Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/UQIQobKgISSF-IiIznkoT_aS8Rs.roa
File: UQIQobKgISSF-IiIznkoT_aS8Rs.roa (raw, json)
Hash identifier: 0Yt22iSzDYSAkBmIU7a56zMY5yv9212y+lNaWpOLT3o=
Subject key identifier: 51:02:10:A1:B2:A0:21:24:85:F8:88:88:CE:79:28:4F:F6:92:F1:1B
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 018884F3D40E741C0515C6FD38AE406E3FC0
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/UQIQobKgISSF-IiIznkoT_aS8Rs.roa
Signing time: Sun 04 Jun 2023 05:49:11 +0000
ROA not before: Sun 04 Jun 2023 05:49:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198849
IP address blocks: 91.109.251.0/24 maxlen: 24
91.109.252.0/24 maxlen: 24
91.109.253.0/24 maxlen: 24
91.109.248.0/24 maxlen: 24
91.109.249.0/24 maxlen: 24
91.109.250.0/24 maxlen: 24
91.109.248.0/21 maxlen: 21
91.109.254.0/24 maxlen: 24
91.109.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:84:f3:d4:0e:74:1c:05:15:c6:fd:38:ae:40:6e:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jun 4 05:49:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=510210a1b2a0212485f88888ce79284ff692f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:32:64:14:fb:ba:d1:e1:86:96:18:8c:07:
0f:e4:97:c5:3f:d3:36:c4:84:9a:38:0f:08:ac:ef:
cf:f7:21:47:1e:5f:4c:c4:48:13:74:8e:41:ab:a2:
ef:7c:ac:56:ad:7e:d9:52:e8:64:4b:64:04:cf:01:
ac:c0:68:e4:58:fb:f3:b1:c9:0c:cc:a4:b3:23:aa:
66:2d:63:dc:c3:49:61:c2:7e:5d:4d:25:fb:67:0c:
6e:90:da:cf:61:f1:72:d7:7f:5a:2a:71:b9:a0:f7:
80:e1:db:4e:02:db:96:c4:e2:a4:d1:63:1a:a8:a7:
fb:cf:46:96:69:b7:ea:5f:e9:f9:bd:d0:e0:ab:d3:
95:09:f8:f2:4a:57:c9:38:76:fe:d1:55:34:82:0e:
7f:d0:d5:aa:70:cd:f8:5a:fe:95:54:16:4f:5a:99:
fa:4a:90:90:84:14:ab:80:97:d3:0e:a3:46:ba:60:
bb:e8:ab:8f:3b:dc:06:b7:69:a1:6b:c7:e2:18:28:
b0:a5:10:b5:ae:0d:96:84:7f:4c:06:d5:18:33:f9:
a1:73:40:12:17:14:c5:40:1e:21:84:dd:d9:d1:96:
6b:55:93:58:a2:b8:4a:ea:02:97:d6:69:b2:45:3b:
97:70:2e:9e:37:c6:8d:15:b1:6d:4c:2f:7c:c0:40:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:10:A1:B2:A0:21:24:85:F8:88:88:CE:79:28:4F:F6:92:F1:1B
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/UQIQobKgISSF-IiIznkoT_aS8Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.248.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:b2:09:c6:dd:e4:f3:c3:0e:da:a7:9c:58:e6:d2:f5:cd:8b:
21:c3:42:2a:d9:3c:50:b0:a9:0d:16:e5:af:d0:ab:e9:52:b3:
4b:e2:75:19:c7:ec:6d:11:84:1e:07:c6:b4:c4:69:cd:e2:8b:
60:c5:ea:6e:f5:a7:bd:ae:cd:8d:d3:3e:2e:74:b2:66:be:9c:
00:77:d1:f1:95:99:28:88:e9:b3:49:9b:1a:e3:f6:18:d6:58:
87:cf:cf:c8:39:f4:26:54:28:01:fa:16:ce:4d:35:bf:be:45:
f3:77:dd:08:55:29:1c:65:6a:68:8f:31:87:dd:fa:f1:f3:92:
18:fe:d1:4f:d9:1d:a2:7d:a4:43:ec:b5:5c:36:0f:d4:0a:b7:
85:00:bd:a7:b3:6b:a8:fd:96:08:cc:a7:74:62:4e:51:3f:ef:
87:01:f0:d0:1e:35:a1:46:38:cc:0f:0c:f0:44:ca:5e:3e:26:
aa:41:42:80:99:7c:5c:40:34:48:8e:76:fc:76:0b:66:c9:11:
58:a9:36:c7:55:c1:ce:55:c4:90:6b:87:75:2f:f7:4b:c8:58:
da:d9:90:5c:c1:f5:c1:0c:e0:26:70:1d:85:07:39:b3:66:89:
58:82:be:6d:ca:c3:41:74:fb:f2:d2:30:48:20:74:9a:5f:d1:
f6:84:0f:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiE89QOdBwFFcb9OK5Abj/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjMwNjA0MDU0OTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAyMTBhMWIyYTAyMTI0ODVmODg4ODhjZTc5Mjg0ZmY2OTJmMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH4yZBT7utHhhpYYjAcP5JfFP9M2
xISaOA8IrO/P9yFHHl9MxEgTdI5Bq6LvfKxWrX7ZUuhkS2QEzwGswGjkWPvzsckM
zKSzI6pmLWPcw0lhwn5dTSX7ZwxukNrPYfFy139aKnG5oPeA4dtOAtuWxOKk0WMa
qKf7z0aWabfqX+n5vdDgq9OVCfjySlfJOHb+0VU0gg5/0NWqcM34Wv6VVBZPWpn6
SpCQhBSrgJfTDqNGumC76KuPO9wGt2mha8fiGCiwpRC1rg2WhH9MBtUYM/mhc0AS
FxTFQB4hhN3Z0ZZrVZNYorhK6gKX1mmyRTuXcC6eN8aNFbFtTC98wEBM9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFECEKGyoCEkhfiIiM55KE/2kvEbMB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvVVFJUW9iS2dJU1NGLUlpSXpua29UX2FTOFJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW234MA0G
CSqGSIb3DQEBCwUAA4IBAQDAsgnG3eTzww7ap5xY5tL1zYshw0Iq2TxQsKkNFuWv
0KvpUrNL4nUZx+xtEYQeB8a0xGnN4otgxepu9ae9rs2N0z4udLJmvpwAd9HxlZko
iOmzSZsa4/YY1liHz8/IOfQmVCgB+hbOTTW/vkXzd90IVSkcZWpojzGH3frx85IY
/tFP2R2ifaRD7LVcNg/UCreFAL2ns2uo/ZYIzKd0Yk5RP++HAfDQHjWhRjjMDwzw
RMpePiaqQUKAmXxcQDRIjnb8dgtmyRFYqTbHVcHOVcSQa4d1L/dLyFja2ZBcwfXB
DOAmcB2FBzmzZolYgr5tysNBdPvy0jBIIHSaX9H2hA81
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org