Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/wNtbEvO6J3FYv_AC-Jdpg-z8k20.roa
File: wNtbEvO6J3FYv_AC-Jdpg-z8k20.roa (raw, json)
Hash identifier: oADE6ObiK5zxldal3lLWEmX4OBljESwNYtFV6vm0IGA=
Subject key identifier: C0:DB:5B:12:F3:BA:27:71:58:BF:F0:02:F8:97:69:83:EC:FC:93:6D
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 018573F1BD4A4451B73297B814EB307556A5
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/wNtbEvO6J3FYv_AC-Jdpg-z8k20.roa
Signing time: Mon 02 Jan 2023 19:25:00 +0000
ROA not before: Mon 02 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 91.195.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:bd:4a:44:51:b7:32:97:b8:14:eb:30:75:56:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jan 2 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0db5b12f3ba277158bff002f8976983ecfc936d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:16:5c:7d:b9:a1:07:7d:e9:9c:8d:26:df:
3a:83:08:6e:91:53:fe:4c:2a:ee:75:92:3b:47:c3:
6f:e2:23:b4:55:79:68:9f:7e:68:f6:1f:00:f4:25:
ed:85:c9:6d:f4:25:0b:40:5d:3d:9e:45:57:a3:07:
83:23:d7:f4:fc:12:ae:f8:00:83:d3:96:24:dc:a2:
cd:fa:5d:8a:29:f1:cd:27:a4:02:da:fe:5e:ae:6e:
0d:b7:fd:4e:b8:95:71:d2:d8:ab:9f:ae:3f:ae:a1:
47:01:23:c1:54:58:7f:ae:11:69:80:86:8a:b7:49:
8a:be:15:ef:92:c5:6f:32:85:2c:95:92:b1:9c:69:
df:ff:c3:24:92:e2:4b:24:e4:1b:52:43:55:5a:5d:
3d:5f:cf:b0:87:d1:74:78:27:c9:70:42:69:82:2c:
47:a4:dd:c4:66:9b:80:3d:2d:d0:ea:82:32:ba:15:
35:50:87:6f:d4:b3:f9:c7:0d:51:96:90:61:e8:cd:
19:c2:14:be:64:1b:26:5d:d5:25:e5:17:4c:d2:aa:
17:33:23:ae:87:93:85:5d:25:3f:13:94:7b:fd:4c:
ae:8c:8b:1d:ce:6c:c1:31:9b:49:82:eb:06:4c:63:
bb:7f:a3:2b:43:34:f6:c2:92:ab:98:3d:b1:70:b8:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:5B:12:F3:BA:27:71:58:BF:F0:02:F8:97:69:83:EC:FC:93:6D
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/wNtbEvO6J3FYv_AC-Jdpg-z8k20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6e:04:f1:57:b6:fc:bd:6d:67:67:0b:15:7b:a4:4d:bf:98:
be:39:ea:ad:0e:6d:41:ce:3c:0c:ed:bb:8c:3e:4d:6d:b0:bd:
e7:d4:5e:c4:88:50:1d:61:38:d9:b5:3e:5b:83:c8:8a:d2:54:
74:8d:31:9e:e6:63:f4:d8:12:26:dc:99:37:ba:f4:f8:f2:58:
aa:b1:93:7f:32:4d:c2:2f:fb:fb:58:c1:dc:b9:e4:1a:43:df:
bf:b3:48:86:cb:8d:1c:77:91:35:89:95:76:e3:13:b8:ad:c3:
54:4c:a0:88:04:76:1c:e8:4c:a5:7e:25:73:42:76:4b:e1:9c:
b9:0b:e5:99:cf:22:e4:fa:bd:62:d7:5a:8d:c5:34:36:b1:f1:
51:47:8c:81:6e:0e:2f:45:40:7e:57:17:ed:ea:20:85:e8:52:
d2:42:0b:9c:18:99:f6:dc:39:e5:fa:d9:c1:7e:a4:4c:9c:d3:
9d:00:5a:82:da:23:26:bd:96:2f:27:65:df:97:a6:fc:25:f1:
8f:41:fe:dd:20:c7:65:30:c2:e2:ab:5c:60:09:36:19:43:09:
5d:54:ae:11:f7:04:03:ed:e2:b6:48:36:77:2b:7a:6b:fb:f7:
3c:83:93:a3:93:3d:5b:c6:f6:7a:d8:44:2c:ad:05:32:5d:0f:
8b:90:4d:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVz8b1KRFG3Mpe4FOswdValMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz
NTU5Y2YwHhcNMjMwMTAyMTkyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGRiNWIxMmYzYmEyNzcxNThiZmYwMDJmODk3Njk4M2VjZmM5MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAYWXH25oQd96ZyNJt86gwhukVP+
TCrudZI7R8Nv4iO0VXlon35o9h8A9CXthclt9CULQF09nkVXoweDI9f0/BKu+ACD
05Yk3KLN+l2KKfHNJ6QC2v5erm4Nt/1OuJVx0tirn64/rqFHASPBVFh/rhFpgIaK
t0mKvhXvksVvMoUslZKxnGnf/8MkkuJLJOQbUkNVWl09X8+wh9F0eCfJcEJpgixH
pN3EZpuAPS3Q6oIyuhU1UIdv1LP5xw1RlpBh6M0ZwhS+ZBsmXdUl5RdM0qoXMyOu
h5OFXSU/E5R7/UyujIsdzmzBMZtJgusGTGO7f6MrQzT2wpKrmD2xcLgP1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDbWxLzuidxWL/wAviXaYPs/JNtMB8GA1UdIwQY
MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt
YmFmMjRkZDU4MzlmLzEvd050YkV2TzZKM0ZZdl9BQy1KZHBnLXo4azIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm
LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8NuMA0G
CSqGSIb3DQEBCwUAA4IBAQC7bgTxV7b8vW1nZwsVe6RNv5i+OeqtDm1BzjwM7buM
Pk1tsL3n1F7EiFAdYTjZtT5bg8iK0lR0jTGe5mP02BIm3Jk3uvT48liqsZN/Mk3C
L/v7WMHcueQaQ9+/s0iGy40cd5E1iZV24xO4rcNUTKCIBHYc6EylfiVzQnZL4Zy5
C+WZzyLk+r1i11qNxTQ2sfFRR4yBbg4vRUB+Vxft6iCF6FLSQgucGJn23Dnl+tnB
fqRMnNOdAFqC2iMmvZYvJ2Xfl6b8JfGPQf7dIMdlMMLiq1xgCTYZQwldVK4R9wQD
7eK2SDZ3K3pr+/c8g5Ojkz1bxvZ62EQsrQUyXQ+LkE2o
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:55 2024 by rpki-client on console-ams.rpki-client.org