Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/v3HMoagKr-xqtI8dvtpnofSMGPA.roa
File: v3HMoagKr-xqtI8dvtpnofSMGPA.roa (raw, json)
Hash identifier: 69iEMw/JmkMXzoawab2+jTqV3Dao1ima2F3IxNR+eK8=
Subject key identifier: BF:71:CC:A1:A8:0A:AF:EC:6A:B4:8F:1D:BE:DA:67:A1:F4:8C:18:F0
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C3B01FB29D39F02D4698421C1A86C585B
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/v3HMoagKr-xqtI8dvtpnofSMGPA.roa
Signing time: Tue 05 Dec 2023 17:23:54 +0000
ROA not before: Tue 05 Dec 2023 17:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 814
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 07:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3b:01:fb:29:d3:9f:02:d4:69:84:21:c1:a8:6c:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Dec 5 17:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf71cca1a80aafec6ab48f1dbeda67a1f48c18f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:d2:4f:c0:10:4b:04:01:9c:bd:08:8d:12:
b1:24:13:fa:30:49:f5:0f:ae:3d:34:fb:67:f2:5c:
49:f0:01:c6:ed:c5:d2:a0:36:a9:31:5f:67:6d:a0:
f5:78:0e:03:c0:e1:ca:04:02:a0:2a:bb:c0:13:ba:
91:0d:35:00:c4:aa:75:66:57:5a:ba:31:c3:9f:3a:
71:08:b6:fb:5e:49:71:63:20:fa:61:ad:6c:50:7e:
89:10:ac:a1:5e:d8:3a:f7:d7:b0:f3:96:66:98:80:
17:ab:0d:b9:11:5e:d4:ba:8e:ca:24:16:a3:8b:f9:
79:d0:dc:c1:89:81:7e:6f:21:f8:cf:20:0f:62:1e:
35:88:88:af:91:cf:ca:bf:d8:a9:b2:7f:b6:76:66:
a0:dc:ba:ab:b2:49:ee:9b:bc:bd:10:c8:4a:03:ae:
8d:7a:3b:55:2c:8b:5f:ae:2c:31:a0:e7:1f:03:19:
d7:f4:7e:c8:9e:47:2a:71:77:93:79:27:4c:1b:ba:
6b:a1:76:e4:5f:3f:69:a3:7a:bd:9b:92:fd:0c:c2:
ac:5a:43:0a:7a:a7:6a:bf:e3:ec:4a:18:4e:a2:4b:
9f:c5:70:03:5a:bc:04:7a:c7:b4:2a:0a:2b:4a:8d:
a6:80:a6:4b:83:c8:e7:e9:5a:e7:94:9a:8d:f3:61:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:CC:A1:A8:0A:AF:EC:6A:B4:8F:1D:BE:DA:67:A1:F4:8C:18:F0
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/v3HMoagKr-xqtI8dvtpnofSMGPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9c:ac:cf:e5:cc:63:ea:9d:07:d1:ba:68:36:f6:b9:bc:90:
f1:ce:fa:a5:ca:4c:5a:b0:5c:a3:0d:90:ea:f9:1c:f5:09:87:
73:d6:1b:dd:6b:e8:5d:97:b0:12:7f:57:39:b0:99:8e:5e:62:
f0:fe:e0:a6:0e:88:51:39:9c:87:0a:d2:34:63:ce:07:20:b5:
e0:91:73:6a:86:4b:25:39:28:6f:32:4f:c3:fd:c8:f8:02:11:
55:0f:00:ed:73:79:ce:61:0e:5f:93:02:ef:ee:d2:5d:98:8f:
f2:2d:d4:a0:3b:61:57:a3:0c:42:a7:33:3c:82:a5:58:a4:ec:
93:ea:fc:f8:c9:78:3d:aa:34:eb:49:bd:44:5c:ad:5a:3a:e6:
51:44:f1:4b:f2:dd:d2:ea:89:91:a8:ad:79:37:0e:6a:00:d2:
f6:05:0f:06:81:0e:03:d3:14:70:ed:8b:0a:a5:0f:4b:94:88:
9c:49:23:0e:91:bb:25:7b:f7:6d:4e:a8:00:69:a5:48:8b:06:
a8:7a:e8:e7:c6:11:22:ad:ad:5e:30:09:53:03:a0:2a:56:4f:
15:ab:c3:41:49:51:57:93:30:4d:8d:19:ac:ff:ab:8e:20:ed:
ee:dd:02:40:31:9d:a5:5f:83:3e:27:76:0c:27:f4:19:35:0d:
99:8f:3f:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw7Afsp058C1GmEIcGobFhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjMxMjA1MTcyMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjcxY2NhMWE4MGFhZmVjNmFiNDhmMWRiZWRhNjdhMWY0OGMxOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXHST8AQSwQBnL0IjRKxJBP6MEn1
D649NPtn8lxJ8AHG7cXSoDapMV9nbaD1eA4DwOHKBAKgKrvAE7qRDTUAxKp1Zlda
ujHDnzpxCLb7XklxYyD6Ya1sUH6JEKyhXtg699ew85ZmmIAXqw25EV7Uuo7KJBaj
i/l50NzBiYF+byH4zyAPYh41iIivkc/Kv9ipsn+2dmag3Lqrsknum7y9EMhKA66N
ejtVLItfriwxoOcfAxnX9H7InkcqcXeTeSdMG7proXbkXz9po3q9m5L9DMKsWkMK
eqdqv+PsShhOokufxXADWrwEese0KgorSo2mgKZLg8jn6VrnlJqN82E2lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9xzKGoCq/sarSPHb7aZ6H0jBjwMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvdjNITW9hZ0tyLXhxdEk4ZHZ0cG5vZlNNR1BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2akMA0G
CSqGSIb3DQEBCwUAA4IBAQBHnKzP5cxj6p0H0bpoNva5vJDxzvqlykxasFyjDZDq
+Rz1CYdz1hvda+hdl7ASf1c5sJmOXmLw/uCmDohROZyHCtI0Y84HILXgkXNqhksl
OShvMk/D/cj4AhFVDwDtc3nOYQ5fkwLv7tJdmI/yLdSgO2FXowxCpzM8gqVYpOyT
6vz4yXg9qjTrSb1EXK1aOuZRRPFL8t3S6omRqK15Nw5qANL2BQ8GgQ4D0xRw7YsK
pQ9LlIicSSMOkbsle/dtTqgAaaVIiwaoeujnxhEira1eMAlTA6AqVk8Vq8NBSVFX
kzBNjRms/6uOIO3u3QJAMZ2lX4M+J3YMJ/QZNQ2Zjz+R
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org