Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/lOpHzKSCafok9nZtVRbqhyT91ZQ.roa
File: lOpHzKSCafok9nZtVRbqhyT91ZQ.roa (raw, json)
Hash identifier: w74uVZGq0BNHaA3Tg6Lu8RFELG9ITaHtdF0N6HyDiAU=
Subject key identifier: 94:EA:47:CC:A4:82:69:FA:24:F6:76:6D:55:16:EA:87:24:FD:D5:94
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 01856F2FD0D18AE332887F6E7AFDB2140DCD
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/lOpHzKSCafok9nZtVRbqhyT91ZQ.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41706
IP address blocks: 91.142.135.0/24 maxlen: 24
193.30.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d0:d1:8a:e3:32:88:7f:6e:7a:fd:b2:14:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ea47cca48269fa24f6766d5516ea8724fdd594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:2f:04:7b:01:cc:ed:ed:78:1f:00:1b:d0:
9c:40:7b:ca:20:74:7d:70:d7:3b:95:bd:b4:f2:22:
f0:4c:d3:30:bd:cc:d7:df:73:72:34:e3:39:4c:f0:
13:27:5a:08:cf:97:27:98:f2:c0:b3:11:99:88:88:
ef:9e:1c:cb:35:e0:13:e8:01:a3:06:de:bc:d3:8a:
5f:72:bd:3d:a2:5f:85:ec:f3:c9:7b:fb:80:70:4c:
0d:12:9f:04:d3:a4:d9:ed:c5:9d:6d:ee:06:b3:4b:
64:25:a7:fc:b6:80:a0:b9:1d:f0:90:80:6b:31:34:
37:a9:fd:63:7e:1e:35:b5:73:ed:02:c8:42:fc:e4:
98:46:11:1b:3f:3c:7e:43:3f:1b:38:3e:78:4c:3a:
04:8e:f7:bf:4d:ca:e8:67:b1:1a:44:9e:09:b4:d5:
bb:32:3c:c5:5c:68:0a:af:df:82:55:9c:a9:76:75:
91:8f:60:91:fa:59:99:4d:ef:0b:3f:af:09:8d:d9:
8a:99:77:d3:ee:8c:71:08:56:88:dc:d7:f0:23:9b:
cd:42:64:72:84:44:c8:fb:11:a8:63:91:f8:ff:52:
40:78:b1:c3:e4:cb:b2:a3:1d:5b:cf:92:9e:5f:94:
dc:80:31:05:9f:3f:46:4b:a3:50:f5:d6:53:1d:06:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:47:CC:A4:82:69:FA:24:F6:76:6D:55:16:EA:87:24:FD:D5:94
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/lOpHzKSCafok9nZtVRbqhyT91ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.135.0/24
193.30.236.0/22
Signature Algorithm: sha256WithRSAEncryption
34:75:8c:7b:69:40:88:22:b5:cf:a5:13:b4:c1:97:28:aa:88:
1f:81:11:5d:a1:3b:5d:b4:53:79:76:84:c7:a2:f8:c1:1f:0e:
4e:f4:25:c6:0a:be:a4:be:ad:59:d7:50:33:57:b7:4d:43:fa:
38:cf:67:bf:10:ef:17:99:4b:2f:9e:2a:31:68:98:d5:4d:44:
db:99:b9:7a:39:78:34:e6:db:67:fa:53:62:c5:51:50:8a:51:
63:95:38:fa:93:68:cc:35:fe:c5:ff:96:ac:c9:93:73:83:5a:
c4:b3:08:68:e5:a5:79:10:13:d2:20:a7:d6:24:4b:cf:35:05:
5c:f8:87:24:fd:a7:fc:62:0d:9a:3f:7e:5f:76:03:6b:53:3c:
ef:0b:b7:d2:8b:02:84:94:02:8f:06:91:8f:16:4e:c4:77:2a:
27:7a:07:28:ef:44:07:a7:97:e8:74:75:76:e9:67:a5:55:9f:
32:3f:d1:94:64:8c:e5:59:95:cc:c1:54:6e:3a:6e:66:1e:71:
b5:d0:47:c1:01:6f:35:9a:82:d5:35:ae:33:87:d2:e8:75:c9:
0b:6a:29:81:d1:68:15:48:0f:45:14:c7:32:ef:a7:ac:2a:d8:
a3:33:b0:46:ec:d8:60:85:d5:8e:44:d9:34:70:5e:0e:21:cb:
ff:c4:09:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvL9DRiuMyiH9uev2yFA3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2
Y2U0MTIwHhcNMjMwMTAxMjExNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGVhNDdjY2E0ODI2OWZhMjRmNjc2NmQ1NTE2ZWE4NzI0ZmRkNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8vBHsBzO3teB8AG9CcQHvKIHR9
cNc7lb208iLwTNMwvczX33NyNOM5TPATJ1oIz5cnmPLAsxGZiIjvnhzLNeAT6AGj
Bt6804pfcr09ol+F7PPJe/uAcEwNEp8E06TZ7cWdbe4Gs0tkJaf8toCguR3wkIBr
MTQ3qf1jfh41tXPtAshC/OSYRhEbPzx+Qz8bOD54TDoEjve/TcroZ7EaRJ4JtNW7
MjzFXGgKr9+CVZypdnWRj2CR+lmZTe8LP68JjdmKmXfT7oxxCFaI3NfwI5vNQmRy
hETI+xGoY5H4/1JAeLHD5Muyox1bz5KeX5TcgDEFnz9GS6NQ9dZTHQb/7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJTqR8ykgmn6JPZ2bVUW6ock/dWUMB8GA1UdIwQY
MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt
ZDdjMzZlMTVjZjBlLzEvbE9wSHpLU0NhZm9rOW5adFZSYnFoeVQ5MVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl
LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW46HAwQC
wR7sMA0GCSqGSIb3DQEBCwUAA4IBAQA0dYx7aUCIIrXPpRO0wZcoqogfgRFdoTtd
tFN5doTHovjBHw5O9CXGCr6kvq1Z11AzV7dNQ/o4z2e/EO8XmUsvnioxaJjVTUTb
mbl6OXg05ttn+lNixVFQilFjlTj6k2jMNf7F/5asyZNzg1rEswho5aV5EBPSIKfW
JEvPNQVc+Ick/af8Yg2aP35fdgNrUzzvC7fSiwKElAKPBpGPFk7Edyonegco70QH
p5fodHV26WelVZ8yP9GUZIzlWZXMwVRuOm5mHnG10EfBAW81moLVNa4zh9LodckL
aimB0WgVSA9FFMcy76esKtijM7BG7NhghdWORNk0cF4OIcv/xAmq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:04 2024 by rpki-client on console-fra.rpki-client.org