Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rI8_gzjT0cb6YLlgoQtb8-01Co8.roa
File: rI8_gzjT0cb6YLlgoQtb8-01Co8.roa (raw, json)
Hash identifier: zMDyRLxzH78ldokdbrRR1Z2XlmcwkhIxbsSiFdjh/ss=
Subject key identifier: AC:8F:3F:83:38:D3:D1:C6:FA:60:B9:60:A1:0B:5B:F3:ED:35:0A:8F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01907E9602E3BAFD7F3E7019CB02247ACBFF
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rI8_gzjT0cb6YLlgoQtb8-01Co8.roa
Signing time: Thu 04 Jul 2024 16:31:18 +0000
ROA not before: Thu 04 Jul 2024 16:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 91.190.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 18:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:96:02:e3:ba:fd:7f:3e:70:19:cb:02:24:7a:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 4 16:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac8f3f8338d3d1c6fa60b960a10b5bf3ed350a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:56:8e:a6:87:8f:55:01:03:e3:79:81:7e:
5e:21:fd:fb:d1:6b:1d:94:87:58:4f:31:8e:46:20:
32:a4:be:91:39:2b:df:53:ec:5e:44:3a:9d:d3:55:
4c:6b:40:85:d7:a9:26:6b:a5:ad:7f:bd:ca:e5:9e:
f0:51:d0:89:75:52:d9:64:e3:ef:87:3b:53:9e:b7:
e4:60:3c:8d:cf:ff:5c:f5:90:2f:51:f1:49:73:3d:
7c:e6:e5:19:7d:ac:2e:96:0d:8e:88:e1:9b:14:25:
ff:e0:6a:9f:04:de:b8:47:99:e3:ea:15:b8:27:d2:
46:58:5c:38:22:08:ca:55:e1:b7:6a:60:a3:16:f0:
0b:01:5a:5a:86:ff:6e:0b:cb:55:da:79:7f:04:58:
1c:b5:72:2f:2f:0d:71:2d:eb:41:5a:fe:fa:dd:fe:
83:36:92:6b:aa:23:39:9c:a7:58:c4:d3:8f:46:db:
94:73:95:74:52:1d:ea:a7:c4:ee:a8:77:79:b0:6b:
7c:ed:0c:6c:03:6d:c3:c0:07:f9:56:bf:20:c9:8f:
3f:ca:c6:23:8b:ea:89:74:26:2b:a3:c6:e7:55:2a:
bf:44:e0:2a:61:da:8d:b5:12:0f:21:7c:75:f7:23:
45:5a:a4:11:b3:a1:08:85:65:90:6b:9f:dd:0e:a4:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:3F:83:38:D3:D1:C6:FA:60:B9:60:A1:0B:5B:F3:ED:35:0A:8F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rI8_gzjT0cb6YLlgoQtb8-01Co8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c9:c5:fb:0f:18:06:bf:fe:b7:c9:81:2e:a1:3c:6c:d2:d8:
d9:80:8a:ff:86:22:d3:3e:51:de:00:25:3f:d1:b8:d4:cd:d3:
c0:8d:6b:81:4c:b9:e1:89:5b:d5:ea:9d:b5:ab:53:86:f6:82:
e9:66:90:b3:2a:6b:c6:5b:ef:9d:e7:2c:59:d1:24:6c:01:2d:
41:38:56:b5:6d:92:4a:0c:58:de:71:a8:05:ba:0a:d0:93:91:
2b:df:0c:30:8d:e2:49:06:e9:92:69:5b:2f:3a:75:9b:2c:87:
dd:7e:37:97:33:41:af:c3:c1:57:e0:40:75:30:ad:e8:02:8b:
03:40:fa:12:84:2b:03:13:5d:a2:1b:b9:63:22:cb:24:2b:89:
2c:31:38:84:b9:79:64:14:37:7a:d8:86:6e:bd:89:45:80:f3:
e7:31:34:30:00:2a:b3:c1:ea:4a:00:9b:fd:6f:99:11:a0:d9:
3d:9d:e8:eb:12:8b:3c:39:a0:d8:c6:98:e6:69:09:0d:80:15:
73:84:ad:f4:a5:04:51:8f:ff:12:0c:7b:ad:12:1a:e3:03:46:
a4:99:2c:f6:cc:4b:e9:6b:da:be:89:3c:88:27:f0:e7:7e:bb:
62:3f:32:bf:bf:13:9f:15:5e:7e:e7:e0:ac:40:73:e1:4d:fe:
f8:af:8c:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB+lgLjuv1/PnAZywIkesv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjQwNzA0MTYzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzhmM2Y4MzM4ZDNkMWM2ZmE2MGI5NjBhMTBiNWJmM2VkMzUwYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbRWjqaHj1UBA+N5gX5eIf370Wsd
lIdYTzGORiAypL6ROSvfU+xeRDqd01VMa0CF16kma6Wtf73K5Z7wUdCJdVLZZOPv
hztTnrfkYDyNz/9c9ZAvUfFJcz185uUZfawulg2OiOGbFCX/4GqfBN64R5nj6hW4
J9JGWFw4IgjKVeG3amCjFvALAVpahv9uC8tV2nl/BFgctXIvLw1xLetBWv763f6D
NpJrqiM5nKdYxNOPRtuUc5V0Uh3qp8TuqHd5sGt87QxsA23DwAf5Vr8gyY8/ysYj
i+qJdCYro8bnVSq/ROAqYdqNtRIPIXx19yNFWqQRs6EIhWWQa5/dDqTC/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyPP4M409HG+mC5YKELW/PtNQqPMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvckk4X2d6alQwY2I2WUxsZ29RdGI4LTAxQ284LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW76aMA0G
CSqGSIb3DQEBCwUAA4IBAQCjycX7DxgGv/63yYEuoTxs0tjZgIr/hiLTPlHeACU/
0bjUzdPAjWuBTLnhiVvV6p21q1OG9oLpZpCzKmvGW++d5yxZ0SRsAS1BOFa1bZJK
DFjecagFugrQk5Er3wwwjeJJBumSaVsvOnWbLIfdfjeXM0Gvw8FX4EB1MK3oAosD
QPoShCsDE12iG7ljIsskK4ksMTiEuXlkFDd62IZuvYlFgPPnMTQwACqzwepKAJv9
b5kRoNk9nejrEos8OaDYxpjmaQkNgBVzhK30pQRRj/8SDHutEhrjA0akmSz2zEvp
a9q+iTyIJ/DnfrtiPzK/vxOfFV5+5+CsQHPhTf74r4z5
-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:19 2024 by rpki-client on console-fra.rpki-client.org