Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/63U9EibaDBka1GXHZOEbdOIsHms.roa
File: 63U9EibaDBka1GXHZOEbdOIsHms.roa (raw, json)
Hash identifier: uiD8zEcNya3fdFbUIoqbODmdgtr8cVWlIXlsAhG5nQw=
Subject key identifier: EB:75:3D:12:26:DA:0C:19:1A:D4:65:C7:64:E1:1B:74:E2:2C:1E:6B
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 0192191A05614540B35377687D9B889EEEF1
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/63U9EibaDBka1GXHZOEbdOIsHms.roa
Signing time: Sun 22 Sep 2024 09:39:48 +0000
ROA not before: Sun 22 Sep 2024 09:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41152
IP address blocks: 91.227.246.0/23 maxlen: 23
193.148.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Oct 2024 06:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:19:1a:05:61:45:40:b3:53:77:68:7d:9b:88:9e:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Sep 22 09:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb753d1226da0c191ad465c764e11b74e22c1e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:5d:48:0d:0e:12:e5:d7:29:aa:d8:c5:ad:
ff:82:f0:ae:ee:d0:c7:28:f7:8f:5c:60:7c:6e:d1:
b6:b9:51:df:8a:83:90:93:e8:26:25:e4:79:9e:ee:
83:a5:f9:52:30:db:a9:45:77:0c:39:b7:d9:2d:6d:
3f:cb:6d:74:ad:84:e5:c4:8d:91:a6:ff:e7:61:40:
0e:0e:2b:a7:fc:35:03:8c:df:49:57:93:d5:1e:03:
00:2a:59:b1:f3:c4:29:d6:65:c6:e7:f7:d1:02:24:
7f:12:b7:dd:1f:e3:78:3d:9a:d6:e5:00:8d:c3:7e:
d2:09:d9:19:24:41:3d:0f:4e:bc:83:51:a8:6a:10:
37:e6:66:7d:f0:ab:67:f6:b3:c7:a1:ca:cd:1b:ad:
7c:ab:0a:89:d9:c2:5f:3f:f2:f3:67:d8:a8:eb:b7:
e5:e1:82:13:8b:2d:64:0c:2d:09:db:42:c7:9c:26:
b3:ea:07:ef:7b:bf:8f:d5:b7:52:56:81:26:15:20:
06:61:6d:f2:66:ac:93:68:e2:39:15:72:11:8e:09:
25:d0:88:d5:0f:57:ea:29:99:80:de:b7:a8:30:d2:
b2:52:da:df:aa:2f:f4:00:32:fd:da:30:e7:4f:58:
cf:b1:ac:d0:12:4d:40:62:8b:72:ee:9f:8c:bb:0e:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:3D:12:26:DA:0C:19:1A:D4:65:C7:64:E1:1B:74:E2:2C:1E:6B
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/63U9EibaDBka1GXHZOEbdOIsHms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
193.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:69:ac:1b:e3:61:5d:3a:4c:f5:82:e1:9d:25:a2:6e:e3:8e:
65:f4:1a:b1:71:a9:53:60:c4:20:72:a5:87:09:62:bb:81:b6:
c0:d6:fb:5b:b5:11:78:13:76:b7:13:be:b3:75:b0:79:2e:d9:
38:f0:ac:d9:92:62:82:01:49:e8:f7:c7:5b:92:fd:0b:5c:74:
e8:ac:bf:c0:30:44:fe:31:a6:10:4b:4e:31:ff:1d:1f:57:79:
fe:39:b8:ae:2e:99:54:5c:ee:cb:d9:1d:49:aa:ff:28:2e:b4:
84:21:1c:52:69:6f:49:8b:a2:ca:56:c4:ea:a7:36:68:cf:35:
37:fc:0a:5f:e1:b9:52:29:02:a4:59:47:78:ef:4e:78:52:fe:
1d:34:2b:6d:7e:3a:89:53:9d:39:29:45:22:f9:a5:02:1f:28:
ab:e4:40:35:73:e0:26:e0:4c:a7:bb:13:17:6e:60:ee:0e:e0:
65:57:09:d6:3c:4b:f8:c9:d4:b3:a0:41:b8:e9:fc:ce:44:bb:
df:ff:d1:d0:66:7a:b3:da:b1:5c:b8:31:8a:87:29:04:63:03:
0a:5f:6a:4a:0f:f1:21:9d:52:87:58:9e:da:f8:aa:8a:ea:bf:
26:6c:59:18:a2:b2:05:3b:bc:e2:c9:c1:b6:67:61:4e:eb:8a:
89:23:20:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIZGgVhRUCzU3dofZuInu7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx
Yjk5YzMwHhcNMjQwOTIyMDkzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjc1M2QxMjI2ZGEwYzE5MWFkNDY1Yzc2NGUxMWI3NGUyMmMxZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiVdSA0OEuXXKarYxa3/gvCu7tDH
KPePXGB8btG2uVHfioOQk+gmJeR5nu6DpflSMNupRXcMObfZLW0/y210rYTlxI2R
pv/nYUAODiun/DUDjN9JV5PVHgMAKlmx88Qp1mXG5/fRAiR/ErfdH+N4PZrW5QCN
w37SCdkZJEE9D068g1GoahA35mZ98Ktn9rPHocrNG618qwqJ2cJfP/LzZ9io67fl
4YITiy1kDC0J20LHnCaz6gfve7+P1bdSVoEmFSAGYW3yZqyTaOI5FXIRjgkl0IjV
D1fqKZmA3reoMNKyUtrfqi/0ADL92jDnT1jPsazQEk1AYoty7p+Muw4khQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOt1PRIm2gwZGtRlx2ThG3TiLB5rMB8GA1UdIwQY
MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvNjNVOUVpYmFEQmthMUdYSFpPRWJkT0lzSG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+P2AwQC
wZRAMA0GCSqGSIb3DQEBCwUAA4IBAQC/aawb42FdOkz1guGdJaJu445l9BqxcalT
YMQgcqWHCWK7gbbA1vtbtRF4E3a3E76zdbB5Ltk48KzZkmKCAUno98dbkv0LXHTo
rL/AMET+MaYQS04x/x0fV3n+ObiuLplUXO7L2R1Jqv8oLrSEIRxSaW9Ji6LKVsTq
pzZozzU3/Apf4blSKQKkWUd47054Uv4dNCttfjqJU505KUUi+aUCHyir5EA1c+Am
4EynuxMXbmDuDuBlVwnWPEv4ydSzoEG46fzORLvf/9HQZnqz2rFcuDGKhykEYwMK
X2pKD/EhnVKHWJ7a+KqK6r8mbFkYorIFO7ziycG2Z2FO64qJIyDl
-----END CERTIFICATE-----
Generated at Wed Oct 23 08:09:49 2024 by rpki-client on console-fra.rpki-client.org