Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/sP6fxMNpXdhJme-qRupmj4-sotg.roa
File: sP6fxMNpXdhJme-qRupmj4-sotg.roa (raw, json)
Hash identifier: bE5wPQKeMRiekN6pM4q63dbXQJxoBJjLPz2Ep1u7AqM=
Subject key identifier: B0:FE:9F:C4:C3:69:5D:D8:49:99:EF:AA:46:EA:66:8F:8F:AC:A2:D8
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC50035715A4183E1054E733FA5A57F09
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/sP6fxMNpXdhJme-qRupmj4-sotg.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 91.208.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 09:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:35:71:5a:41:83:e1:05:4e:73:3f:a5:a5:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0fe9fc4c3695dd84999efaa46ea668f8faca2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:c3:32:f7:07:b6:1b:05:d3:67:f4:8b:ab:
5c:9b:dd:3e:17:eb:c1:25:1e:82:25:91:02:fe:ca:
ff:e6:21:09:1d:24:e0:64:da:57:30:f9:c8:7d:05:
de:fe:56:17:c2:ea:67:9f:d3:b2:9e:58:89:b4:41:
73:f0:27:dc:91:b0:06:c4:fd:a4:61:63:20:a5:dd:
ff:b7:5c:0c:69:18:74:1b:b3:ef:0c:6c:7a:26:b7:
57:f1:96:59:53:85:da:c9:77:f4:b7:b7:dc:ca:82:
08:96:68:71:1e:b1:d6:db:57:ff:bf:10:1f:a9:e8:
50:a4:9d:79:6b:44:8b:4b:8d:df:82:3d:41:6d:e8:
78:8c:c2:90:1b:f4:58:6d:98:52:c3:89:25:7d:76:
f6:b6:9d:3f:1b:8b:ec:1e:b5:ba:9e:cf:5b:d4:2d:
fa:cb:7e:88:e9:f5:c7:d5:c6:a3:de:99:64:94:96:
ca:99:d3:7c:40:c1:d1:47:a4:d7:b5:cf:ed:0a:6a:
0e:72:26:ac:03:01:8d:a5:59:92:56:d5:96:3e:e7:
c8:51:f8:af:c0:a9:7d:87:49:74:cd:c2:3c:96:d5:
a7:d4:68:e6:cf:6e:d1:e1:f3:16:77:ac:2b:c7:77:
5c:d4:7c:50:d6:20:4e:ee:2c:74:82:16:a4:12:30:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:9F:C4:C3:69:5D:D8:49:99:EF:AA:46:EA:66:8F:8F:AC:A2:D8
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/sP6fxMNpXdhJme-qRupmj4-sotg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3a:cb:ab:11:35:4f:68:b2:5d:f2:e2:bf:8f:ea:b7:92:aa:
76:18:37:cb:04:af:26:43:a3:82:89:7f:2e:49:ef:d8:eb:6d:
c9:6f:03:28:7c:ed:14:3e:2a:39:56:39:0d:8f:d0:71:15:89:
e4:22:92:5d:3a:6e:9c:c1:28:7b:c7:a0:7b:04:88:4f:17:a5:
20:f4:5c:78:8c:57:15:ab:2c:97:2c:56:96:a4:66:51:8a:13:
15:b6:16:8d:11:4d:d7:29:a6:36:43:e8:75:81:46:a7:44:e8:
53:89:e0:4e:1a:d1:41:50:de:ca:7d:37:a8:73:16:65:3c:6b:
d8:0c:6e:37:84:b6:e3:0c:13:29:83:2c:2c:74:bd:23:8d:cb:
4a:dd:67:9d:7e:0d:e3:9a:e7:1d:20:33:d5:39:78:f7:6c:20:
fa:e4:9b:0f:99:73:ee:71:ef:05:ca:3c:4b:93:38:24:eb:8a:
62:4e:6e:46:2d:0d:e4:f6:01:3b:3b:92:33:5b:0e:e1:12:2f:
63:1f:37:24:bf:fc:d3:62:ee:ed:ad:19:49:9b:d9:aa:98:dc:
18:06:72:51:df:a6:5e:49:7e:11:ad:bb:de:d2:b1:32:17:37:
d1:0a:68:a6:fe:c1:03:4c:7b:35:54:14:0e:41:86:03:2a:57:
0b:30:b1:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFADVxWkGD4QVOcz+lpX8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjQwMTAxMTIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGZlOWZjNGMzNjk1ZGQ4NDk5OWVmYWE0NmVhNjY4ZjhmYWNhMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZfDMvcHthsF02f0i6tcm90+F+vB
JR6CJZEC/sr/5iEJHSTgZNpXMPnIfQXe/lYXwupnn9OynliJtEFz8CfckbAGxP2k
YWMgpd3/t1wMaRh0G7PvDGx6JrdX8ZZZU4XayXf0t7fcyoIIlmhxHrHW21f/vxAf
qehQpJ15a0SLS43fgj1Bbeh4jMKQG/RYbZhSw4klfXb2tp0/G4vsHrW6ns9b1C36
y36I6fXH1caj3plklJbKmdN8QMHRR6TXtc/tCmoOciasAwGNpVmSVtWWPufIUfiv
wKl9h0l0zcI8ltWn1Gjmz27R4fMWd6wrx3dc1HxQ1iBO7ix0ghakEjAsywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD+n8TDaV3YSZnvqkbqZo+PrKLYMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvc1A2ZnhNTnBYZGhKbWUtcVJ1cG1qNC1zb3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BFMA0G
CSqGSIb3DQEBCwUAA4IBAQBqOsurETVPaLJd8uK/j+q3kqp2GDfLBK8mQ6OCiX8u
Se/Y623JbwMofO0UPio5VjkNj9BxFYnkIpJdOm6cwSh7x6B7BIhPF6Ug9Fx4jFcV
qyyXLFaWpGZRihMVthaNEU3XKaY2Q+h1gUanROhTieBOGtFBUN7KfTeocxZlPGvY
DG43hLbjDBMpgywsdL0jjctK3Wedfg3jmucdIDPVOXj3bCD65JsPmXPuce8FyjxL
kzgk64piTm5GLQ3k9gE7O5IzWw7hEi9jHzckv/zTYu7trRlJm9mqmNwYBnJR36Ze
SX4Rrbve0rEyFzfRCmim/sEDTHs1VBQOQYYDKlcLMLEZ
-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:39 2024 by rpki-client on console-fra.rpki-client.org