Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/dX_m8LVo6mlapSw-edM3dcgQG40.roa
File: dX_m8LVo6mlapSw-edM3dcgQG40.roa (raw, json)
Hash identifier: lvzgzqnAEdWeFmacwEgdTgmR0b5J7lOcG2TIyFEV65c=
Subject key identifier: 75:7F:E6:F0:B5:68:EA:69:5A:A5:2C:3E:79:D3:37:75:C8:10:1B:8D
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CCA29CB5FD6437B9527873BFC3E810234
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/dX_m8LVo6mlapSw-edM3dcgQG40.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43289
IP address blocks: 91.102.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cb:5f:d6:43:7b:95:27:87:3b:fc:3e:81:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=757fe6f0b568ea695aa52c3e79d33775c8101b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:ad:b8:87:6a:d4:5b:e2:7a:83:6b:0f:30:
95:4e:69:13:98:cb:0f:a3:f5:5f:65:f9:09:cb:cc:
1c:40:04:9b:dd:a7:0c:4a:66:72:d0:a6:e7:7f:2b:
52:24:95:cf:d4:22:2f:63:22:6b:96:3d:32:63:e9:
1d:e4:58:6d:db:bc:1f:d8:f1:0d:7b:89:e3:0e:86:
96:46:f3:02:fa:fc:5c:23:1d:3d:8d:b7:01:96:c5:
6d:0e:fa:ba:92:06:b3:af:f5:f0:9c:3d:c8:b7:3e:
24:6a:ab:bf:4f:89:f3:c9:f8:f6:fe:14:b2:e6:68:
51:87:74:e3:57:98:e4:60:05:99:a7:df:9f:32:45:
d7:5f:ce:93:bd:8b:76:2f:22:1f:a3:f7:c3:9b:4d:
81:2a:56:fc:67:3e:e6:09:e1:e4:34:e6:6e:5b:92:
1b:c1:9a:a3:54:3c:73:3b:ef:e1:5a:89:78:37:2e:
b4:45:6c:a1:57:6a:b7:28:93:4d:54:a9:12:83:ef:
dd:d7:55:f8:95:c5:f9:e5:23:fe:12:34:09:31:95:
58:0d:04:fe:7f:ec:37:f8:aa:c5:64:94:92:53:f7:
13:1b:ce:62:29:07:05:7f:e4:38:c7:8b:7f:eb:43:
4f:c8:f3:ae:d9:df:e6:b6:10:c0:3f:36:55:16:22:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7F:E6:F0:B5:68:EA:69:5A:A5:2C:3E:79:D3:37:75:C8:10:1B:8D
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/dX_m8LVo6mlapSw-edM3dcgQG40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c8:2c:21:79:2c:ca:34:66:a5:f8:5a:12:f0:e1:98:6b:b0:
db:a5:fe:0f:59:32:5f:6b:e9:9b:1d:77:ca:09:41:c3:87:0c:
bc:ed:0a:fb:10:36:1a:db:92:db:aa:53:6c:e2:0d:84:54:06:
ab:21:11:fe:27:42:98:68:a5:76:15:c2:1f:e4:96:84:4b:a7:
7d:b8:69:1c:67:ff:ba:b0:48:a7:82:1a:ef:0a:d7:d2:ff:7a:
3d:41:55:d4:09:db:01:81:0b:83:2d:68:df:66:00:89:7c:13:
f0:71:c5:54:19:79:32:0b:8c:ff:8c:a3:c7:ce:94:32:ff:37:
6e:f8:a2:ff:58:4e:5f:9a:52:82:62:7a:ba:3a:18:10:2b:27:
8f:1e:e3:55:4d:50:1d:a5:14:79:ba:18:16:fa:4f:50:53:cf:
57:3e:0c:06:1b:78:d0:08:2c:5e:a1:e9:5c:f3:80:4e:33:4b:
aa:6d:0a:5c:ac:fa:52:a5:66:50:53:3c:64:ec:32:c8:52:72:
a9:ad:69:04:0b:30:67:f7:8c:91:59:49:1f:80:9d:5f:3b:f1:
32:21:be:ed:59:84:c4:3c:f5:bf:b8:4a:70:84:f0:1f:f5:70:
20:14:3d:f5:bd:8f:15:9a:8b:40:e7:4a:e9:18:4b:a2:dd:7e:
c9:08:f4:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKctf1kN7lSeHO/w+gQI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjQwMTAyMTIzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdmZTZmMGI1NjhlYTY5NWFhNTJjM2U3OWQzMzc3NWM4MTAxYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzetuIdq1FvieoNrDzCVTmkTmMsP
o/VfZfkJy8wcQASb3acMSmZy0KbnfytSJJXP1CIvYyJrlj0yY+kd5Fht27wf2PEN
e4njDoaWRvMC+vxcIx09jbcBlsVtDvq6kgazr/XwnD3Itz4kaqu/T4nzyfj2/hSy
5mhRh3TjV5jkYAWZp9+fMkXXX86TvYt2LyIfo/fDm02BKlb8Zz7mCeHkNOZuW5Ib
wZqjVDxzO+/hWol4Ny60RWyhV2q3KJNNVKkSg+/d11X4lcX55SP+EjQJMZVYDQT+
f+w3+KrFZJSSU/cTG85iKQcFf+Q4x4t/60NPyPOu2d/mthDAPzZVFiLPwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHV/5vC1aOppWqUsPnnTN3XIEBuNMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvZFhfbThMVm82bWxhcFN3LWVkTTNkY2dRRzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2alMA0G
CSqGSIb3DQEBCwUAA4IBAQBtyCwheSzKNGal+FoS8OGYa7Dbpf4PWTJfa+mbHXfK
CUHDhwy87Qr7EDYa25LbqlNs4g2EVAarIRH+J0KYaKV2FcIf5JaES6d9uGkcZ/+6
sEinghrvCtfS/3o9QVXUCdsBgQuDLWjfZgCJfBPwccVUGXkyC4z/jKPHzpQy/zdu
+KL/WE5fmlKCYnq6OhgQKyePHuNVTVAdpRR5uhgW+k9QU89XPgwGG3jQCCxeoelc
84BOM0uqbQpcrPpSpWZQUzxk7DLIUnKprWkECzBn94yRWUkfgJ1fO/EyIb7tWYTE
PPW/uEpwhPAf9XAgFD31vY8VmotA50rpGEui3X7JCPQp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org