Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/_aUMuundZce8GOcXzWGboy8JpqA.roa
File: _aUMuundZce8GOcXzWGboy8JpqA.roa (raw, json)
Hash identifier: PiwMgb09dR+Au+O5Xo1JQkxj1AZxeEzTg0ZkQXBxOos=
Subject key identifier: FD:A5:0C:BA:E9:DD:65:C7:BC:18:E7:17:CD:61:9B:A3:2F:09:A6:A0
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 018573F1BDC8B9896C921B1C7C20B6609DAD
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/_aUMuundZce8GOcXzWGboy8JpqA.roa
Signing time: Mon 02 Jan 2023 19:25:00 +0000
ROA not before: Mon 02 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213134
IP address blocks: 91.201.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:bd:c8:b9:89:6c:92:1b:1c:7c:20:b6:60:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jan 2 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda50cbae9dd65c7bc18e717cd619ba32f09a6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:55:b7:bf:98:98:8c:00:88:5a:19:8a:e6:
f1:c4:93:c7:11:8d:d1:03:0d:bb:33:5a:0c:ec:76:
67:f3:68:c9:19:53:3d:b8:51:85:f3:b4:d6:fb:88:
d5:8d:f2:ee:4b:f2:4b:3f:62:4c:72:43:1d:92:00:
65:c6:e8:68:27:77:08:b6:99:42:56:c9:f6:34:55:
a1:3a:0f:e7:c1:c5:9b:fc:d0:d0:7c:fa:f0:b5:e3:
28:0d:37:9d:02:21:36:b7:8a:ae:75:68:5c:93:2d:
fc:b6:ee:9c:d9:3a:00:22:f0:b6:ce:ad:7c:c8:31:
cd:03:65:c4:93:32:2a:3a:87:41:41:4f:2c:b1:72:
76:31:85:3d:c4:ff:66:51:c1:08:4d:ec:90:fc:cf:
93:85:cc:8a:f3:53:ff:62:c3:4f:76:66:24:0b:12:
b5:3a:0f:56:04:fe:61:b5:a0:26:9a:bc:27:25:00:
0d:d9:95:de:e3:14:50:09:c4:bb:4a:c9:0f:4d:be:
5d:d7:8b:ce:32:cf:91:41:7c:8b:63:ed:f2:0e:7e:
e3:a8:9b:00:c6:3a:14:67:60:62:05:49:51:04:4d:
7d:de:bd:d1:bc:01:b5:be:87:60:73:6e:c1:0c:e2:
48:d3:5a:b1:9e:cf:e4:fc:c9:b9:60:7f:c9:53:36:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:0C:BA:E9:DD:65:C7:BC:18:E7:17:CD:61:9B:A3:2F:09:A6:A0
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/_aUMuundZce8GOcXzWGboy8JpqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d7:97:6b:a8:0f:7b:7a:9b:8d:b8:8f:27:40:53:44:53:36:
6d:87:df:d2:48:fd:e1:93:02:88:da:7f:d8:49:c2:c9:61:fc:
a4:08:86:4f:2b:81:1b:ac:02:93:5e:9a:4a:17:5a:88:9b:70:
49:be:f3:52:0b:fa:6f:53:6e:14:3f:51:2a:ed:8c:69:b0:dc:
2a:8f:f3:d3:44:04:b4:33:64:fc:d3:96:9f:5a:99:48:22:96:
36:59:4b:39:9e:dd:af:f5:2b:1d:a7:53:83:1c:12:52:a0:71:
63:f8:76:2a:20:dc:d4:6c:2c:e6:41:31:60:9b:ad:f4:db:cc:
43:73:e8:60:57:fc:e5:7a:ba:73:ff:18:4b:db:f3:4a:bf:d7:
ce:98:c0:a1:d7:6e:91:b6:47:d5:9e:f8:b3:91:67:20:27:18:
60:bf:5d:f1:6a:3b:a7:55:f4:09:05:8c:3e:30:7c:fa:df:52:
c1:3a:d6:c3:d9:2a:21:20:04:60:c0:b4:7f:0f:0e:c0:92:41:
61:36:9a:13:7a:93:c7:6a:b8:e0:a8:a9:ae:9b:8d:42:61:fe:
f2:87:af:1b:1b:94:4b:ed:01:86:b7:0c:ac:42:d5:39:ce:94:
da:90:3d:7e:30:ad:11:e6:c3:a5:0f:d9:ce:b3:d6:05:fc:14:
e2:5c:bc:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVz8b3IuYlskhscfCC2YJ2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz
NTU5Y2YwHhcNMjMwMTAyMTkyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGE1MGNiYWU5ZGQ2NWM3YmMxOGU3MTdjZDYxOWJhMzJmMDlhNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiphVt7+YmIwAiFoZiubxxJPHEY3R
Aw27M1oM7HZn82jJGVM9uFGF87TW+4jVjfLuS/JLP2JMckMdkgBlxuhoJ3cItplC
Vsn2NFWhOg/nwcWb/NDQfPrwteMoDTedAiE2t4qudWhcky38tu6c2ToAIvC2zq18
yDHNA2XEkzIqOodBQU8ssXJ2MYU9xP9mUcEITeyQ/M+ThcyK81P/YsNPdmYkCxK1
Og9WBP5htaAmmrwnJQAN2ZXe4xRQCcS7SskPTb5d14vOMs+RQXyLY+3yDn7jqJsA
xjoUZ2BiBUlRBE193r3RvAG1vodgc27BDOJI01qxns/k/Mm5YH/JUzZEmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2lDLrp3WXHvBjnF81hm6MvCaagMB8GA1UdIwQY
MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt
YmFmMjRkZDU4MzlmLzEvX2FVTXV1bmRaY2U4R09jWHpXR2JveThKcHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm
LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8nEMA0G
CSqGSIb3DQEBCwUAA4IBAQCS15drqA97epuNuI8nQFNEUzZth9/SSP3hkwKI2n/Y
ScLJYfykCIZPK4EbrAKTXppKF1qIm3BJvvNSC/pvU24UP1Eq7YxpsNwqj/PTRAS0
M2T805afWplIIpY2WUs5nt2v9Ssdp1ODHBJSoHFj+HYqINzUbCzmQTFgm63028xD
c+hgV/zlerpz/xhL2/NKv9fOmMCh126RtkfVnvizkWcgJxhgv13xajunVfQJBYw+
MHz631LBOtbD2SohIARgwLR/Dw7AkkFhNpoTepPHarjgqKmum41CYf7yh68bG5RL
7QGGtwysQtU5zpTakD1+MK0R5sOlD9nOs9YF/BTiXLxV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-fra.rpki-client.org