Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/Kt7NDCSiB5qYVEzZHqSUOekspv4.roa
File: Kt7NDCSiB5qYVEzZHqSUOekspv4.roa (raw, json)
Hash identifier: ute3SGkTbUYKUgQ43M668xjy0r1nguIal+us9d6oxUk=
Subject key identifier: 2A:DE:CD:0C:24:A2:07:9A:98:54:4C:D9:1E:A4:94:39:E9:2C:A6:FE
Certificate issuer: /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial: 01873297B0158D57BB44DA59063D7558E9E2
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/Kt7NDCSiB5qYVEzZHqSUOekspv4.roa
Signing time: Thu 30 Mar 2023 12:56:54 +0000
ROA not before: Thu 30 Mar 2023 12:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42905
IP address blocks: 91.199.245.0/24 maxlen: 24
193.200.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:97:b0:15:8d:57:bb:44:da:59:06:3d:75:58:e9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Validity
Not Before: Mar 30 12:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2adecd0c24a2079a98544cd91ea49439e92ca6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:eb:22:c4:60:1a:e8:56:c2:cb:b4:90:3a:
44:6d:dc:23:1e:c6:78:33:26:85:b0:4c:b8:5e:6f:
d7:55:49:7b:10:a1:d8:0d:cf:f4:27:b6:99:7f:73:
9d:50:8a:3c:74:27:eb:8b:56:90:1b:da:82:37:0f:
bd:8a:7f:fc:0e:0d:43:fa:d0:c1:03:45:b6:bd:ef:
23:5f:a6:49:ef:1c:7e:15:b5:b6:a8:b7:fe:87:9a:
12:b0:0c:f2:97:90:f0:a6:ed:24:5d:99:bc:c9:4e:
da:25:08:fa:34:53:f9:81:43:58:ac:71:1c:55:8e:
05:d7:a5:b1:f8:cf:cd:ff:3b:9f:89:55:22:19:d0:
d4:eb:5a:0e:d4:8e:d9:28:ea:8b:01:3a:21:ea:b5:
b1:1b:28:2e:1e:07:24:78:bf:4e:1c:ca:9d:dd:07:
00:85:a3:4e:43:39:07:4e:2e:30:9b:3d:17:28:6f:
1e:c4:82:2d:d7:48:73:d0:51:d7:10:ec:fe:a5:a7:
25:19:7e:ee:97:1d:06:47:aa:df:b6:8b:11:9d:a9:
0d:db:d6:c3:ee:e0:73:60:3b:33:33:a6:a5:06:be:
47:36:5e:3e:92:7c:1c:61:36:59:b0:cd:4f:3a:c5:
e8:1f:84:ac:81:4d:b1:13:d4:0e:00:1a:58:ba:41:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:CD:0C:24:A2:07:9A:98:54:4C:D9:1E:A4:94:39:E9:2C:A6:FE
X509v3 Authority Key Identifier:
keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/Kt7NDCSiB5qYVEzZHqSUOekspv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.245.0/24
193.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9f:c0:a1:c2:59:03:5c:61:38:51:51:2e:aa:7b:9d:23:d9:
7d:7f:a9:2c:cb:e8:78:62:94:b3:77:b7:8a:ee:8c:1f:02:74:
82:93:c9:ba:b6:d8:40:87:26:d4:e4:07:29:94:51:c3:10:c4:
67:c8:4a:4f:d9:e5:93:68:7d:5d:f2:fa:91:d8:07:2a:4c:ce:
e7:09:30:a6:d5:a2:29:7d:19:7f:f8:d0:8b:ad:94:f2:ae:95:
37:0f:94:d1:e5:84:91:63:ec:59:04:47:73:9e:4e:2e:d4:f3:
6d:ff:65:9f:25:9a:0d:57:ce:ae:ab:23:34:13:71:b9:d8:e9:
7b:03:bd:0f:a4:5f:a6:e8:9d:9a:b2:75:5b:08:2f:55:a8:47:
c0:1e:ee:71:ad:55:29:79:28:a5:e0:bb:30:fe:0f:a6:69:02:
2b:68:eb:b3:ef:a7:b4:b4:9e:ff:39:c5:3e:33:d7:ed:dd:a0:
85:b9:7f:86:fb:dc:0f:fd:ce:f5:5c:c0:56:7e:87:86:68:df:
ad:6f:61:84:8f:e0:5c:ca:3e:a4:01:4c:a0:aa:1e:5f:0f:3a:
1f:89:f1:ab:61:f5:ef:3c:43:22:7f:79:3e:5c:38:66:39:b1:
b7:6b:57:d4:c8:27:80:06:9c:4f:9f:b7:3d:b5:af:83:98:5f:
e1:0b:f4:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYcyl7AVjVe7RNpZBj11WOniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWY5ZGJiZTY4Yjg0MDI3Y2VkNGQzMWU4ODAzZjEzZTlk
NjVkMTMwHhcNMjMwMzMwMTI1NjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWRlY2QwYzI0YTIwNzlhOTg1NDRjZDkxZWE0OTQzOWU5MmNhNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwfrIsRgGuhWwsu0kDpEbdwjHsZ4
MyaFsEy4Xm/XVUl7EKHYDc/0J7aZf3OdUIo8dCfri1aQG9qCNw+9in/8Dg1D+tDB
A0W2ve8jX6ZJ7xx+FbW2qLf+h5oSsAzyl5Dwpu0kXZm8yU7aJQj6NFP5gUNYrHEc
VY4F16Wx+M/N/zufiVUiGdDU61oO1I7ZKOqLAToh6rWxGyguHgckeL9OHMqd3QcA
haNOQzkHTi4wmz0XKG8exIIt10hz0FHXEOz+paclGX7ulx0GR6rftosRnakN29bD
7uBzYDszM6alBr5HNl4+knwcYTZZsM1POsXoH4SsgU2xE9QOABpYukGMKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCrezQwkogeamFRM2R6klDnpLKb+MB8GA1UdIwQY
MBaAFOkfnbvmi4QCfO1NMeiAPxPp1l0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUt
YjRlNzlmNzgxZTRkLzEvS3Q3TkRDU2lCNXFZVkV6WkhxU1VPZWtzcHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUtYjRlNzlmNzgxZTRk
LzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8f1AwQA
wciXMA0GCSqGSIb3DQEBCwUAA4IBAQCtn8ChwlkDXGE4UVEuqnudI9l9f6ksy+h4
YpSzd7eK7owfAnSCk8m6tthAhybU5AcplFHDEMRnyEpP2eWTaH1d8vqR2AcqTM7n
CTCm1aIpfRl/+NCLrZTyrpU3D5TR5YSRY+xZBEdznk4u1PNt/2WfJZoNV86uqyM0
E3G52Ol7A70PpF+m6J2asnVbCC9VqEfAHu5xrVUpeSil4Lsw/g+maQIraOuz76e0
tJ7/OcU+M9ft3aCFuX+G+9wP/c71XMBWfoeGaN+tb2GEj+Bcyj6kAUygqh5fDzof
ifGrYfXvPEMif3k+XDhmObG3a1fUyCeABpxPn7c9ta+DmF/hC/Sx
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:15 2024 by rpki-client on console-ams.rpki-client.org