Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Opv0diVl_ybt6mPZLLmLvHKuZY8.roa
File: Opv0diVl_ybt6mPZLLmLvHKuZY8.roa (raw, json)
Hash identifier: wL5jQFodejaxs1EDfxilhp79dIr+sPmNUfkXZCfZfuE=
Subject key identifier: 3A:9B:F4:76:25:65:FF:26:ED:EA:63:D9:2C:B9:8B:BC:72:AE:65:8F
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 018F8010F3C015EF627369A47CEDD3BD5633
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Opv0diVl_ybt6mPZLLmLvHKuZY8.roa
Signing time: Thu 16 May 2024 06:22:25 +0000
ROA not before: Thu 16 May 2024 06:22:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197495
IP address blocks: 91.198.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 05:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:10:f3:c0:15:ef:62:73:69:a4:7c:ed:d3:bd:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: May 16 06:22:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a9bf4762565ff26edea63d92cb98bbc72ae658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:8b:8c:76:03:b8:51:42:7a:88:84:90:2e:
bd:f2:4f:2c:f0:dd:bd:0d:49:10:b4:c0:46:c7:42:
33:ce:90:d0:55:e7:7f:cd:f4:44:d2:fb:30:24:ff:
b5:43:f2:41:b1:fc:85:ed:2d:11:a0:b0:2e:31:a6:
6c:7a:61:b3:f5:47:53:5c:9e:96:99:08:f6:f5:c0:
17:95:02:11:0c:4e:ce:cc:08:0c:ff:51:1d:da:bd:
13:ec:ad:92:5c:5f:ca:96:85:48:a7:cb:0c:99:c0:
b2:8a:07:82:6c:65:6f:84:fd:50:54:da:23:28:a1:
cb:dc:b7:af:91:53:b8:f3:7f:04:8a:6b:8f:b7:fc:
a3:51:4a:a1:b1:90:46:ff:09:62:04:39:6f:bc:2a:
d3:dd:01:78:8f:32:2e:c9:0c:25:42:3c:54:b7:14:
00:5e:3c:f4:39:f7:2a:8c:af:48:4c:11:97:28:c9:
ac:1f:ec:41:ba:d7:57:b4:35:33:0b:25:7d:97:8b:
fd:02:04:91:88:59:f8:3c:f2:73:08:51:d1:72:ce:
3b:f8:37:7c:cd:07:c2:f2:4f:4e:c7:64:a0:0b:c0:
48:49:a2:90:31:44:03:f3:4e:09:a3:63:81:83:c8:
89:55:d5:02:42:a4:17:e1:99:d0:f5:be:b6:d9:a1:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:F4:76:25:65:FF:26:ED:EA:63:D9:2C:B9:8B:BC:72:AE:65:8F
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Opv0diVl_ybt6mPZLLmLvHKuZY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.169.0/24
Signature Algorithm: sha256WithRSAEncryption
49:59:ac:e8:ba:ea:48:0f:39:80:bf:2e:d2:ce:28:18:e5:82:
61:ea:8b:a6:66:08:20:0e:32:d4:10:d2:b5:7a:ea:40:fd:53:
16:50:1f:00:e6:61:a0:0f:7a:f7:f5:8e:90:08:8f:d8:cf:2c:
a0:fa:37:c8:f6:d8:e9:94:5d:e2:3c:10:b0:d7:ab:73:8e:fa:
cc:14:c9:a6:79:6d:60:ed:b1:92:fd:bf:2f:80:f7:44:bc:9a:
78:e0:c8:85:a4:bf:a1:fb:51:33:11:16:80:1b:62:6e:29:29:
66:e4:da:20:33:ba:72:01:b6:0c:5f:1f:5f:ed:57:6b:ca:0e:
71:e0:ee:80:7b:68:0a:2f:92:00:ae:40:9b:7b:88:73:88:82:
f1:d1:11:3f:5e:58:27:6e:b0:59:b8:1f:a6:db:96:34:07:2c:
b5:a7:b4:bb:8e:bc:fe:1d:30:f6:da:46:f7:fb:30:d9:ca:c9:
0f:08:e9:28:6f:d6:ea:35:86:04:b3:bb:ba:7c:f5:ec:7c:a2:
80:50:a9:d4:0a:c0:6d:34:99:72:8c:12:e7:d4:37:6e:a2:ef:
80:4a:f1:b6:07:b0:3f:17:81:a0:7f:16:30:cc:0c:af:75:28:
db:38:da:38:4e:12:2b:26:78:11:a7:79:96:21:c0:2f:fe:72:
6c:e6:f5:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+AEPPAFe9ic2mkfO3TvVYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1
NjY2YWIwHhcNMjQwNTE2MDYyMjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTliZjQ3NjI1NjVmZjI2ZWRlYTYzZDkyY2I5OGJiYzcyYWU2NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4yLjHYDuFFCeoiEkC698k8s8N29
DUkQtMBGx0IzzpDQVed/zfRE0vswJP+1Q/JBsfyF7S0RoLAuMaZsemGz9UdTXJ6W
mQj29cAXlQIRDE7OzAgM/1Ed2r0T7K2SXF/KloVIp8sMmcCyigeCbGVvhP1QVNoj
KKHL3LevkVO4838EimuPt/yjUUqhsZBG/wliBDlvvCrT3QF4jzIuyQwlQjxUtxQA
Xjz0OfcqjK9ITBGXKMmsH+xButdXtDUzCyV9l4v9AgSRiFn4PPJzCFHRcs47+Dd8
zQfC8k9Ox2SgC8BISaKQMUQD804Jo2OBg8iJVdUCQqQX4ZnQ9b622aEGPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqb9HYlZf8m7epj2Sy5i7xyrmWPMB8GA1UdIwQY
MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt
MzM2ZTViM2RkMDcxLzEvT3B2MGRpVmxfeWJ0Nm1QWkxMbUx2SEt1Wlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx
LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8apMA0G
CSqGSIb3DQEBCwUAA4IBAQBJWazouupIDzmAvy7SzigY5YJh6oumZgggDjLUENK1
eupA/VMWUB8A5mGgD3r39Y6QCI/Yzyyg+jfI9tjplF3iPBCw16tzjvrMFMmmeW1g
7bGS/b8vgPdEvJp44MiFpL+h+1EzERaAG2JuKSlm5NogM7pyAbYMXx9f7Vdryg5x
4O6Ae2gKL5IArkCbe4hziILx0RE/XlgnbrBZuB+m25Y0Byy1p7S7jrz+HTD22kb3
+zDZyskPCOkob9bqNYYEs7u6fPXsfKKAUKnUCsBtNJlyjBLn1Dduou+ASvG2B7A/
F4GgfxYwzAyvdSjbONo4ThIrJngRp3mWIcAv/nJs5vUK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:57 2024 by rpki-client on console-fra.rpki-client.org