a9:d9:04:b0:af:98:c9:fa:d6:25:77:50:
0b:60:68:80:2b:eb:ca:f5:3b:0c:a5:f1:90:55:42:
55:c3:01:14:42:bc:60:ec:82:d4:9f:0b:62:a4:9d:
44:76:d0:0e:b9:21:14:88:f7:0b:c3:24:48:4d:4b:
7d:07:10:43:08:89:a8:ba:4e:93:90:d8:cc:25:9a:
8b:c9:78:41:73:1c:91:dc:62:95:6e:02:e2:3a:37:
f8:c4:2d:7c:ca:66:69:74:c8:60:fb:66:bc:10:e2:
54:50:e8:58:3d:20:0a:ee:b8:2c:4f:51:25:a9:d4:
15:9a:26:b3:b7:80:77:fe:65:c2:0e:58:68:21:51:
b6:c7:46:0f:82:0c:f8:26:f9:4d:a7:57:bb:6f:c6:
05:28:89:fb:75:20:71:b7:aa:b2:7b:bd:c7:26:53:
b5:88:7a:ea:2f:bd:aa:bf:51:65:fc:23:d9:58:ba:
3f:aa:d1:d9:ca:13:58:35:ed:5b:76:93:7d:53:0f:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:75:70:BA:32:0B:90:2C:0D:B9:D2:BD:1B:8B:EF:D8:42:13:6D
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/L1Z1cLoyC5AsDbnSvRuL79hCE20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ac:64:a5:dc:9d:4b:b5:66:f3:0b:c4:39:57:ca:9d:3c:ab:
81:b8:47:51:90:f0:28:30:14:64:19:fc:ac:05:7e:9d:25:11:
ca:e6:b6:92:90:fc:c5:da:d7:ce:86:f6:a7:c9:d2:2e:19:41:
b6:ef:37:69:ab:54:2d:de:ee:1b:25:60:05:57:9c:89:18:93:
e9:7b:4b:7a:67:df:a0:11:50:4e:e4:95:c5:73:e1:5c:0d:79:
a3:8b:0b:47:d8:75:70:2a:51:c6:be:07:6e:1b:20:83:bc:da:
c1:db:ad:e7:e6:6a:18:15:60:5a:20:df:d3:c2:11:3d:36:f9:
fd:8b:52:30:b7:b6:b2:e2:21:50:00:93:6b:a7:9b:74:ad:63:
f7:94:9e:8f:41:38:17:3b:74:1e:b1:67:60:13:87:63:39:af:
24:b8:0c:9c:1c:fd:0a:a8:32:33:d5:e1:42:6f:50:ef:8b:fd:
1c:1e:54:ef:3b:b6:35:b5:38:eb:cb:15:cb:07:e2:21:32:09:
fb:9c:1a:9f:91:85:7b:7c:ce:3d:84:ad:0e:42:c6:fe:65:d7:
f4:18:b2:7a:97:95:e3:dd:35:5d:02:e4:18:e7:42:7e:10:99:
07:0c:95:a4:19:6f:5b:e8:03:b6:37:ec:70:d0:9b:e4:2e:63:
c7:5c:1f:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwcVenYqSxqWmHKqTcXIDmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjMxMTI5MTgyNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjU2NzU3MGJhMzIwYjkwMmMwZGI5ZDJiZDFiOGJlZmQ4NDIxMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmACh57BXMOSDYskO+BOSZd6hi2LO
6m1VTjuBh39zxLHhYhIbZIa3Gn/HWUWXT3BVaMrdNyFwLiKBj+2DXbmp2QSwr5jJ
+tYld1ALYGiAK+vK9TsMpfGQVUJVwwEUQrxg7ILUnwtipJ1EdtAOuSEUiPcLwyRI
TUt9BxBDCImouk6TkNjMJZqLyXhBcxyR3GKVbgLiOjf4xC18ymZpdMhg+2a8EOJU
UOhYPSAK7rgsT1ElqdQVmiazt4B3/mXCDlhoIVG2x0YPggz4JvlNp1e7b8YFKIn7
dSBxt6qye73HJlO1iHrqL72qv1Fl/CPZWLo/qtHZyhNYNe1bdpN9Uw+mAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9WdXC6MguQLA250r0bi+/YQhNtMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvTDFaMWNMb3lDNUFzRGJuU3ZSdUw3OWhDRTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2alMA0G
CSqGSIb3DQEBCwUAA4IBAQCHrGSl3J1LtWbzC8Q5V8qdPKuBuEdRkPAoMBRkGfys
BX6dJRHK5raSkPzF2tfOhvanydIuGUG27zdpq1Qt3u4bJWAFV5yJGJPpe0t6Z9+g
EVBO5JXFc+FcDXmjiwtH2HVwKlHGvgduGyCDvNrB263n5moYFWBaIN/TwhE9Nvn9
i1Iwt7ay4iFQAJNrp5t0rWP3lJ6PQTgXO3QesWdgE4djOa8kuAycHP0KqDIz1eFC
b1Dvi/0cHlTvO7Y1tTjryxXLB+IhMgn7nBqfkYV7fM49hK0OQsb+Zdf0GLJ6l5Xj
3TVdAuQY50J+EJkHDJWkGW9b6AO2N+xw0JvkLmPHXB8Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org