Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/0TiutBXN__5ASGVU9_eK0INSRJc.roa
File: 0TiutBXN__5ASGVU9_eK0INSRJc.roa (raw, json)
Hash identifier: 65OGFy28a68kQthwfgOJfxeVqvL2po0AA0f/o+u+o4w=
Subject key identifier: D1:38:AE:B4:15:CD:FF:FE:40:48:65:54:F7:F7:8A:D0:83:52:44:97
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 018570798C23F0CCB2D0B96D17E3D79D3E0D
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/0TiutBXN__5ASGVU9_eK0INSRJc.roa
Signing time: Mon 02 Jan 2023 03:14:51 +0000
ROA not before: Mon 02 Jan 2023 03:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19324
IP address blocks: 185.181.116.0/22 maxlen: 24
91.197.228.0/22 maxlen: 24
2a0a:cb80::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:8c:23:f0:cc:b2:d0:b9:6d:17:e3:d7:9d:3e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jan 2 03:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d138aeb415cdfffe40486554f7f78ad083524497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:65:b3:86:a6:95:2f:ac:46:d0:5b:31:60:
02:27:d5:1a:73:a8:e3:da:51:de:d1:4e:e4:38:31:
97:3b:54:84:66:3b:f4:f4:cc:c4:50:6c:55:10:09:
f5:f9:69:3b:df:7c:75:3f:36:d4:05:89:86:ac:23:
a9:28:22:f4:69:95:c1:8f:7e:16:00:b3:e4:ad:77:
8c:76:fd:64:ee:f8:fb:43:f2:6d:52:3f:d3:f7:b2:
ec:b4:51:6e:c0:35:ed:e6:a0:04:f9:3c:fa:0a:4f:
ad:d7:9b:9e:2a:53:78:91:5f:22:8d:70:05:2b:57:
d0:d8:a6:d2:58:04:0c:a2:ba:6f:92:dc:fe:e3:86:
79:25:bf:ae:c1:18:3d:3b:f5:af:50:9c:36:88:fb:
30:89:b8:23:25:d9:2a:94:9e:67:f9:fc:dd:2d:76:
bd:8d:83:15:b5:de:ca:6c:e0:7d:ba:2c:53:7c:e5:
4a:7e:67:ea:dc:36:94:70:c4:f4:2e:61:b3:8b:b0:
dd:6e:51:e4:6a:43:22:1a:08:fe:7f:6a:46:a6:18:
3c:8e:a1:a7:57:74:ed:a7:bb:50:50:1c:71:f5:d2:
10:b9:a1:3f:8f:1e:7f:56:62:a4:a9:bf:5e:42:be:
9a:d1:1a:fc:39:92:48:f1:f3:3d:aa:d6:43:ff:0a:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:AE:B4:15:CD:FF:FE:40:48:65:54:F7:F7:8A:D0:83:52:44:97
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/0TiutBXN__5ASGVU9_eK0INSRJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
IPv6:
2a0a:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
13:19:8f:78:e8:6e:d9:6f:ca:d2:64:df:dc:e3:0a:08:84:f1:
14:d1:85:d9:b5:03:b4:62:95:76:0a:34:3d:e2:b9:27:69:e7:
12:bf:3e:22:dc:d8:36:02:9c:cf:63:47:e6:27:3b:a9:08:52:
fb:c0:af:4a:3b:56:bf:44:f7:0d:ec:ae:96:75:e5:56:2b:74:
44:3e:cc:37:5a:0e:e6:0f:05:1a:29:2f:6d:09:db:3b:cc:1e:
13:64:77:50:08:4a:fc:5c:d1:98:f2:d2:80:a1:ca:a7:1a:b6:
c1:69:3f:ef:2c:cc:ce:f5:93:48:a3:50:9a:aa:1f:38:d0:d4:
24:40:a0:40:7a:1d:77:21:61:84:9c:ec:96:f2:e7:ec:c2:9e:
c6:9e:29:04:6c:6f:99:c3:7f:2c:f3:e2:27:cd:81:c5:53:44:
d8:76:9c:53:e7:f5:2a:af:63:91:91:d6:ea:f7:c5:f1:72:e9:
c1:9e:b2:94:a3:d5:00:90:44:b3:75:39:e6:6a:6a:3c:ef:a7:
cd:b1:43:33:e0:24:e1:d8:b2:1f:f1:2f:db:42:2d:44:4d:45:
8f:16:b1:6e:a1:a3:f3:e6:72:f4:5f:cb:3b:5c:1e:9c:79:8e:
32:ae:26:b6:52:16:87:66:48:d3:de:ec:d4:dd:64:35:c0:6e:
93:e9:ac:52
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVweYwj8Myy0LltF+PXnT4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTI4OWViZTkzMzUxMjM2YTU1ODBlYjViNzAxMDJjZjNm
MTFkZmMwHhcNMjMwMTAyMDMxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTM4YWViNDE1Y2RmZmZlNDA0ODY1NTRmN2Y3OGFkMDgzNTI0NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Fls4amlS+sRtBbMWACJ9Uac6jj
2lHe0U7kODGXO1SEZjv09MzEUGxVEAn1+Wk733x1PzbUBYmGrCOpKCL0aZXBj34W
ALPkrXeMdv1k7vj7Q/JtUj/T97LstFFuwDXt5qAE+Tz6Ck+t15ueKlN4kV8ijXAF
K1fQ2KbSWAQMorpvktz+44Z5Jb+uwRg9O/WvUJw2iPswibgjJdkqlJ5n+fzdLXa9
jYMVtd7KbOB9uixTfOVKfmfq3DaUcMT0LmGzi7DdblHkakMiGgj+f2pGphg8jqGn
V3Ttp7tQUBxx9dIQuaE/jx5/VmKkqb9eQr6a0Rr8OZJI8fM9qtZD/wqZawIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNE4rrQVzf/+QEhlVPf3itCDUkSXMB8GA1UdIwQY
MBaAFHuiievpM1EjalWA61twECzz8R38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMt
ZDE2M2I1NDk5ZTY4LzEvMFRpdXRCWE5fXzVBU0dWVTlfZUswSU5TUkpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMtZDE2M2I1NDk5ZTY4
LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8XkAwQC
ubV0MA0EAgACMAcDBQAqCsuAMA0GCSqGSIb3DQEBCwUAA4IBAQATGY946G7Zb8rS
ZN/c4woIhPEU0YXZtQO0YpV2CjQ94rknaecSvz4i3Ng2ApzPY0fmJzupCFL7wK9K
O1a/RPcN7K6WdeVWK3REPsw3Wg7mDwUaKS9tCds7zB4TZHdQCEr8XNGY8tKAocqn
GrbBaT/vLMzO9ZNIo1Caqh840NQkQKBAeh13IWGEnOyW8ufswp7GnikEbG+Zw38s
8+InzYHFU0TYdpxT5/Uqr2ORkdbq98XxcunBnrKUo9UAkESzdTnmamo876fNsUMz
4CTh2LIf8S/bQi1ETUWPFrFuoaPz5nL0X8s7XB6ceY4yria2UhaHZkjT3uzU3WQ1
wG6T6axS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org