Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/v6X3NgMP111S8lLnC6sVibRJmNA.roa
File: v6X3NgMP111S8lLnC6sVibRJmNA.roa (raw, json)
Hash identifier: epWaa3r6Zip6VoOLYDmYC3GA3LChQj9qOUU/1q+Qr4Q=
Subject key identifier: BF:A5:F7:36:03:0F:D7:5D:52:F2:52:E7:0B:AB:15:89:B4:49:98:D0
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 018CC94E499908C0C4358B709253B900E33D
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/v6X3NgMP111S8lLnC6sVibRJmNA.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197895
IP address blocks: 91.228.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:49:99:08:c0:c4:35:8b:70:92:53:b9:00:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfa5f736030fd75d52f252e70bab1589b44998d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:48:44:59:58:74:42:d6:ff:0c:d7:8b:dd:
c9:fc:f8:fa:7b:26:c2:fd:bc:66:b4:9d:73:fb:87:
6e:be:bd:04:90:d4:41:8a:f7:9e:10:45:f5:f4:80:
ef:37:23:4f:ce:12:13:d7:b6:63:0e:00:89:09:f3:
a5:a5:b8:1f:c7:83:dd:40:7e:74:e4:aa:7e:3c:08:
3b:50:7a:a2:4f:1c:0e:00:4e:46:84:f3:87:f8:08:
61:52:80:38:5c:73:61:7b:ca:d1:e7:ea:e2:bf:b4:
a5:b7:72:63:63:6c:bd:1a:5e:ca:2e:ed:ee:40:00:
92:f2:85:70:f9:e9:8d:0f:e7:4d:12:2a:59:7e:07:
58:6b:5a:62:97:33:7f:58:81:76:6b:5b:d0:15:e4:
11:e2:be:a5:da:8f:b9:6c:a0:86:4a:28:4e:73:3e:
fa:aa:df:2b:bf:f2:a9:63:37:a7:ae:ba:c4:ee:18:
a0:88:e7:80:7b:81:36:d8:1e:23:c6:df:11:93:45:
7f:24:1d:68:02:df:3b:c4:4d:40:85:39:ff:f1:81:
1f:7c:da:6d:f7:de:54:4b:ce:35:1f:2d:c4:6b:8e:
04:c1:33:39:be:0d:a0:37:08:43:c4:2c:52:85:6c:
71:62:e7:4d:d4:65:eb:73:c1:9b:1f:7c:c5:3c:0c:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A5:F7:36:03:0F:D7:5D:52:F2:52:E7:0B:AB:15:89:B4:49:98:D0
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/v6X3NgMP111S8lLnC6sVibRJmNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:00:98:db:21:a9:96:18:08:3b:b3:d3:05:73:47:3d:58:46:
05:7b:de:78:d0:70:24:c7:9b:76:81:a0:19:3b:aa:b4:41:8d:
cd:b4:10:ac:c0:d5:0a:b0:34:f7:ab:ea:b3:da:7e:45:0b:d7:
a5:b0:e4:35:a5:91:41:f9:2b:1c:00:16:3a:54:fe:f2:c9:be:
ed:50:4f:f2:e5:c6:84:65:44:1a:16:f8:70:a0:30:e1:e9:b5:
92:84:8f:ae:a5:a1:aa:58:5b:5f:6c:3a:aa:63:9d:78:84:66:
26:48:58:3c:c9:30:a1:16:10:17:72:f1:ee:6a:c5:1d:47:bc:
23:90:78:3c:8d:19:31:9b:63:77:dc:e9:99:b4:6a:3f:ee:b4:
33:98:ec:de:6a:8a:46:fb:17:10:ef:97:e1:f7:ff:47:14:4f:
03:3b:c3:70:53:9f:19:9c:47:3c:3c:87:0b:3a:13:5d:13:75:
88:79:a5:b8:f7:38:19:3a:ae:52:a8:6c:8d:d9:7a:ee:6d:91:
42:50:03:99:5b:f2:a4:d8:9e:12:34:76:86:e5:64:3f:99:dd:
d4:f0:8d:99:c6:bc:05:5b:a5:2e:16:d0:e4:de:2f:8e:6d:2a:
86:83:92:ab:bf:b9:95:f8:98:07:ef:d7:35:8a:db:be:4c:24:
d3:9e:ac:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTkmZCMDENYtwklO5AOM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmYxZTAxYWYyNGQ3OTI0OTdkNzdlZDFmNzk5MGFlM2E2
MTI5MGQwHhcNMjQwMTAyMDgzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmE1ZjczNjAzMGZkNzVkNTJmMjUyZTcwYmFiMTU4OWI0NDk5OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZIRFlYdELW/wzXi93J/Pj6eybC
/bxmtJ1z+4duvr0EkNRBiveeEEX19IDvNyNPzhIT17ZjDgCJCfOlpbgfx4PdQH50
5Kp+PAg7UHqiTxwOAE5GhPOH+AhhUoA4XHNhe8rR5+riv7Slt3JjY2y9Gl7KLu3u
QACS8oVw+emND+dNEipZfgdYa1pilzN/WIF2a1vQFeQR4r6l2o+5bKCGSihOcz76
qt8rv/KpYzenrrrE7higiOeAe4E22B4jxt8Rk0V/JB1oAt87xE1AhTn/8YEffNpt
995US841Hy3Ea44EwTM5vg2gNwhDxCxShWxxYudN1GXrc8GbH3zFPAyOcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+l9zYDD9ddUvJS5wurFYm0SZjQMB8GA1UdIwQY
MBaAFEpvHgGvJNeSSX137R95kK46YSkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQt
MDRkMzYyYTI4NThkLzEvdjZYM05nTVAxMTFTOGxMbkM2c1ZpYlJKbU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQtMDRkMzYyYTI4NThk
LzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+QsMA0G
CSqGSIb3DQEBCwUAA4IBAQAKAJjbIamWGAg7s9MFc0c9WEYFe9540HAkx5t2gaAZ
O6q0QY3NtBCswNUKsDT3q+qz2n5FC9elsOQ1pZFB+SscABY6VP7yyb7tUE/y5caE
ZUQaFvhwoDDh6bWShI+upaGqWFtfbDqqY514hGYmSFg8yTChFhAXcvHuasUdR7wj
kHg8jRkxm2N33OmZtGo/7rQzmOzeaopG+xcQ75fh9/9HFE8DO8NwU58ZnEc8PIcL
OhNdE3WIeaW49zgZOq5SqGyN2XrubZFCUAOZW/Kk2J4SNHaG5WQ/md3U8I2ZxrwF
W6UuFtDk3i+ObSqGg5Krv7mV+JgH79c1itu+TCTTnqyY
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:31 2025 by rpki-client