Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1-FPyVVSICeNeQnYJ5mfEs0XPVdA.roa
File: 1-FPyVVSICeNeQnYJ5mfEs0XPVdA.roa (raw, json)
Hash identifier: y2G4+WChMNErnkRVYbS2FqQEmfTxocJ4MU3ChOWnZpg=
Subject key identifier: F8:53:F2:55:54:88:09:E3:5E:42:76:09:E6:67:C4:B3:45:CF:55:D0
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 018A6E76317A804AEA349DF0C891405328A3
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1-FPyVVSICeNeQnYJ5mfEs0XPVdA.roa
Signing time: Thu 07 Sep 2023 07:05:54 +0000
ROA not before: Thu 07 Sep 2023 07:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:76:31:7a:80:4a:ea:34:9d:f0:c8:91:40:53:28:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Sep 7 07:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f853f255548809e35e427609e667c4b345cf55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:de:92:87:60:0b:3e:ce:58:54:3d:4c:1c:
c0:fd:90:21:14:db:af:a2:05:2f:37:7f:8d:af:31:
9b:13:ce:97:32:e8:f9:93:fc:e6:e2:26:5c:c1:fc:
ae:a9:63:4d:d4:42:cc:20:f3:83:a0:1a:2b:ec:b2:
9c:ea:e7:b2:7a:87:62:aa:35:12:cb:ee:f8:27:e5:
91:1f:da:04:0b:fc:9b:e0:8c:82:3e:0c:e5:76:3a:
b4:73:8d:ed:73:9b:c9:80:0a:4e:24:d1:ae:81:32:
94:fe:a8:71:55:ab:1d:24:3e:3f:8a:c9:9a:d3:20:
76:bb:6c:52:06:6d:fa:0e:42:9c:45:4f:2e:72:37:
a5:d7:ec:89:f6:15:15:c7:e2:af:fb:6a:79:76:76:
d5:16:69:89:c8:59:ca:30:57:0d:fd:ca:63:9a:6e:
08:7f:ad:1b:95:5f:41:d4:5e:fa:83:68:ea:31:34:
f5:b2:43:35:bc:e6:d6:ea:f0:1c:3d:a1:47:18:0f:
af:08:4a:ac:f1:c0:64:23:d2:64:fb:17:c3:af:45:
ad:e3:a7:b6:47:75:04:90:ad:2d:74:90:68:70:0e:
cc:2d:47:b6:75:e0:5c:e0:91:e4:c8:24:fc:2e:28:
43:63:fd:4f:fb:06:cb:95:38:19:c4:cd:6a:88:a1:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:F2:55:54:88:09:E3:5E:42:76:09:E6:67:C4:B3:45:CF:55:D0
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1-FPyVVSICeNeQnYJ5mfEs0XPVdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:5f:50:d5:19:b2:2a:2b:95:13:c7:b4:51:64:49:4c:0f:a1:
00:92:37:53:39:ef:8d:95:3e:5b:21:da:29:f4:54:96:6b:0b:
89:bc:7a:09:94:f5:09:2d:be:33:0b:42:e5:cd:ed:6c:0a:f1:
cd:3b:1d:63:84:c3:ef:a9:97:f8:73:41:95:c1:22:a8:10:6f:
00:4f:70:15:64:31:9a:e7:79:62:dc:fd:e5:3a:62:32:f9:7c:
ab:05:f6:65:08:db:64:80:5e:08:b6:62:ed:23:e5:56:71:da:
bf:6f:31:ea:e7:e7:89:99:75:81:17:88:1b:94:07:92:ed:57:
8c:06:99:f1:d3:f5:37:6b:0e:d7:7d:2f:93:d8:fc:21:bf:40:
3c:00:be:c1:e2:a5:79:bf:1d:83:cc:48:83:33:08:b1:46:79:
5b:6b:f6:7e:bb:4f:60:a0:7d:30:91:fc:e7:ce:a8:da:81:e8:
36:da:30:7b:b4:7e:a3:0b:be:cc:59:dc:af:e1:0b:bd:40:81:
b0:30:43:5b:f8:aa:9f:4b:c2:ce:ac:0b:1e:18:70:67:f2:81:
55:a6:8c:f1:44:dc:65:8e:3e:93:3d:ee:14:cc:a7:37:7d:7a:
8b:26:a0:6a:03:b0:b4:f8:3c:41:6f:f0:60:0c:5e:5c:69:81:
4d:b2:7f:b3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYpudjF6gErqNJ3wyJFAUyijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjMwOTA3MDcwNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODUzZjI1NTU0ODgwOWUzNWU0Mjc2MDllNjY3YzRiMzQ1Y2Y1NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZXekodgCz7OWFQ9TBzA/ZAhFNuv
ogUvN3+NrzGbE86XMuj5k/zm4iZcwfyuqWNN1ELMIPODoBor7LKc6ueyeodiqjUS
y+74J+WRH9oEC/yb4IyCPgzldjq0c43tc5vJgApOJNGugTKU/qhxVasdJD4/isma
0yB2u2xSBm36DkKcRU8ucjel1+yJ9hUVx+Kv+2p5dnbVFmmJyFnKMFcN/cpjmm4I
f60blV9B1F76g2jqMTT1skM1vObW6vAcPaFHGA+vCEqs8cBkI9Jk+xfDr0Wt46e2
R3UEkK0tdJBocA7MLUe2deBc4JHkyCT8LihDY/1P+wbLlTgZxM1qiKFpGwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhT8lVUiAnjXkJ2CeZnxLNFz1XQMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvMS1GUHlWVlNJQ2VOZVFuWUo1bWZFczBYUFZkQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTkvNzI0N2IwLTQ5ODktNDNlYS05MzUwLTdhOTM2NzUxZGIx
Yi8xL0dzdGpkcUZralVuVlhrMTdBVGNUWjdEY0t2ay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFuVyDAN
BgkqhkiG9w0BAQsFAAOCAQEAwl9Q1RmyKiuVE8e0UWRJTA+hAJI3UznvjZU+WyHa
KfRUlmsLibx6CZT1CS2+MwtC5c3tbArxzTsdY4TD76mX+HNBlcEiqBBvAE9wFWQx
mud5Ytz95TpiMvl8qwX2ZQjbZIBeCLZi7SPlVnHav28x6ufniZl1gReIG5QHku1X
jAaZ8dP1N2sO130vk9j8Ib9APAC+weKleb8dg8xIgzMIsUZ5W2v2frtPYKB9MJH8
586o2oHoNtowe7R+owu+zFncr+ELvUCBsDBDW/iqn0vCzqwLHhhwZ/KBVaaM8UTc
ZY4+kz3uFMynN316iyagagOwtPg8QW/wYAxeXGmBTbJ/sw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:33 2024 by rpki-client on console-fra.rpki-client.org