Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/8jCDRQtTZ6dalWrnzB-uaYEAyOM.roa
File: 8jCDRQtTZ6dalWrnzB-uaYEAyOM.roa (raw, json)
Hash identifier: 6wUJkmvaCsM6OVwL3/9OcNsqgdXJhjY95wEc+toWFmA=
Subject key identifier: F2:30:83:45:0B:53:67:A7:5A:95:6A:E7:CC:1F:AE:69:81:00:C8:E3
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 018573A843927520B9533BCAEB1E41DB9185
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/8jCDRQtTZ6dalWrnzB-uaYEAyOM.roa
Signing time: Mon 02 Jan 2023 18:04:45 +0000
ROA not before: Mon 02 Jan 2023 18:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57562
IP address blocks: 91.205.188.0/23 maxlen: 23
91.205.188.0/24 maxlen: 24
91.205.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:a8:43:92:75:20:b9:53:3b:ca:eb:1e:41:db:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jan 2 18:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23083450b5367a75a956ae7cc1fae698100c8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:87:a3:01:a6:00:92:d9:62:1b:34:e1:d7:
60:6f:5b:c7:c4:c6:c1:8d:09:a6:87:fd:37:c3:92:
69:eb:fe:3e:91:70:d8:b3:de:87:6c:d5:ec:2c:4f:
38:2d:2a:84:15:1d:b0:0d:8e:dd:b9:01:93:b1:89:
ca:dc:d7:68:48:c7:32:aa:36:09:4a:e7:4b:9b:19:
df:93:e0:5c:43:9e:ee:35:a9:3e:57:39:7d:bd:f7:
53:b4:c9:74:5a:8c:23:1d:ed:07:92:2a:47:7b:92:
22:06:b6:0c:a8:f5:b1:5c:55:cb:6d:c6:60:d3:6e:
cc:02:9d:75:e2:30:cb:19:38:9d:73:62:c9:78:97:
50:ea:28:0c:2b:ad:c9:56:fb:b3:54:41:04:ab:f8:
8e:2b:03:4b:2e:60:b1:61:cd:78:fc:c9:52:c5:4a:
83:80:79:3c:c0:5a:58:d8:90:90:ea:d7:29:45:15:
14:ea:ad:d8:7e:8f:2e:76:58:be:24:03:8b:2e:e4:
0c:e0:ae:dc:94:e7:e0:92:68:9e:04:9e:cc:2d:73:
83:19:9e:e5:ba:97:df:38:52:2f:23:8c:7e:65:03:
fd:e2:77:c5:82:7b:09:9a:0a:ee:62:da:85:3f:7e:
03:a1:81:7a:c7:f3:d0:72:77:3a:7d:08:8a:3d:f8:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:83:45:0B:53:67:A7:5A:95:6A:E7:CC:1F:AE:69:81:00:C8:E3
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/8jCDRQtTZ6dalWrnzB-uaYEAyOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:8a:fd:43:38:7f:2e:5c:50:27:83:57:b2:85:88:9a:16:99:
c6:e8:b5:a8:d9:94:9c:14:50:98:04:1f:2e:c8:4c:26:57:6b:
96:45:2a:9d:28:9a:61:a3:af:21:f4:f2:7d:90:84:72:c9:c8:
96:7a:a6:82:1b:27:e8:d0:d7:dc:ff:43:b9:54:d3:14:d0:ed:
fe:da:b1:43:ef:98:f0:6b:24:5b:70:4b:14:ff:ab:e9:f1:aa:
8f:02:00:a6:6c:f4:82:70:c3:52:f2:3f:f6:bf:94:7b:b3:0b:
6b:69:8f:0d:5d:41:ee:ad:ee:47:a1:93:6b:65:1b:2d:46:5b:
75:39:73:fc:da:bd:74:88:3b:a3:21:e0:94:0f:c2:ed:ba:8b:
0b:51:f1:36:b0:d5:6f:c2:e7:76:43:b8:7e:18:87:de:db:51:
9d:e3:f5:fd:21:31:b3:fc:7e:97:12:f0:28:89:0c:1f:0f:d3:
4f:7c:70:7b:0a:94:de:75:6f:43:f8:e2:f9:a1:7c:04:7c:70:
15:7f:18:33:42:bc:53:b7:81:0d:28:4a:5c:d9:b5:c5:a2:80:
26:93:c4:46:9d:ee:f3:66:b4:9e:98:ca:13:a1:85:b8:63:f8:
0b:52:c1:8b:54:6a:f1:a8:57:a4:50:24:21:46:4a:da:91:cc:
8f:e8:66:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzqEOSdSC5UzvK6x5B25GFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmE1MjRmOWIxYjM4MDFkYmQ3Yzg5YTE2MGFlYzA3NmI1
N2U3MjkwHhcNMjMwMTAyMTgwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjMwODM0NTBiNTM2N2E3NWE5NTZhZTdjYzFmYWU2OTgxMDBjOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLyHowGmAJLZYhs04ddgb1vHxMbB
jQmmh/03w5Jp6/4+kXDYs96HbNXsLE84LSqEFR2wDY7duQGTsYnK3NdoSMcyqjYJ
SudLmxnfk+BcQ57uNak+Vzl9vfdTtMl0WowjHe0HkipHe5IiBrYMqPWxXFXLbcZg
027MAp114jDLGTidc2LJeJdQ6igMK63JVvuzVEEEq/iOKwNLLmCxYc14/MlSxUqD
gHk8wFpY2JCQ6tcpRRUU6q3Yfo8udli+JAOLLuQM4K7clOfgkmieBJ7MLXODGZ7l
upffOFIvI4x+ZQP94nfFgnsJmgruYtqFP34DoYF6x/PQcnc6fQiKPfhfUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIwg0ULU2enWpVq58wfrmmBAMjjMB8GA1UdIwQY
MBaAFMcqUk+bGzgB29fImhYK7AdrV+cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYt
ZDdhNjg0YTU3YjE5LzEvOGpDRFJRdFRaNmRhbFdybnpCLXVhWUVBeU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5
LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW828MA0G
CSqGSIb3DQEBCwUAA4IBAQBviv1DOH8uXFAng1eyhYiaFpnG6LWo2ZScFFCYBB8u
yEwmV2uWRSqdKJpho68h9PJ9kIRyyciWeqaCGyfo0Nfc/0O5VNMU0O3+2rFD75jw
ayRbcEsU/6vp8aqPAgCmbPSCcMNS8j/2v5R7swtraY8NXUHure5HoZNrZRstRlt1
OXP82r10iDujIeCUD8LtuosLUfE2sNVvwud2Q7h+GIfe21Gd4/X9ITGz/H6XEvAo
iQwfD9NPfHB7CpTedW9D+OL5oXwEfHAVfxgzQrxTt4ENKEpc2bXFooAmk8RGne7z
ZrSemMoToYW4Y/gLUsGLVGrxqFekUCQhRkrakcyP6Gas
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:58 2024 by rpki-client on console-fra.rpki-client.org