Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/4UyiOpn4k0k8xdt4rbTeHE55T1s.roa
File: 4UyiOpn4k0k8xdt4rbTeHE55T1s.roa (raw, json)
Hash identifier: vfN+S8VLFiisc+yC9cuFDFgrH69GZI5vYF4G3FXvYPg=
Subject key identifier: E1:4C:A2:3A:99:F8:93:49:3C:C5:DB:78:AD:B4:DE:1C:4E:79:4F:5B
Certificate issuer: /CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Certificate serial: 01856D78A6ADC6E9505B504B653ECAC8277B
Authority key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/4UyiOpn4k0k8xdt4rbTeHE55T1s.roa
Signing time: Sun 01 Jan 2023 13:15:01 +0000
ROA not before: Sun 01 Jan 2023 13:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57924
IP address blocks: 91.236.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a6:ad:c6:e9:50:5b:50:4b:65:3e:ca:c8:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Validity
Not Before: Jan 1 13:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e14ca23a99f893493cc5db78adb4de1c4e794f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:54:cb:e9:1c:8b:d3:73:9b:7d:0e:dd:80:
87:cc:44:13:86:47:29:e0:f8:61:45:6c:92:33:af:
6c:14:ec:57:33:a7:77:a8:11:76:ff:47:16:15:fe:
85:5e:24:5e:b7:98:68:2b:a7:8c:84:10:ee:23:3a:
8a:d8:3b:76:88:6e:3a:14:14:e5:56:17:ea:8d:14:
a2:a2:92:52:b4:cd:16:06:ea:d4:b6:8e:d2:65:d2:
f9:04:e4:bd:e6:80:4a:ac:ec:1a:06:5d:1f:b9:3e:
4c:ba:5c:a8:6c:f4:0f:87:61:d6:a2:53:e6:8a:69:
74:25:ca:69:83:6d:da:65:a7:38:8a:1e:9e:e6:5e:
35:97:24:89:03:42:50:4d:62:4e:99:99:78:54:05:
d1:f4:95:b8:8e:49:8e:43:f9:c5:46:25:fe:ef:b9:
ad:53:0c:b9:b6:98:1a:62:06:12:e5:cf:d7:3d:e6:
e2:bf:ee:84:58:25:87:a7:bc:1e:ff:4b:35:dc:a1:
95:17:e5:9c:38:c5:51:6a:da:bb:53:3e:1c:e8:e7:
c8:b3:74:77:55:7a:51:d5:b1:73:6d:2b:50:18:33:
f5:ad:56:1f:b5:0f:82:01:86:92:8f:e5:c9:84:2e:
55:e3:f5:a3:c3:e2:c0:9b:f9:07:68:7a:15:a2:32:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:A2:3A:99:F8:93:49:3C:C5:DB:78:AD:B4:DE:1C:4E:79:4F:5B
X509v3 Authority Key Identifier:
keyid:06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/4UyiOpn4k0k8xdt4rbTeHE55T1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:76:c8:7f:a8:e6:43:14:4f:c9:4e:81:aa:af:d0:ac:a7:aa:
16:6d:fb:65:8a:f9:2a:9c:ee:42:57:8d:e0:42:7c:78:df:4f:
e0:a1:d1:98:86:a6:58:f6:cd:39:d2:89:85:1c:94:63:a2:76:
d8:94:b1:65:25:19:ac:f3:10:89:63:23:e2:84:8e:3c:8e:eb:
3e:e9:cc:c3:7c:a8:c4:62:09:9b:6a:82:74:7d:6f:6d:3c:e1:
14:b3:b1:10:6c:ca:f6:0c:6a:3a:38:9d:77:26:82:0a:7b:69:
10:69:1c:78:58:31:74:62:3b:69:57:2c:52:20:60:38:31:1c:
8f:f0:21:89:ee:56:c3:c2:8f:0b:81:89:af:17:19:b6:3d:65:
ff:b8:4e:f8:d9:76:38:e1:85:8d:a6:ba:19:ac:2b:f0:d9:e0:
06:f8:d0:80:13:51:d9:eb:eb:4c:39:fc:8c:c9:7f:f6:93:dc:
cd:d7:48:61:44:47:24:56:36:8f:82:e5:85:65:6b:87:43:63:
35:58:b5:83:62:6d:36:62:1d:16:cf:9a:bd:c1:d4:5d:62:82:
87:0f:ff:75:30:f6:e6:d2:ec:d0:b0:63:07:7b:65:5e:fe:a9:
a1:90:5d:ad:bc:63:70:2b:6a:06:bb:ef:9d:7f:90:2d:2f:26:
8f:23:75:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteKatxulQW1BLZT7KyCd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTRhZDc4ODhiMDhjYTQ1MzU2MzdiNjA4YmI3ZGMyMTRh
NjYyNGYwHhcNMjMwMTAxMTMxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTRjYTIzYTk5Zjg5MzQ5M2NjNWRiNzhhZGI0ZGUxYzRlNzk0ZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMRUy+kci9Nzm30O3YCHzEQThkcp
4PhhRWySM69sFOxXM6d3qBF2/0cWFf6FXiRet5hoK6eMhBDuIzqK2Dt2iG46FBTl
VhfqjRSiopJStM0WBurUto7SZdL5BOS95oBKrOwaBl0fuT5MulyobPQPh2HWolPm
iml0Jcppg23aZac4ih6e5l41lySJA0JQTWJOmZl4VAXR9JW4jkmOQ/nFRiX+77mt
Uwy5tpgaYgYS5c/XPebiv+6EWCWHp7we/0s13KGVF+WcOMVRatq7Uz4c6OfIs3R3
VXpR1bFzbStQGDP1rVYftQ+CAYaSj+XJhC5V4/Wjw+LAm/kHaHoVojJgVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFMojqZ+JNJPMXbeK203hxOeU9bMB8GA1UdIwQY
MBaAFAbkrXiIsIykU1Y3tgi7fcIUpmJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVTdGVJaXdqS1JUVmplMkNMdDl3aFNtWWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNTE3ZTQtYjQyZS00NDA5LWIxZmYt
MDkyZTI2MzM0MDI2LzEvNFV5aU9wbjRrMGs4eGR0NHJiVGVIRTU1VDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNTE3ZTQtYjQyZS00NDA5LWIxZmYtMDkyZTI2MzM0MDI2
LzEvQnVTdGVJaXdqS1JUVmplMkNMdDl3aFNtWWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yrMA0G
CSqGSIb3DQEBCwUAA4IBAQBrdsh/qOZDFE/JToGqr9Csp6oWbftlivkqnO5CV43g
Qnx430/godGYhqZY9s050omFHJRjonbYlLFlJRms8xCJYyPihI48jus+6czDfKjE
YgmbaoJ0fW9tPOEUs7EQbMr2DGo6OJ13JoIKe2kQaRx4WDF0YjtpVyxSIGA4MRyP
8CGJ7lbDwo8LgYmvFxm2PWX/uE742XY44YWNproZrCvw2eAG+NCAE1HZ6+tMOfyM
yX/2k9zN10hhREckVjaPguWFZWuHQ2M1WLWDYm02Yh0Wz5q9wdRdYoKHD/91MPbm
0uzQsGMHe2Ve/qmhkF2tvGNwK2oGu++df5AtLyaPI3X+
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:45 2024 by rpki-client on console-fra.rpki-client.org