Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/9vJV-vUG5dQ5wRzlE49f9P8yrQU.roa
File: 9vJV-vUG5dQ5wRzlE49f9P8yrQU.roa (raw, json)
Hash identifier: vYq7D8kFcdFwH8ghRnUVyhVbOZEBPw6oCgGMnHRIKxU=
Subject key identifier: F6:F2:55:FA:F5:06:E5:D4:39:C1:1C:E5:13:8F:5F:F4:FF:32:AD:05
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 018CC2DAE8C72D3277BDBF44CD4452368D48
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/9vJV-vUG5dQ5wRzlE49f9P8yrQU.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.236.67.0/24 maxlen: 24
91.236.66.0/24 maxlen: 24
2a10:a700:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:c7:2d:32:77:bd:bf:44:cd:44:52:36:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6f255faf506e5d439c11ce5138f5ff4ff32ad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:c8:53:77:60:af:b9:91:7b:8d:91:e2:56:
29:b9:4e:8b:e7:41:3b:ad:9d:57:da:c0:31:03:0f:
17:d5:65:0e:04:4b:23:34:f6:7d:15:b6:41:e1:1c:
48:fc:44:e8:c6:b5:4b:90:b7:3a:01:5d:73:79:19:
e3:64:d5:b8:df:69:34:1b:2d:b4:e9:38:ae:15:db:
9d:7a:05:b4:99:23:42:b8:ae:52:f6:87:64:c0:32:
fe:93:7a:6e:a2:ef:ce:5f:89:36:c0:71:ff:84:4f:
47:cf:7f:f8:e2:5d:ad:82:bd:f7:1b:1c:14:d8:3a:
c4:a9:9d:e4:37:6a:7d:cb:02:85:ba:24:f4:53:44:
bf:91:00:06:f4:2c:60:10:43:67:12:ca:0c:78:9f:
67:be:b4:da:6a:b0:dd:16:19:d6:75:85:ae:98:3a:
fd:56:47:34:5f:37:71:6e:ce:4f:80:5e:2c:b2:c8:
f4:87:62:09:b9:1e:15:ee:c8:51:41:b8:7c:e1:8b:
d7:fa:1c:44:d3:ce:5b:98:a2:4a:7b:de:58:24:a7:
16:9c:ad:e8:fa:a5:b4:78:1a:0b:90:24:26:4c:17:
cb:10:1e:bc:bf:a9:c6:73:ac:7a:31:f5:77:c1:dc:
04:d0:4e:d6:67:1f:84:ef:e8:dd:87:61:95:3a:fd:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:55:FA:F5:06:E5:D4:39:C1:1C:E5:13:8F:5F:F4:FF:32:AD:05
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/9vJV-vUG5dQ5wRzlE49f9P8yrQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.66.0/23
IPv6:
2a10:a700:100::/40
Signature Algorithm: sha256WithRSAEncryption
39:e6:3c:a2:68:b3:58:55:72:02:cf:af:ac:b9:66:81:bf:74:
da:95:f1:4c:09:b0:98:45:cd:d1:f2:f2:ad:e2:a4:42:bd:23:
97:0a:29:dd:9c:0b:55:6f:17:55:ea:82:aa:d0:c8:88:12:ff:
c0:1d:13:63:e7:14:92:16:9e:ca:ce:d1:91:21:50:f7:e1:5c:
a8:50:c3:51:84:ee:00:57:3f:ae:eb:79:51:a1:9e:f2:67:c6:
b2:50:68:ea:6c:35:3d:8c:73:55:a3:ab:00:1f:73:96:62:7e:
73:79:e4:77:72:69:73:5d:a5:7d:75:e3:80:0e:9f:d7:09:a1:
a3:28:31:11:68:a3:4d:2f:6e:09:9a:b4:b3:44:1b:fb:01:62:
2b:25:f2:1f:30:24:fb:4c:27:c6:32:34:4e:96:d3:90:2a:19:
70:71:9b:2a:1e:52:81:76:37:79:22:cc:07:43:02:a7:ab:69:
ab:0a:ba:76:86:cd:db:a0:59:89:4b:ad:ad:00:82:ba:d7:5e:
cb:b3:15:da:98:57:60:94:e8:0d:5c:bf:c7:68:60:28:8b:3d:
95:f8:cb:a5:0c:7f:25:60:62:26:47:ae:5a:fa:90:9c:26:3c:
4b:69:76:60:dd:54:36:61:06:14:b9:0a:6c:1d:4c:61:d6:24:
88:42:c3:85
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzC2ujHLTJ3vb9EzURSNo1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk
YmVmYzgwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmYyNTVmYWY1MDZlNWQ0MzljMTFjZTUxMzhmNWZmNGZmMzJhZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YnIU3dgr7mRe42R4lYpuU6L50E7
rZ1X2sAxAw8X1WUOBEsjNPZ9FbZB4RxI/EToxrVLkLc6AV1zeRnjZNW432k0Gy20
6TiuFdudegW0mSNCuK5S9odkwDL+k3puou/OX4k2wHH/hE9Hz3/44l2tgr33GxwU
2DrEqZ3kN2p9ywKFuiT0U0S/kQAG9CxgEENnEsoMeJ9nvrTaarDdFhnWdYWumDr9
Vkc0Xzdxbs5PgF4sssj0h2IJuR4V7shRQbh84YvX+hxE085bmKJKe95YJKcWnK3o
+qW0eBoLkCQmTBfLEB68v6nGc6x6MfV3wdwE0E7WZx+E7+jdh2GVOv14RwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPbyVfr1BuXUOcEc5ROPX/T/Mq0FMB8GA1UdIwQY
MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt
MzcyNzNkZjM5MDFjLzEvOXZKVi12VUc1ZFE1d1J6bEU0OWY5UDh5clFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj
LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBW+xCMA4E
AgACMAgDBgAqEKcAATANBgkqhkiG9w0BAQsFAAOCAQEAOeY8omizWFVyAs+vrLlm
gb902pXxTAmwmEXN0fLyreKkQr0jlwop3ZwLVW8XVeqCqtDIiBL/wB0TY+cUkhae
ys7RkSFQ9+FcqFDDUYTuAFc/rut5UaGe8mfGslBo6mw1PYxzVaOrAB9zlmJ+c3nk
d3Jpc12lfXXjgA6f1wmhoygxEWijTS9uCZq0s0Qb+wFiKyXyHzAk+0wnxjI0TpbT
kCoZcHGbKh5SgXY3eSLMB0MCp6tpqwq6dobN26BZiUutrQCCutdey7MV2phXYJTo
DVy/x2hgKIs9lfjLpQx/JWBiJkeuWvqQnCY8S2l2YN1UNmEGFLkKbB1MYdYkiELD
hQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:55 2025 by rpki-client