Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/WRZyiI8kxeRPe3fQn8PVqN10ncY.roa
File: WRZyiI8kxeRPe3fQn8PVqN10ncY.roa (raw, json)
Hash identifier: eH7s9mZTrceacqOJnCZAFAMHoS2Y9Ht+CSR8Ywb4V4U=
Subject key identifier: 59:16:72:88:8F:24:C5:E4:4F:7B:77:D0:9F:C3:D5:A8:DD:74:9D:C6
Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial: 01856D5CF85D02E1FD9009A980E800EA7862
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/WRZyiI8kxeRPe3fQn8PVqN10ncY.roa
Signing time: Sun 01 Jan 2023 12:44:47 +0000
ROA not before: Sun 01 Jan 2023 12:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198512
IP address blocks: 91.235.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f8:5d:02:e1:fd:90:09:a9:80:e8:00:ea:78:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Validity
Not Before: Jan 1 12:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=591672888f24c5e44f7b77d09fc3d5a8dd749dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:90:76:1b:2d:b6:e3:27:74:05:cd:bd:a7:
18:08:20:e5:b8:41:b0:bc:86:42:f2:2f:60:0c:d6:
3e:78:8c:fa:72:99:a1:3a:88:26:d3:3b:d7:c4:b8:
c1:f5:05:9e:c0:90:04:e2:45:f7:b7:d5:a2:b5:14:
57:b8:a5:dd:3b:0c:e9:cb:c5:d7:8c:4b:5c:2b:39:
02:88:dc:16:fe:15:55:5a:cf:52:7f:a6:f3:c5:bd:
9c:06:33:03:45:8c:30:e9:7e:0a:90:2e:03:f3:a1:
f5:71:12:ec:34:53:94:7f:50:c9:ec:fc:aa:04:aa:
60:79:b5:d8:57:02:cc:24:1b:0b:63:64:3e:d4:68:
21:ee:33:b9:7b:b2:c8:3f:80:5e:c2:4e:0b:6e:6b:
73:de:28:03:a6:4b:11:ff:f9:9a:ea:ff:05:b4:11:
09:06:e0:e5:c4:d3:b1:ab:80:60:02:4c:51:bd:fa:
36:6d:0e:ee:5e:79:be:98:66:c5:23:21:34:fa:38:
9c:83:26:e4:e3:04:0e:9e:06:01:18:89:f5:d8:6b:
23:c9:2a:0e:67:72:eb:ea:c2:f9:8f:ca:fa:ac:a8:
bd:52:2f:da:ae:cc:0a:b6:e3:03:57:55:41:de:1f:
43:88:58:c6:ac:44:d9:ba:80:ed:0b:2e:c6:64:cc:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:16:72:88:8F:24:C5:E4:4F:7B:77:D0:9F:C3:D5:A8:DD:74:9D:C6
X509v3 Authority Key Identifier:
keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/WRZyiI8kxeRPe3fQn8PVqN10ncY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.243.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1a:67:ef:1c:da:0a:bb:61:2c:85:45:32:18:2f:55:45:5d:
26:59:14:9a:34:8d:28:e4:69:6c:1e:bf:fa:33:da:d9:c1:60:
5a:9a:6f:19:b5:4b:e0:bc:0f:5d:70:10:77:f7:61:a7:92:97:
56:0e:4d:c6:5d:3e:4d:3e:a2:12:ea:d4:3d:8c:81:93:6d:a6:
15:18:43:46:16:20:df:62:66:cf:9b:9f:21:21:51:12:9f:8a:
13:73:9d:ab:a4:aa:ad:b9:0b:f9:a2:f0:5c:b7:d9:cb:1d:5b:
73:dc:d5:03:90:2b:d4:88:da:ed:18:43:f8:e7:f2:38:bd:20:
cf:00:63:be:97:cd:27:2d:3e:d1:c4:92:f2:8e:5d:7d:3a:f2:
5e:1d:f8:7a:34:2b:05:66:96:d3:7c:ad:d3:b6:eb:4e:db:ff:
da:be:7e:04:72:17:3e:bb:16:14:26:61:9a:12:df:31:74:40:
7f:4a:a7:59:dd:3d:ed:27:45:b6:27:45:a3:8a:2f:81:3d:1e:
4c:59:88:d5:e5:17:df:d6:30:0b:ea:f1:07:8d:39:80:37:02:
5d:3f:a6:e2:b3:ce:fb:22:45:bd:38:3f:48:d0:39:1a:21:3d:
43:4e:36:42:da:f1:81:6b:3b:f6:68:8a:aa:b3:24:ce:f4:80:
e7:a2:35:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXPhdAuH9kAmpgOgA6nhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTVlYWUzMGQxMGZhZjFkOTllYmYyY2ZkZmQ2NjJjZTc0
MGY4MzkwHhcNMjMwMTAxMTI0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTE2NzI4ODhmMjRjNWU0NGY3Yjc3ZDA5ZmMzZDVhOGRkNzQ5ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N2QdhsttuMndAXNvacYCCDluEGw
vIZC8i9gDNY+eIz6cpmhOogm0zvXxLjB9QWewJAE4kX3t9WitRRXuKXdOwzpy8XX
jEtcKzkCiNwW/hVVWs9Sf6bzxb2cBjMDRYww6X4KkC4D86H1cRLsNFOUf1DJ7Pyq
BKpgebXYVwLMJBsLY2Q+1Ggh7jO5e7LIP4Bewk4Lbmtz3igDpksR//ma6v8FtBEJ
BuDlxNOxq4BgAkxRvfo2bQ7uXnm+mGbFIyE0+jicgybk4wQOngYBGIn12GsjySoO
Z3Lr6sL5j8r6rKi9Ui/arswKtuMDV1VB3h9DiFjGrETZuoDtCy7GZMwl0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkWcoiPJMXkT3t30J/D1ajddJ3GMB8GA1UdIwQY
MBaAFBBV6uMNEPrx2Z6/LP39ZiznQPg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQt
MjczZTg2OGNlZGYwLzEvV1JaeWlJOGt4ZVJQZTNmUW44UFZxTjEwbmNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQtMjczZTg2OGNlZGYw
LzEvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vzMA0G
CSqGSIb3DQEBCwUAA4IBAQCBGmfvHNoKu2EshUUyGC9VRV0mWRSaNI0o5GlsHr/6
M9rZwWBamm8ZtUvgvA9dcBB392GnkpdWDk3GXT5NPqIS6tQ9jIGTbaYVGENGFiDf
YmbPm58hIVESn4oTc52rpKqtuQv5ovBct9nLHVtz3NUDkCvUiNrtGEP45/I4vSDP
AGO+l80nLT7RxJLyjl19OvJeHfh6NCsFZpbTfK3TtutO2//avn4Echc+uxYUJmGa
Et8xdEB/SqdZ3T3tJ0W2J0Wjii+BPR5MWYjV5Rff1jAL6vEHjTmANwJdP6bis877
IkW9OD9I0DkaIT1DTjZC2vGBazv2aIqqsyTO9IDnojVa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:59 2024 by rpki-client on console-ams.rpki-client.org