Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/oC6XS1hEXld0_gAnpRG9-DHF2yg.roa
File: oC6XS1hEXld0_gAnpRG9-DHF2yg.roa (raw, json)
Hash identifier: 4iwHN56ZRnQ7YftxN7BMkL59FQs6yD1HNbyerzfE4+M=
Subject key identifier: A0:2E:97:4B:58:44:5E:57:74:FE:00:27:A5:11:BD:F8:31:C5:DB:28
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01856FB117470FE3291FDC2C053550D66F89
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/oC6XS1hEXld0_gAnpRG9-DHF2yg.roa
Signing time: Sun 01 Jan 2023 23:35:54 +0000
ROA not before: Sun 01 Jan 2023 23:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205132
IP address blocks: 91.216.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:17:47:0f:e3:29:1f:dc:2c:05:35:50:d6:6f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jan 1 23:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a02e974b58445e5774fe0027a511bdf831c5db28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:2e:c6:0d:30:79:3c:ff:c8:0b:dd:4d:f2:
e0:cb:12:aa:df:09:e9:92:78:71:60:d3:ad:a0:42:
9d:79:57:2f:73:90:93:13:fc:f8:62:79:f3:93:f5:
2c:2c:c8:c8:50:40:a6:9f:ae:68:b6:90:8d:a6:63:
49:31:1a:b6:37:41:fb:2e:d2:84:05:55:c3:ac:cd:
8c:dc:a7:04:63:29:ee:13:25:93:4e:15:ac:71:e2:
83:5c:88:53:cb:68:cb:16:48:bb:89:8f:be:1c:0c:
43:38:be:f6:e0:ae:d0:fc:1e:99:c3:00:e9:e9:8c:
48:5d:5a:ad:0b:ba:1e:a0:52:c5:a7:37:ed:db:b2:
d3:44:22:f3:7c:f4:16:d9:e3:cf:de:f9:56:7d:63:
de:15:0d:fa:f8:88:8d:25:f3:79:ff:00:a3:8c:a6:
19:dc:cb:f2:59:95:84:c9:a5:04:e2:94:96:28:45:
df:4d:68:c2:93:4c:5f:45:ff:9a:bc:bf:f3:1b:5e:
c3:d9:bb:77:59:dd:c2:a1:b2:4b:c0:95:8e:36:38:
49:5a:b5:78:b8:cd:b8:70:af:e9:6a:14:23:99:99:
24:07:bf:cd:cc:b8:56:22:7e:fc:b3:54:e1:1c:59:
cc:07:76:14:a6:84:52:5b:75:60:c3:58:45:a8:b9:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:97:4B:58:44:5E:57:74:FE:00:27:A5:11:BD:F8:31:C5:DB:28
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/oC6XS1hEXld0_gAnpRG9-DHF2yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2e:88:1f:8d:3c:a9:08:e5:34:ef:38:50:1f:6f:3a:ea:07:
c3:37:6c:ca:af:51:72:b1:04:e7:e2:4c:a8:b0:8a:68:37:36:
f2:2a:64:4f:65:86:55:26:6c:31:9d:dc:79:e0:25:6e:69:c4:
60:6d:d8:0a:32:2d:b9:ba:84:54:fd:3d:1e:fa:10:77:45:bf:
30:bf:7f:f4:9f:50:48:d6:77:5f:ae:6c:2a:0f:10:7d:30:21:
86:68:d8:93:1f:81:d0:ab:20:2a:7c:bf:77:02:4e:a6:20:fd:
39:bf:42:63:23:1c:2d:35:c2:14:d3:23:11:1f:05:cd:de:0e:
c6:42:25:06:a6:63:80:36:80:e1:79:79:d8:f2:9e:76:6c:0f:
4a:74:a7:d5:34:b3:82:73:8a:5c:90:14:fe:41:46:0e:f4:66:
80:f8:7b:14:77:57:ee:25:65:88:4a:09:88:4f:3c:e2:55:3e:
5f:ea:69:8b:8c:ac:8f:93:88:75:bc:54:30:0d:a5:a3:02:31:
62:2b:0e:2d:94:dd:7c:ba:cf:01:5b:54:40:b0:26:2a:f9:f0:
b7:30:9b:da:27:af:1b:76:4b:60:0f:4e:12:e1:ae:2d:08:7b:
8f:00:55:2a:a6:1a:24:c0:be:b5:d2:dd:86:65:cd:8f:fd:3a:
a4:55:7c:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvsRdHD+MpH9wsBTVQ1m+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw
Y2I2YTQwHhcNMjMwMTAxMjMzNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDJlOTc0YjU4NDQ1ZTU3NzRmZTAwMjdhNTExYmRmODMxYzVkYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l8uxg0weTz/yAvdTfLgyxKq3wnp
knhxYNOtoEKdeVcvc5CTE/z4Ynnzk/UsLMjIUECmn65otpCNpmNJMRq2N0H7LtKE
BVXDrM2M3KcEYynuEyWTThWsceKDXIhTy2jLFki7iY++HAxDOL724K7Q/B6ZwwDp
6YxIXVqtC7oeoFLFpzft27LTRCLzfPQW2ePP3vlWfWPeFQ36+IiNJfN5/wCjjKYZ
3MvyWZWEyaUE4pSWKEXfTWjCk0xfRf+avL/zG17D2bt3Wd3CobJLwJWONjhJWrV4
uM24cK/pahQjmZkkB7/NzLhWIn78s1ThHFnMB3YUpoRSW3Vgw1hFqLmOiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKAul0tYRF5XdP4AJ6URvfgxxdsoMB8GA1UdIwQY
MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt
MmQ3ZmQwZmIyMmNlLzEvb0M2WFMxaEVYbGQwX2dBbnBSRzktREhGMnlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYtMmQ3ZmQwZmIyMmNl
LzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iuMA0G
CSqGSIb3DQEBCwUAA4IBAQAXLogfjTypCOU07zhQH2866gfDN2zKr1FysQTn4kyo
sIpoNzbyKmRPZYZVJmwxndx54CVuacRgbdgKMi25uoRU/T0e+hB3Rb8wv3/0n1BI
1ndfrmwqDxB9MCGGaNiTH4HQqyAqfL93Ak6mIP05v0JjIxwtNcIU0yMRHwXN3g7G
QiUGpmOANoDheXnY8p52bA9KdKfVNLOCc4pckBT+QUYO9GaA+HsUd1fuJWWISgmI
TzziVT5f6mmLjKyPk4h1vFQwDaWjAjFiKw4tlN18us8BW1RAsCYq+fC3MJvaJ68b
dktgD04S4a4tCHuPAFUqphokwL610t2GZc2P/TqkVXyq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org