Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/kZuwvpaGqrtUw2bBVhhaGqp2t9c.roa
File: kZuwvpaGqrtUw2bBVhhaGqp2t9c.roa (raw, json)
Hash identifier: FPoJ+2TvvLsrjxtZ0DBGBq3f25sp8eZdXcdirNIJ/MM=
Subject key identifier: 91:9B:B0:BE:96:86:AA:BB:54:C3:66:C1:56:18:5A:1A:AA:76:B7:D7
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 01856D5D1D3747B12FAE977AE167613EE3EF
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/kZuwvpaGqrtUw2bBVhhaGqp2t9c.roa
Signing time: Sun 01 Jan 2023 12:44:56 +0000
ROA not before: Sun 01 Jan 2023 12:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25070
IP address blocks: 91.236.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:1d:37:47:b1:2f:ae:97:7a:e1:67:61:3e:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Jan 1 12:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=919bb0be9686aabb54c366c156185a1aaa76b7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:68:1e:d8:35:85:00:28:e7:d9:87:1b:5b:
f2:91:79:36:15:36:19:b5:8e:89:07:7f:4c:9e:60:
1a:ac:0e:49:23:7e:9e:58:fc:8b:8a:da:c7:93:ba:
45:88:da:b4:62:03:41:d8:63:78:ee:b7:89:d9:a7:
6b:ff:f1:47:6e:10:ed:f3:ae:c5:8e:39:b3:38:f8:
28:a0:3c:4c:65:da:e9:c7:95:bf:ec:75:db:3c:48:
ef:a0:c8:c5:46:db:e1:21:0b:f8:92:35:9d:f5:41:
8c:10:46:68:9e:fc:cd:f7:e5:58:c3:36:1b:78:f5:
af:b0:5d:d1:ce:c9:35:b0:5d:e5:3a:87:96:fb:7e:
4d:8d:15:da:2a:08:a4:f4:9d:31:fe:c7:ad:26:44:
e7:f8:7b:3f:c3:21:9e:10:13:d2:4c:73:0d:7c:9c:
52:ae:ec:58:bd:45:04:9f:14:2e:7e:56:cb:62:17:
b4:f5:71:67:7e:fb:53:9c:6b:52:04:94:3c:3d:41:
48:b1:a6:a4:fe:df:a8:e1:32:66:39:85:53:f6:4e:
f6:54:82:a2:43:b1:ae:42:b5:85:ab:01:ba:d6:c0:
74:0a:9b:58:ae:8f:0e:14:73:32:00:55:85:2b:a2:
39:19:48:1c:bf:b2:c1:da:c9:ce:7d:05:7b:5a:fb:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:B0:BE:96:86:AA:BB:54:C3:66:C1:56:18:5A:1A:AA:76:B7:D7
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/kZuwvpaGqrtUw2bBVhhaGqp2t9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b3:65:d5:7b:e6:65:01:a1:b1:35:23:7e:79:1f:2e:64:40:
f3:9d:a7:32:d9:a9:28:5b:01:1c:e7:85:f7:de:7c:74:c8:36:
e7:f6:b3:83:e8:08:91:c4:42:57:06:2d:e1:ba:5d:13:42:3b:
43:49:70:76:16:a8:ff:c4:d7:e9:d6:3a:b7:4e:a7:e0:3a:d8:
1d:a2:46:c1:16:8a:c4:cc:3c:6c:9d:a8:84:ad:1a:95:14:03:
d9:1d:f9:51:c0:5c:34:f0:f9:e1:c8:50:f7:b6:a0:e1:ac:c8:
97:cf:e3:35:c6:47:ba:f3:17:2a:59:8a:19:68:ed:79:2a:ef:
96:30:cd:6d:b9:f7:7d:e5:4c:e6:4c:14:7d:ac:f5:c1:f1:ba:
d3:5a:33:56:be:38:12:0c:e3:a8:75:2d:5d:2e:ea:d1:73:c4:
fb:a9:1f:5d:af:43:f0:26:58:10:ad:64:3a:b7:03:a1:fb:82:
82:fc:ce:6b:36:e8:ea:5b:12:93:73:ba:4c:16:2a:b3:69:04:
21:19:da:3c:98:a1:59:ce:67:eb:ea:fa:a2:3b:7b:d1:88:22:
75:24:58:88:34:6f:81:c3:ca:35:2c:e7:0a:da:d2:12:4f:f4:
76:ed:2b:c3:6d:f5:40:09:26:74:54:8a:c8:a9:32:1a:62:ea:
e8:ff:a3:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXR03R7Evrpd64WdhPuPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5
MDg2YWEwHhcNMjMwMTAxMTI0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTliYjBiZTk2ODZhYWJiNTRjMzY2YzE1NjE4NWExYWFhNzZiN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSJoHtg1hQAo59mHG1vykXk2FTYZ
tY6JB39MnmAarA5JI36eWPyLitrHk7pFiNq0YgNB2GN47reJ2adr//FHbhDt867F
jjmzOPgooDxMZdrpx5W/7HXbPEjvoMjFRtvhIQv4kjWd9UGMEEZonvzN9+VYwzYb
ePWvsF3Rzsk1sF3lOoeW+35NjRXaKgik9J0x/setJkTn+Hs/wyGeEBPSTHMNfJxS
ruxYvUUEnxQuflbLYhe09XFnfvtTnGtSBJQ8PUFIsaak/t+o4TJmOYVT9k72VIKi
Q7GuQrWFqwG61sB0CptYro8OFHMyAFWFK6I5GUgcv7LB2snOfQV7WvuH/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJGbsL6Whqq7VMNmwVYYWhqqdrfXMB8GA1UdIwQY
MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt
YjljNzk0ZTAzY2JhLzEva1p1d3ZwYUdxcnRVdzJiQlZoaGFHcXAydDljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh
LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+zBMA0G
CSqGSIb3DQEBCwUAA4IBAQBbs2XVe+ZlAaGxNSN+eR8uZEDznacy2akoWwEc54X3
3nx0yDbn9rOD6AiRxEJXBi3hul0TQjtDSXB2Fqj/xNfp1jq3TqfgOtgdokbBForE
zDxsnaiErRqVFAPZHflRwFw08PnhyFD3tqDhrMiXz+M1xke68xcqWYoZaO15Ku+W
MM1tufd95UzmTBR9rPXB8brTWjNWvjgSDOOodS1dLurRc8T7qR9dr0PwJlgQrWQ6
twOh+4KC/M5rNujqWxKTc7pMFiqzaQQhGdo8mKFZzmfr6vqiO3vRiCJ1JFiING+B
w8o1LOcK2tIST/R27SvDbfVACSZ0VIrIqTIaYuro/6NI
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:15 2024 by rpki-client on console-fra.rpki-client.org