Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/t-NLsgYHeVq4mOrXJZ2fMHnpFno.roa
File: t-NLsgYHeVq4mOrXJZ2fMHnpFno.roa (raw, json)
Hash identifier: zqBIk2RtobDq+ha03z1VHbBwRd1H4aG7BDAu+JmbOZI=
Subject key identifier: B7:E3:4B:B2:06:07:79:5A:B8:98:EA:D7:25:9D:9F:30:79:E9:16:7A
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0191D7BFAD798881F0ABD84C208D1E50C545
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/t-NLsgYHeVq4mOrXJZ2fMHnpFno.roa
Signing time: Mon 09 Sep 2024 17:05:48 +0000
ROA not before: Mon 09 Sep 2024 17:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.102.164.0/24 maxlen: 24
91.102.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:bf:ad:79:88:81:f0:ab:d8:4c:20:8d:1e:50:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Sep 9 17:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e34bb20607795ab898ead7259d9f3079e9167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:da:3e:24:6c:ef:d2:2f:c2:5e:18:e7:f8:79:
4b:70:4d:f3:4b:d4:d6:67:9a:f6:68:7b:e3:4d:f1:
aa:a2:38:7a:99:62:9d:38:ed:37:0f:aa:e4:11:2f:
4b:83:ec:a7:7f:f3:91:65:8b:31:ba:04:4b:6f:b2:
4e:3c:5e:c9:76:11:5f:45:89:10:7f:21:eb:ea:54:
fa:ae:67:2f:43:9f:b6:1b:aa:91:de:85:56:50:cd:
85:35:7a:66:b4:66:af:57:a9:d0:ef:47:48:12:16:
d0:9b:b8:1a:6c:ec:f4:f4:0b:58:14:d5:a3:79:6b:
85:06:97:83:67:d9:7c:61:e4:ac:08:79:36:8c:be:
fd:73:28:da:62:e4:9b:dc:5e:c8:5f:2d:0e:64:59:
57:9a:14:1f:a1:ac:55:3c:86:b4:65:f5:48:48:3b:
4e:b1:49:eb:c4:c4:07:0a:d7:c2:21:2a:bc:d8:7f:
ea:c3:ff:3f:66:d3:20:24:44:a1:c4:4b:b3:87:5e:
d7:06:d2:3b:2e:d5:8d:e4:0c:ef:37:ae:b2:da:1e:
87:14:06:c5:10:62:a4:9e:97:53:64:d3:c6:b2:67:
1c:28:28:d2:37:95:9d:5a:5d:8e:82:ce:c9:12:45:
56:fd:3c:96:f2:62:32:b1:d8:d8:e7:55:f0:fc:33:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:4B:B2:06:07:79:5A:B8:98:EA:D7:25:9D:9F:30:79:E9:16:7A
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/t-NLsgYHeVq4mOrXJZ2fMHnpFno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:b6:ab:21:c2:d9:32:ae:e7:a3:83:2a:11:cb:bb:c0:b1:1e:
36:86:f5:6a:34:77:a8:35:40:70:10:60:e7:b6:f0:6c:7a:99:
ef:84:e2:8f:37:3f:1c:d7:41:c8:27:3b:4e:d4:c3:4f:0c:c3:
ba:f5:d0:e6:24:3a:33:33:9c:2c:ba:53:15:cb:eb:28:a0:2c:
64:f3:aa:fb:6d:96:3c:cc:13:5f:6b:bf:e7:1d:69:96:a1:fb:
7c:1d:96:6d:68:49:dd:21:40:1d:aa:63:5d:ce:5f:bd:7b:23:
0d:02:a8:7b:c1:ea:7d:56:01:07:6e:79:de:7b:4c:c7:1d:75:
fa:51:b7:99:83:ea:78:9b:f9:3a:55:26:a3:d8:e1:b1:7a:18:
95:f3:99:0e:63:82:01:97:30:6d:50:ea:0b:59:09:d3:58:ec:
96:30:69:4c:d7:b7:79:ba:b1:6b:45:58:41:cb:d1:56:ec:b6:
06:ad:b2:67:6d:88:cb:a7:ef:80:01:06:20:05:e6:c6:bf:74:
5e:c8:5a:99:11:8c:34:ef:2f:17:35:d9:41:d8:7f:7a:71:31:
e7:65:05:82:93:3d:7c:9e:02:21:41:f3:7b:94:e6:23:0f:1e:
c9:ab:17:98:d8:33:8f:1e:b2:5f:c4:03:f1:09:b7:8b:3c:a9:
3b:c9:0f:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHXv615iIHwq9hMII0eUMVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjQwOTA5MTcwNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2UzNGJiMjA2MDc3OTVhYjg5OGVhZDcyNTlkOWYzMDc5ZTkxNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9to+JGzv0i/CXhjn+HlLcE3zS9TW
Z5r2aHvjTfGqojh6mWKdOO03D6rkES9Lg+ynf/ORZYsxugRLb7JOPF7JdhFfRYkQ
fyHr6lT6rmcvQ5+2G6qR3oVWUM2FNXpmtGavV6nQ70dIEhbQm7gabOz09AtYFNWj
eWuFBpeDZ9l8YeSsCHk2jL79cyjaYuSb3F7IXy0OZFlXmhQfoaxVPIa0ZfVISDtO
sUnrxMQHCtfCISq82H/qw/8/ZtMgJEShxEuzh17XBtI7LtWN5AzvN66y2h6HFAbF
EGKknpdTZNPGsmccKCjSN5WdWl2Ogs7JEkVW/TyW8mIysdjY51Xw/DNxMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLfjS7IGB3lauJjq1yWdnzB56RZ6MB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvdC1OTHNnWUhlVnE0bU9yWEpaMmZNSG5wRm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW2akMA0G
CSqGSIb3DQEBCwUAA4IBAQCPtqshwtkyruejgyoRy7vAsR42hvVqNHeoNUBwEGDn
tvBsepnvhOKPNz8c10HIJztO1MNPDMO69dDmJDozM5wsulMVy+sooCxk86r7bZY8
zBNfa7/nHWmWoft8HZZtaEndIUAdqmNdzl+9eyMNAqh7wep9VgEHbnnee0zHHXX6
UbeZg+p4m/k6VSaj2OGxehiV85kOY4IBlzBtUOoLWQnTWOyWMGlM17d5urFrRVhB
y9FW7LYGrbJnbYjLp++AAQYgBebGv3ReyFqZEYw07y8XNdlB2H96cTHnZQWCkz18
ngIhQfN7lOYjDx7JqxeY2DOPHrJfxAPxCbeLPKk7yQ9Q
-----END CERTIFICATE-----
Generated at Wed Oct 9 20:37:44 2024 by rpki-client on console-fra.rpki-client.org