Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/CouLhq1UWTa3Z_Bt-u7FtoIxAwo.roa
File: CouLhq1UWTa3Z_Bt-u7FtoIxAwo.roa (raw, json)
Hash identifier: a4T6gkFjrTfKxsL6X/84Y0PrESgOhpI1r0cIqRgAph0=
Subject key identifier: 0A:8B:8B:86:AD:54:59:36:B7:67:F0:6D:FA:EE:C5:B6:82:31:03:0A
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 0185C5104D71373C25E93C5C930AFFF6F742
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/CouLhq1UWTa3Z_Bt-u7FtoIxAwo.roa
Signing time: Wed 18 Jan 2023 13:27:37 +0000
ROA not before: Wed 18 Jan 2023 13:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197086
IP address blocks: 91.217.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:10:4d:71:37:3c:25:e9:3c:5c:93:0a:ff:f6:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jan 18 13:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8b8b86ad545936b767f06dfaeec5b68231030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:38:09:c4:27:31:63:69:09:ff:13:a5:87:
66:ca:cc:55:15:c4:4f:4a:6a:07:29:3e:bf:69:e3:
c2:62:80:24:df:f0:20:e5:d2:ae:1c:23:cd:7c:90:
4b:36:2f:82:80:b0:1a:ec:1c:63:80:9e:c6:5b:b5:
ce:22:a8:af:84:5a:37:6f:e4:c0:0d:4d:20:cd:a4:
84:31:be:e3:cb:56:c0:84:06:ac:8a:df:1b:cb:b9:
0d:7d:93:d2:ac:15:8b:c3:a1:bf:fe:bd:2f:37:ce:
c1:10:c5:9a:bc:71:0c:1f:bb:ec:01:29:be:c9:ec:
27:9f:19:23:4c:ef:a2:0e:d8:2b:af:7d:0a:c2:97:
ff:67:23:8c:10:bc:00:33:1d:17:13:34:22:55:91:
75:98:a6:57:73:b1:25:65:2f:b8:be:85:f7:20:4b:
a6:6d:7d:c5:9c:eb:16:34:c8:46:50:af:fe:27:77:
af:b7:5a:d7:24:b1:58:a5:16:91:63:69:0f:36:00:
c4:b6:87:31:5d:8b:df:45:5e:5d:6f:77:ae:0c:49:
c0:9d:bd:b0:91:87:b3:7e:9d:dd:67:5a:6a:55:93:
68:25:23:5c:7e:2f:b8:5c:06:9d:66:59:db:b2:a2:
17:4e:d0:4c:a2:09:16:3f:29:05:88:8f:de:03:54:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:8B:86:AD:54:59:36:B7:67:F0:6D:FA:EE:C5:B6:82:31:03:0A
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/CouLhq1UWTa3Z_Bt-u7FtoIxAwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.205.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e9:49:78:f5:62:45:05:d5:67:15:b0:0a:42:27:91:8d:10:
68:7e:89:ce:27:5a:5c:14:de:fa:bb:f3:a1:54:09:e7:02:88:
8e:ef:0a:2c:06:12:6d:76:d8:c0:e8:a2:18:fb:da:3e:59:b3:
97:4b:c1:de:ee:fa:c9:8e:0a:47:c0:e6:97:08:7a:ff:bf:76:
60:66:2f:24:82:8b:c3:76:58:15:54:f6:e6:16:d6:77:81:6e:
ff:94:ef:58:74:ef:81:dc:85:3e:20:5f:20:a9:23:00:c7:c5:
4a:3a:23:7e:aa:d1:bb:d7:fd:f9:cf:ab:c3:7d:62:c0:d9:88:
1f:d3:dd:59:22:a6:bb:23:52:92:57:c2:62:87:fb:5f:65:11:
c3:2b:cb:4e:8b:3a:33:9d:88:96:9d:d5:b0:f5:aa:14:79:44:
a6:97:f8:6c:c8:1c:59:e5:67:af:9b:c8:44:19:23:b0:f7:05:
80:af:3e:56:c6:78:ee:22:21:ab:21:c7:61:8d:67:80:34:76:
5a:f4:57:48:06:56:a0:02:e0:f5:01:62:7f:9f:d9:a2:f3:20:
43:3b:25:92:ae:65:e4:0c:71:b1:68:fe:33:9d:b6:be:71:bc:
40:72:09:44:dc:77:31:24:35:f9:01:ed:63:8f:80:44:79:4c:
2f:4e:73:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXFEE1xNzwl6Txckwr/9vdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh
M2ExODMwHhcNMjMwMTE4MTMyNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYThiOGI4NmFkNTQ1OTM2Yjc2N2YwNmRmYWVlYzViNjgyMzEwMzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfU4CcQnMWNpCf8TpYdmysxVFcRP
SmoHKT6/aePCYoAk3/Ag5dKuHCPNfJBLNi+CgLAa7BxjgJ7GW7XOIqivhFo3b+TA
DU0gzaSEMb7jy1bAhAasit8by7kNfZPSrBWLw6G//r0vN87BEMWavHEMH7vsASm+
yewnnxkjTO+iDtgrr30Kwpf/ZyOMELwAMx0XEzQiVZF1mKZXc7ElZS+4voX3IEum
bX3FnOsWNMhGUK/+J3evt1rXJLFYpRaRY2kPNgDEtocxXYvfRV5db3euDEnAnb2w
kYezfp3dZ1pqVZNoJSNcfi+4XAadZlnbsqIXTtBMogkWPykFiI/eA1TQvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqLi4atVFk2t2fwbfruxbaCMQMKMB8GA1UdIwQY
MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt
ZDU4YjA5NGRmMDZjLzEvQ291TGhxMVVXVGEzWl9CdC11N0Z0b0l4QXdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj
LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nNMA0G
CSqGSIb3DQEBCwUAA4IBAQAW6Ul49WJFBdVnFbAKQieRjRBofonOJ1pcFN76u/Oh
VAnnAoiO7wosBhJtdtjA6KIY+9o+WbOXS8He7vrJjgpHwOaXCHr/v3ZgZi8kgovD
dlgVVPbmFtZ3gW7/lO9YdO+B3IU+IF8gqSMAx8VKOiN+qtG71/35z6vDfWLA2Ygf
091ZIqa7I1KSV8Jih/tfZRHDK8tOizoznYiWndWw9aoUeUSml/hsyBxZ5Wevm8hE
GSOw9wWArz5WxnjuIiGrIcdhjWeANHZa9FdIBlagAuD1AWJ/n9mi8yBDOyWSrmXk
DHGxaP4znba+cbxAcglE3HcxJDX5Ae1jj4BEeUwvTnOB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:04 2024 by rpki-client on console-ams.rpki-client.org