Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/PwYlfWYmjNDTN16da6ZQRqqjSOc.roa
File: PwYlfWYmjNDTN16da6ZQRqqjSOc.roa (raw, json)
Hash identifier: mlXKmcjL6TMGMOTDFI9lga04uFuujR5wMc3iGRnSkRY=
Subject key identifier: 3F:06:25:7D:66:26:8C:D0:D3:37:5E:9D:6B:A6:50:46:AA:A3:48:E7
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 018CC8014EAA701F52CE12F4B14AC68967EA
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/PwYlfWYmjNDTN16da6ZQRqqjSOc.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212496
IP address blocks: 91.247.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 18:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4e:aa:70:1f:52:ce:12:f4:b1:4a:c6:89:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f06257d66268cd0d3375e9d6ba65046aaa348e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:ca:b3:b3:03:2a:6e:fc:a8:21:fa:05:33:
96:66:2a:2a:a5:19:39:fa:13:7f:9b:01:de:d7:b1:
bd:b7:71:49:8a:8b:c2:1e:9b:5d:2b:0e:19:c8:75:
15:78:51:e0:9f:47:df:fc:57:40:ac:62:23:7b:85:
67:70:21:18:fd:4a:89:89:20:99:88:07:bb:cb:27:
01:17:4a:4c:86:21:f1:e6:fb:79:9b:b1:63:ac:29:
7f:2d:c5:6b:45:7b:c8:5f:6c:ec:93:de:56:04:35:
64:ae:46:f2:49:d7:48:49:4f:e9:4d:0b:49:31:46:
3a:53:e2:34:50:65:88:d9:00:1c:20:38:3d:5f:a9:
16:55:90:6d:25:99:9d:ae:9f:f9:c7:52:f1:49:2b:
a4:4c:b9:9f:6e:16:63:82:bf:79:31:e8:64:d5:f0:
81:e9:15:c2:a7:08:89:d6:4c:32:eb:fd:60:a4:67:
22:0f:f8:9b:e0:b9:4a:80:71:6a:86:90:1d:1f:dc:
3c:06:bf:9a:97:c9:9e:73:02:8d:a7:6e:ba:ec:77:
1b:39:a7:75:c7:04:32:7b:b2:22:0e:85:7d:ef:8b:
8f:1f:8b:87:71:49:e6:42:2d:f8:69:30:cf:28:6c:
e8:ca:67:97:6f:82:24:13:c7:5d:46:13:5d:70:3f:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:25:7D:66:26:8C:D0:D3:37:5E:9D:6B:A6:50:46:AA:A3:48:E7
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/PwYlfWYmjNDTN16da6ZQRqqjSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.38.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a4:24:4e:4f:03:f4:f1:97:4f:c9:31:59:a3:9a:92:c8:52:
2c:4a:c6:8f:9d:ca:c4:3c:65:9f:69:fb:8c:6f:7a:9b:7a:7a:
58:8d:a2:f7:67:7e:2b:a8:51:57:44:0f:38:e1:e5:ac:80:09:
65:47:0f:b2:7a:e3:9b:34:62:f2:fd:11:80:4e:46:f2:a1:17:
0c:b0:7e:8d:d2:65:89:6c:d1:42:ff:9c:34:6d:87:a1:c4:85:
c4:2c:8e:7b:2b:54:ec:c5:9d:70:29:e2:1f:db:51:f8:f1:b6:
94:b7:b4:1a:73:8d:37:5c:3c:fc:c7:87:06:15:30:da:5b:51:
ae:15:07:ef:d0:f3:ad:b8:d4:b7:c2:af:12:14:67:51:d9:70:
83:b4:1d:d6:87:0b:40:22:b4:05:31:36:a4:d4:63:1e:20:4d:
29:f3:8b:7b:87:7d:fb:3b:8a:9a:20:b5:0c:54:3f:fc:1c:27:
f1:b8:63:83:27:8d:ad:c8:ff:83:f4:46:45:27:70:38:be:65:
7b:79:db:7b:b9:32:fb:e9:3a:5e:74:26:6d:c6:ca:a6:6a:fe:
74:6b:47:be:2e:49:25:43:6d:9b:15:6d:1b:4b:b5:c9:fe:5f:
c9:e4:b2:00:e4:45:5c:f3:f1:df:bb:75:07:6d:19:c1:b3:82:
1f:a0:ce:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAU6qcB9SzhL0sUrGiWfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjQwMTAyMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjA2MjU3ZDY2MjY4Y2QwZDMzNzVlOWQ2YmE2NTA0NmFhYTM0OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3jKs7MDKm78qCH6BTOWZioqpRk5
+hN/mwHe17G9t3FJiovCHptdKw4ZyHUVeFHgn0ff/FdArGIje4VncCEY/UqJiSCZ
iAe7yycBF0pMhiHx5vt5m7FjrCl/LcVrRXvIX2zsk95WBDVkrkbySddISU/pTQtJ
MUY6U+I0UGWI2QAcIDg9X6kWVZBtJZmdrp/5x1LxSSukTLmfbhZjgr95Mehk1fCB
6RXCpwiJ1kwy6/1gpGciD/ib4LlKgHFqhpAdH9w8Br+al8mecwKNp2667HcbOad1
xwQye7IiDoV974uPH4uHcUnmQi34aTDPKGzoymeXb4IkE8ddRhNdcD+oUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8GJX1mJozQ0zdenWumUEaqo0jnMB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvUHdZbGZXWW1qTkRUTjE2ZGE2WlFScXFqU09jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/cmMA0G
CSqGSIb3DQEBCwUAA4IBAQBTpCROTwP08ZdPyTFZo5qSyFIsSsaPncrEPGWfafuM
b3qbenpYjaL3Z34rqFFXRA844eWsgAllRw+yeuObNGLy/RGATkbyoRcMsH6N0mWJ
bNFC/5w0bYehxIXELI57K1TsxZ1wKeIf21H48baUt7Qac403XDz8x4cGFTDaW1Gu
FQfv0POtuNS3wq8SFGdR2XCDtB3WhwtAIrQFMTak1GMeIE0p84t7h337O4qaILUM
VD/8HCfxuGODJ42tyP+D9EZFJ3A4vmV7edt7uTL76TpedCZtxsqmav50a0e+Lkkl
Q22bFW0bS7XJ/l/J5LIA5EVc8/Hfu3UHbRnBs4IfoM4S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org