Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/ZHFjj9b0VnLe-_ReLiS7VGDNrWc.roa
File: ZHFjj9b0VnLe-_ReLiS7VGDNrWc.roa (raw, json)
Hash identifier: Mjxk7iwFV9ilmRe2+2e/dvFc+EzdtN0TR7LUS5Bmo2c=
Subject key identifier: 64:71:63:8F:D6:F4:56:72:DE:FB:F4:5E:2E:24:BB:54:60:CD:AD:67
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 01857315FB984F453E20EB84EF17C87C9374
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/ZHFjj9b0VnLe-_ReLiS7VGDNrWc.roa
Signing time: Mon 02 Jan 2023 15:24:58 +0000
ROA not before: Mon 02 Jan 2023 15:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.237.101.0/24 maxlen: 24
91.237.100.0/24 maxlen: 24
91.237.100.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:fb:98:4f:45:3e:20:eb:84:ef:17:c8:7c:93:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jan 2 15:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6471638fd6f45672defbf45e2e24bb5460cdad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:41:45:c5:a8:8a:25:19:76:72:4b:b7:4a:8e:
f5:4f:2a:dc:28:5f:8f:9b:56:2f:f9:9b:29:91:86:
b1:a3:5d:a3:95:6a:1a:09:4c:2e:06:bc:0b:1c:5b:
00:f6:4b:ca:70:5c:24:7e:8a:cd:04:7f:50:1b:60:
06:8d:c7:89:45:cd:ee:91:d6:fe:ee:ae:65:c3:b8:
2f:6c:1b:39:9e:da:6d:4c:4c:12:c0:dc:44:b0:c9:
07:7f:5b:61:45:7e:e3:16:36:08:2e:ca:7a:dd:f0:
20:2d:4b:c6:23:54:69:69:00:df:83:f4:f8:fe:f5:
ba:9d:4a:41:56:25:cd:10:c0:35:a1:75:89:e9:69:
db:e5:0c:c5:73:b0:34:9b:ff:71:ee:d6:0e:ff:f1:
43:72:1d:5d:38:df:5d:94:88:7c:74:65:ba:d9:4a:
2e:f2:c0:b4:66:fc:22:1b:72:fe:c4:be:ff:56:e7:
bb:c2:fe:46:e1:2e:3a:6c:41:87:85:7d:9d:3d:a3:
60:c0:b6:77:a4:5f:7e:78:46:48:f4:b6:8c:37:c4:
27:e6:27:30:14:27:d1:8e:10:b3:80:3a:2d:0b:3b:
88:91:d7:ed:28:27:38:46:c6:32:b6:a8:86:f7:a8:
1c:25:0c:f4:f0:0b:47:0c:4a:01:61:85:b3:a1:fb:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:63:8F:D6:F4:56:72:DE:FB:F4:5E:2E:24:BB:54:60:CD:AD:67
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/ZHFjj9b0VnLe-_ReLiS7VGDNrWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.100.0/23
Signature Algorithm: sha256WithRSAEncryption
33:19:d3:5f:fd:b1:2a:f6:7c:4d:0f:f9:7a:56:af:8f:9a:26:
5b:bd:87:55:96:14:56:a4:cf:6f:77:9c:18:1a:95:d1:a5:73:
94:72:1b:56:ec:df:41:7f:21:e5:e8:d8:24:59:63:c2:e0:4e:
06:3e:83:49:96:21:78:f2:55:a6:56:4f:04:c7:77:ab:55:d4:
43:fa:62:7b:a6:3a:7d:27:7c:4a:43:e8:ae:56:a6:5a:4d:11:
a6:d4:ed:bb:b2:58:67:d9:74:d8:b7:a9:2a:62:36:58:50:b3:
f0:55:83:32:91:0f:0c:10:aa:dc:2b:18:8f:b1:a3:ef:ba:e2:
1b:1d:97:a8:d7:f1:6a:44:22:4e:36:4a:35:f1:91:09:5e:6b:
d3:dc:5c:8d:5c:c1:85:bf:3c:9d:65:44:c6:4a:15:18:d4:14:
44:a7:08:e0:98:09:a6:2b:c4:fe:e5:1b:17:c8:72:06:1e:7d:
7f:5e:33:6e:b3:51:8c:9e:01:9c:d0:92:dc:01:12:74:c3:71:
dd:3a:e5:d7:07:6f:22:5c:4e:91:1e:25:83:9d:74:cd:24:64:
1c:be:f9:c0:f6:08:f6:fe:84:83:6d:f5:11:54:d0:0b:a1:83:
20:54:7a:62:a2:7d:69:3a:5b:f0:e9:2f:bd:41:96:34:d3:49:
22:f2:97:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFfuYT0U+IOuE7xfIfJN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjMwMTAyMTUyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDcxNjM4ZmQ2ZjQ1NjcyZGVmYmY0NWUyZTI0YmI1NDYwY2RhZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkFFxaiKJRl2cku3So71TyrcKF+P
m1Yv+ZspkYaxo12jlWoaCUwuBrwLHFsA9kvKcFwkforNBH9QG2AGjceJRc3ukdb+
7q5lw7gvbBs5ntptTEwSwNxEsMkHf1thRX7jFjYILsp63fAgLUvGI1RpaQDfg/T4
/vW6nUpBViXNEMA1oXWJ6Wnb5QzFc7A0m/9x7tYO//FDch1dON9dlIh8dGW62Uou
8sC0ZvwiG3L+xL7/Vue7wv5G4S46bEGHhX2dPaNgwLZ3pF9+eEZI9LaMN8Qn5icw
FCfRjhCzgDotCzuIkdftKCc4RsYytqiG96gcJQz08AtHDEoBYYWzoftBvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRxY4/W9FZy3vv0Xi4ku1Rgza1nMB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvWkhGamo5YjBWbkxlLV9SZUxpUzdWR0ROcldjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+1kMA0G
CSqGSIb3DQEBCwUAA4IBAQAzGdNf/bEq9nxND/l6Vq+PmiZbvYdVlhRWpM9vd5wY
GpXRpXOUchtW7N9BfyHl6NgkWWPC4E4GPoNJliF48lWmVk8Ex3erVdRD+mJ7pjp9
J3xKQ+iuVqZaTRGm1O27slhn2XTYt6kqYjZYULPwVYMykQ8MEKrcKxiPsaPvuuIb
HZeo1/FqRCJONko18ZEJXmvT3FyNXMGFvzydZUTGShUY1BREpwjgmAmmK8T+5RsX
yHIGHn1/XjNus1GMngGc0JLcARJ0w3HdOuXXB28iXE6RHiWDnXTNJGQcvvnA9gj2
/oSDbfURVNALoYMgVHpion1pOlvw6S+9QZY000ki8pc1
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:16 2024 by rpki-client on console-ams.rpki-client.org