Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/M-VVkAyUDcLubRSidDFeqjQv_2U.roa
File: M-VVkAyUDcLubRSidDFeqjQv_2U.roa (raw, json)
Hash identifier: xEPbKZy7MIOdIrHEoxXJNMrTNk7wqxWzvwA3N4HEgI4=
Subject key identifier: 33:E5:55:90:0C:94:0D:C2:EE:6D:14:A2:74:31:5E:AA:34:2F:FF:65
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0188244DDB8865A1074462EA83374E34CE75
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/M-VVkAyUDcLubRSidDFeqjQv_2U.roa
Signing time: Tue 16 May 2023 11:24:22 +0000
ROA not before: Tue 16 May 2023 11:24:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 91.213.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:4d:db:88:65:a1:07:44:62:ea:83:37:4e:34:ce:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 16 11:24:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e555900c940dc2ee6d14a274315eaa342fff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:72:06:40:16:d2:87:29:91:b5:51:b6:d7:
18:2b:79:cd:17:9c:46:af:ba:b0:a7:24:2c:a7:46:
bf:9d:78:c4:b7:f6:bf:81:df:d8:da:a7:7e:67:f0:
ec:a4:ca:0d:2d:de:30:61:bf:6f:28:ae:1e:c5:60:
9a:62:e6:bb:92:f9:7b:21:81:9a:e3:02:3b:89:5a:
1b:4e:be:ba:88:fc:45:50:f0:b5:e2:47:86:b3:56:
56:7f:cb:9c:97:c5:5c:70:e5:c3:56:7c:3f:90:af:
e0:72:48:f9:52:56:8e:4d:e8:dd:91:1b:fa:02:15:
53:5e:b5:0c:ce:0d:ec:84:70:bd:57:85:7a:dd:36:
a6:be:2d:cc:78:9c:e0:55:6e:f1:73:5c:f2:23:5f:
1e:6a:67:da:b7:fb:dd:b3:a9:99:95:a2:bd:54:5e:
a3:ae:80:63:4d:76:18:a6:b8:12:af:c0:97:eb:d6:
69:56:9b:f9:7a:66:7e:a4:74:3b:56:b2:9b:38:d0:
f4:23:70:a3:21:14:df:4e:d7:62:f4:0c:4c:f4:9a:
46:36:3c:37:f7:7b:fc:62:30:d0:c6:8a:bf:ac:d1:
7f:6e:53:67:2b:0e:87:f4:5b:4f:fb:9d:b7:03:94:
e9:81:51:3b:db:03:11:ce:cf:49:e0:f7:50:b9:37:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:55:90:0C:94:0D:C2:EE:6D:14:A2:74:31:5E:AA:34:2F:FF:65
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/M-VVkAyUDcLubRSidDFeqjQv_2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.189.0/24
Signature Algorithm: sha256WithRSAEncryption
58:78:f8:26:6f:2a:4d:da:f4:e3:3c:45:bf:26:f7:b1:ea:fa:
b4:e5:8a:84:10:e3:ac:15:fd:1b:30:f9:cb:1e:7c:1c:74:88:
f4:1f:75:8a:d1:0e:ca:7b:07:d8:ec:97:23:60:08:33:57:fd:
47:0b:31:3e:d6:06:47:2d:24:97:1d:9c:21:4d:1f:37:25:59:
c5:0e:21:08:ff:7f:fa:0e:89:c4:40:2c:d4:6b:84:f5:9e:6b:
c5:17:2e:85:2d:d0:9e:0c:a5:cb:22:69:b8:87:46:3e:77:cf:
d9:d1:59:c7:85:7f:6e:5e:b5:8d:fc:a7:c0:f9:34:fc:dc:c4:
34:30:99:64:31:00:f1:a1:fe:b8:de:87:d1:5e:df:b1:3c:f2:
4d:c9:f7:de:76:2c:8c:f4:de:d4:03:13:7c:9b:d3:50:00:b2:
fd:86:02:da:9a:03:f2:e2:9c:b8:27:de:0a:2e:9f:5d:4f:c5:
fe:c7:ca:60:ba:78:98:3a:24:c3:09:05:4d:e9:8d:24:04:56:
27:c9:e8:5b:12:77:41:11:d2:93:3e:bf:16:65:19:fd:9a:dd:
c3:7e:6b:2b:42:ba:bf:92:47:c8:bc:b0:03:33:70:52:f0:4f:
43:55:c0:72:87:02:f4:51:7a:b1:af:a9:b8:a9:58:34:be:1c:
dd:99:f1:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgkTduIZaEHRGLqgzdONM51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjMwNTE2MTEyNDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2U1NTU5MDBjOTQwZGMyZWU2ZDE0YTI3NDMxNWVhYTM0MmZmZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7VyBkAW0ocpkbVRttcYK3nNF5xG
r7qwpyQsp0a/nXjEt/a/gd/Y2qd+Z/DspMoNLd4wYb9vKK4exWCaYua7kvl7IYGa
4wI7iVobTr66iPxFUPC14keGs1ZWf8ucl8VccOXDVnw/kK/gckj5UlaOTejdkRv6
AhVTXrUMzg3shHC9V4V63Tamvi3MeJzgVW7xc1zyI18eamfat/vds6mZlaK9VF6j
roBjTXYYprgSr8CX69ZpVpv5emZ+pHQ7VrKbOND0I3CjIRTfTtdi9AxM9JpGNjw3
93v8YjDQxoq/rNF/blNnKw6H9FtP+523A5TpgVE72wMRzs9J4PdQuTeBhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPlVZAMlA3C7m0UonQxXqo0L/9lMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvTS1WVmtBeVVEY0x1YlJTaWRERmVxalF2XzJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W9MA0G
CSqGSIb3DQEBCwUAA4IBAQBYePgmbypN2vTjPEW/Jvex6vq05YqEEOOsFf0bMPnL
HnwcdIj0H3WK0Q7KewfY7JcjYAgzV/1HCzE+1gZHLSSXHZwhTR83JVnFDiEI/3/6
DonEQCzUa4T1nmvFFy6FLdCeDKXLImm4h0Y+d8/Z0VnHhX9uXrWN/KfA+TT83MQ0
MJlkMQDxof643ofRXt+xPPJNyffediyM9N7UAxN8m9NQALL9hgLamgPy4py4J94K
Lp9dT8X+x8pguniYOiTDCQVN6Y0kBFYnyehbEndBEdKTPr8WZRn9mt3DfmsrQrq/
kkfIvLADM3BS8E9DVcByhwL0UXqxr6m4qVg0vhzdmfGf
-----END CERTIFICATE-----
Generated at Tue Sep 12 23:51:03 2023 by rpki-client on console-fra.rpki-client.org