Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/OrjU_LnMtCbByqfQTTZVdoukkco.roa
File: OrjU_LnMtCbByqfQTTZVdoukkco.roa (raw, json)
Hash identifier: b/7CpJy1Mfb2S2XoouLECUE2S/UBlSFHviSGYl7uUdA=
Subject key identifier: 3A:B8:D4:FC:B9:CC:B4:26:C1:CA:A7:D0:4D:36:55:76:8B:A4:91:CA
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 0185735EFFFB7ED1F462B9E4E27596F0C4E8
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/OrjU_LnMtCbByqfQTTZVdoukkco.roa
Signing time: Mon 02 Jan 2023 16:44:43 +0000
ROA not before: Mon 02 Jan 2023 16:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42518
IP address blocks: 91.192.190.0/23 maxlen: 23
91.215.122.0/23 maxlen: 23
91.192.188.0/23 maxlen: 23
91.215.120.0/22 maxlen: 22
91.215.120.0/23 maxlen: 23
91.192.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5e:ff:fb:7e:d1:f4:62:b9:e4:e2:75:96:f0:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Jan 2 16:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ab8d4fcb9ccb426c1caa7d04d3655768ba491ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:9a:99:34:8c:51:be:d8:25:a0:4e:75:e0:
5b:32:11:cc:2b:72:8b:d9:d3:f6:46:40:35:d4:40:
e1:8d:44:a3:13:2e:74:28:4f:94:f5:d8:95:8f:cc:
15:ec:9d:8f:15:55:65:7b:71:b3:16:31:7d:96:10:
e8:8a:a5:94:0a:97:40:0c:1e:c7:78:61:9e:ff:6c:
9c:a1:1f:10:07:6f:d2:9d:ce:95:17:1f:af:d3:0b:
26:12:1d:2c:f0:8d:34:e6:11:04:15:81:64:38:70:
c7:93:52:a7:da:f2:76:02:9b:a1:2d:27:4d:75:5d:
9d:fc:b0:44:82:c9:47:b3:27:5c:ee:3e:37:e1:06:
25:02:06:1a:68:52:ee:88:b0:9d:55:a3:8c:1f:10:
4b:57:a3:36:70:0b:7e:0d:62:f7:fe:3e:fb:78:37:
41:c3:81:b0:1f:da:8d:7d:e8:58:78:d3:de:99:68:
c3:81:d5:46:75:6e:80:74:a7:fb:73:5d:6f:cc:7c:
81:27:5f:3b:bc:19:e5:b1:a6:d6:55:3a:e4:43:e1:
d2:2d:3e:8c:07:f0:32:5b:1e:60:06:a2:cc:f1:80:
08:05:1e:4f:47:da:ad:a3:be:87:bc:c2:f9:6d:20:
79:61:6f:cf:d9:0e:d3:52:2a:ed:b7:b6:20:a4:d8:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:D4:FC:B9:CC:B4:26:C1:CA:A7:D0:4D:36:55:76:8B:A4:91:CA
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/OrjU_LnMtCbByqfQTTZVdoukkco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.188.0/22
91.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:ed:d4:90:a2:de:b7:71:0f:1b:a5:5e:7f:39:74:87:db:a0:
27:f3:7c:c4:26:e6:7e:a3:55:ff:3e:c5:37:6d:5b:28:d1:6b:
fd:56:4a:d1:ee:5f:28:8f:af:d0:81:5b:5b:81:c3:14:76:9d:
bb:84:d1:78:29:c9:f5:90:4c:16:4c:86:b2:76:2a:92:df:fb:
f5:c5:93:ef:07:15:41:5a:16:9f:1e:4c:99:03:e2:90:f2:22:
6d:bd:81:0c:78:8c:ca:fb:54:1d:6d:db:4f:12:95:f1:91:f7:
f2:52:a7:0f:30:0f:96:ce:12:04:aa:56:d1:af:5c:76:99:55:
e0:52:da:00:55:88:04:70:22:8d:0b:56:cd:e1:24:44:91:ca:
56:9f:9f:04:ca:48:04:36:c0:0e:fb:45:21:f6:28:f6:1f:d5:
0b:94:18:af:fc:d1:18:ad:61:67:d5:b7:51:df:02:07:7a:93:
12:5e:8f:30:d0:59:38:66:64:a1:d3:1a:c9:70:25:aa:04:c3:
20:50:f3:31:9b:96:12:56:34:ff:48:0d:81:07:48:58:58:8f:
fa:0f:aa:c5:17:45:89:08:54:0e:75:63:78:33:17:51:0b:44:
06:c4:98:ba:78:7a:87:af:fb:e5:ea:f4:72:89:79:68:4f:b9:
76:6b:74:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzXv/7ftH0Yrnk4nWW8MToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz
ZDA0YTcwHhcNMjMwMTAyMTY0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWI4ZDRmY2I5Y2NiNDI2YzFjYWE3ZDA0ZDM2NTU3NjhiYTQ5MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8KamTSMUb7YJaBOdeBbMhHMK3KL
2dP2RkA11EDhjUSjEy50KE+U9diVj8wV7J2PFVVle3GzFjF9lhDoiqWUCpdADB7H
eGGe/2ycoR8QB2/Snc6VFx+v0wsmEh0s8I005hEEFYFkOHDHk1Kn2vJ2ApuhLSdN
dV2d/LBEgslHsydc7j434QYlAgYaaFLuiLCdVaOMHxBLV6M2cAt+DWL3/j77eDdB
w4GwH9qNfehYeNPemWjDgdVGdW6AdKf7c11vzHyBJ187vBnlsabWVTrkQ+HSLT6M
B/AyWx5gBqLM8YAIBR5PR9qto76HvML5bSB5YW/P2Q7TUirtt7YgpNiZiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDq41Py5zLQmwcqn0E02VXaLpJHKMB8GA1UdIwQY
MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt
NDNmNWJjZjY3NzVkLzEvT3JqVV9Mbk10Q2JCeXFmUVRUWlZkb3Vra2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk
LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8C8AwQC
W9d4MA0GCSqGSIb3DQEBCwUAA4IBAQCi7dSQot63cQ8bpV5/OXSH26An83zEJuZ+
o1X/PsU3bVso0Wv9VkrR7l8oj6/QgVtbgcMUdp27hNF4Kcn1kEwWTIaydiqS3/v1
xZPvBxVBWhafHkyZA+KQ8iJtvYEMeIzK+1QdbdtPEpXxkffyUqcPMA+WzhIEqlbR
r1x2mVXgUtoAVYgEcCKNC1bN4SREkcpWn58EykgENsAO+0Uh9ij2H9ULlBiv/NEY
rWFn1bdR3wIHepMSXo8w0Fk4ZmSh0xrJcCWqBMMgUPMxm5YSVjT/SA2BB0hYWI/6
D6rFF0WJCFQOdWN4MxdRC0QGxJi6eHqHr/vl6vRyiXloT7l2a3R/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-fra.rpki-client.org