Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/viWm5yKevGhzY3Xbt5xdY2FkbUg.roa
File: viWm5yKevGhzY3Xbt5xdY2FkbUg.roa (raw, json)
Hash identifier: qQRnwdXeMhRhAK68G+9J5dlGgWbrA1X4JNlJam1nt2c=
Subject key identifier: BE:25:A6:E7:22:9E:BC:68:73:63:75:DB:B7:9C:5D:63:61:64:6D:48
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 018CBE9B9D8563D548076B041CE54C1D39A0
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/viWm5yKevGhzY3Xbt5xdY2FkbUg.roa
Signing time: Sun 31 Dec 2023 06:41:58 +0000
ROA not before: Sun 31 Dec 2023 06:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207558
IP address blocks: 91.224.171.0/24 maxlen: 24
91.196.229.0/24 maxlen: 24
91.196.228.0/24 maxlen: 24
91.196.231.0/24 maxlen: 24
91.196.230.0/24 maxlen: 24
2a0f:d840::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 31 Dec 2023 08:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:9b:9d:85:63:d5:48:07:6b:04:1c:e5:4c:1d:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Dec 31 06:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be25a6e7229ebc68736375dbb79c5d6361646d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c6:c4:01:c2:a6:18:6e:e0:c0:10:7b:38:dd:
b7:83:79:9d:d2:76:08:9c:94:69:53:82:a9:34:dc:
0f:55:c3:f4:09:7c:38:3d:78:ea:d5:e0:17:5c:91:
a9:30:dc:d5:6a:bd:28:97:38:11:3e:29:3e:76:30:
9f:d2:2a:e7:83:4b:4e:6e:c1:1c:d5:93:ff:25:19:
04:26:68:e3:9f:2d:b6:0f:eb:e4:f9:00:5e:1b:4f:
0b:81:fc:83:09:f9:c7:9d:60:74:ba:1b:b4:45:87:
ea:80:b4:bf:5f:49:44:2e:f8:ee:cb:f9:cb:a2:32:
2c:16:d8:b8:16:96:ea:ea:cf:05:56:b3:7d:30:99:
8a:dc:38:ea:25:be:6f:c6:5d:6f:32:1d:ce:ec:37:
f7:27:f6:21:0b:68:72:e6:cd:ac:d9:31:54:b3:52:
60:a9:64:ab:40:fa:01:e6:cf:7c:92:ce:6c:66:f5:
23:e2:f9:b2:27:c0:ff:8d:87:b9:26:60:5b:67:ec:
4d:0e:d0:90:6b:21:00:c4:77:0b:88:b7:b8:f2:aa:
00:7a:06:3a:bf:d5:3e:27:1c:c0:a6:fa:81:5b:51:
60:82:2d:f0:c1:71:36:c9:b1:03:81:14:67:dc:1b:
14:0a:92:18:54:5b:34:c4:2c:84:28:c4:4b:e6:83:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:A6:E7:22:9E:BC:68:73:63:75:DB:B7:9C:5D:63:61:64:6D:48
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/viWm5yKevGhzY3Xbt5xdY2FkbUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.228.0/22
91.224.171.0/24
IPv6:
2a0f:d840::/29
Signature Algorithm: sha256WithRSAEncryption
49:50:ae:4f:7c:7c:d5:34:56:76:d0:4c:ee:9f:13:f2:22:ea:
a6:ea:8e:e5:a5:6e:e2:c4:80:ae:70:3f:8c:3f:cd:6c:c1:a3:
65:99:d4:45:75:4c:82:44:86:02:36:b3:30:1b:91:0d:f1:af:
8b:99:92:13:18:58:7d:07:12:43:14:88:cb:97:f7:67:9a:2d:
f5:b9:de:cb:21:2d:d5:b5:cc:43:cd:15:cb:d1:ca:7d:da:f8:
65:81:ee:06:d0:02:af:5f:56:4f:7a:94:69:36:b1:b4:80:8b:
99:a4:e9:07:1d:ef:b8:b7:16:9e:78:22:32:0a:5b:52:ff:ba:
b4:0a:d7:9b:4f:1d:57:82:14:f4:69:cc:bb:f4:c9:a0:e3:b6:
71:23:d3:de:2c:d1:37:6e:25:3a:ab:e2:cd:f0:f7:e2:87:33:
b8:b3:17:31:12:44:da:96:f3:9e:0e:d7:f2:4b:c2:8a:97:07:
6d:9f:be:36:3e:80:89:3c:cf:19:8f:82:14:0f:93:7f:06:29:
77:ab:4d:01:a0:22:c7:ce:83:a5:a1:55:80:4a:5c:a5:5a:4c:
41:ef:1c:9d:5f:e4:30:74:e7:0e:b8:2e:35:26:69:20:ef:49:
31:1c:43:5a:b6:b5:16:e4:8b:f5:ea:5a:46:fb:53:77:35:0e:
28:b1:ae:7a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYy+m52FY9VIB2sEHOVMHTmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0
Zjc0M2QwHhcNMjMxMjMxMDY0MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTI1YTZlNzIyOWViYzY4NzM2Mzc1ZGJiNzljNWQ2MzYxNjQ2ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicbEAcKmGG7gwBB7ON23g3md0nYI
nJRpU4KpNNwPVcP0CXw4PXjq1eAXXJGpMNzVar0olzgRPik+djCf0irng0tObsEc
1ZP/JRkEJmjjny22D+vk+QBeG08LgfyDCfnHnWB0uhu0RYfqgLS/X0lELvjuy/nL
ojIsFti4Fpbq6s8FVrN9MJmK3DjqJb5vxl1vMh3O7Df3J/YhC2hy5s2s2TFUs1Jg
qWSrQPoB5s98ks5sZvUj4vmyJ8D/jYe5JmBbZ+xNDtCQayEAxHcLiLe48qoAegY6
v9U+JxzApvqBW1Fggi3wwXE2ybEDgRRn3BsUCpIYVFs0xCyEKMRL5oM2kQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFL4lpucinrxoc2N127ecXWNhZG1IMB8GA1UdIwQY
MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt
NWEyMDZlOGIxMzY5LzEvdmlXbTV5S2V2R2h6WTNYYnQ1eGRZMkZrYlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5
LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8TkAwQA
W+CrMA0EAgACMAcDBQMqD9hAMA0GCSqGSIb3DQEBCwUAA4IBAQBJUK5PfHzVNFZ2
0EzunxPyIuqm6o7lpW7ixICucD+MP81swaNlmdRFdUyCRIYCNrMwG5EN8a+LmZIT
GFh9BxJDFIjLl/dnmi31ud7LIS3VtcxDzRXL0cp92vhlge4G0AKvX1ZPepRpNrG0
gIuZpOkHHe+4txaeeCIyCltS/7q0CtebTx1XghT0acy79Mmg47ZxI9PeLNE3biU6
q+LN8PfihzO4sxcxEkTalvOeDtfyS8KKlwdtn742PoCJPM8Zj4IUD5N/Bil3q00B
oCLHzoOloVWASlylWkxB7xydX+QwdOcOuC41Jmkg70kxHENatrUW5Iv16lpG+1N3
NQ4osa56
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:55 2024 by rpki-client on console-fra.rpki-client.org