Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/00ofokxHLVwTmktb5_dvRrkGa_s.roa
File: 00ofokxHLVwTmktb5_dvRrkGa_s.roa (raw, json)
Hash identifier: IF2/8gNojZEheoqwJzI4e9pxk2QmrFKMAl5BOmCw4JU=
Subject key identifier: D3:4A:1F:A2:4C:47:2D:5C:13:9A:4B:5B:E7:F7:6F:46:B9:06:6B:FB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 01856E666F2E320A5657BCBD8B694853112D
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/00ofokxHLVwTmktb5_dvRrkGa_s.roa
Signing time: Sun 01 Jan 2023 17:34:44 +0000
ROA not before: Sun 01 Jan 2023 17:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57623
IP address blocks: 91.233.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:6f:2e:32:0a:56:57:bc:bd:8b:69:48:53:11:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Jan 1 17:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34a1fa24c472d5c139a4b5be7f76f46b9066bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:90:a0:e0:d4:a5:4f:5c:d4:c9:4d:cc:a2:
15:d3:51:6d:7c:d5:5b:0d:0a:95:c8:2d:82:d3:dc:
34:86:00:b2:19:7f:12:f1:bf:d5:8d:86:7e:30:7e:
f1:b9:06:c6:6d:33:ae:70:e5:d7:46:28:72:76:bb:
0b:07:a4:77:00:ee:cb:3d:2f:b5:8e:c3:ba:5d:e6:
27:d6:08:0a:08:dd:dd:9c:d4:01:60:0f:81:c4:f0:
76:4f:9c:94:9e:69:a8:73:77:f0:f0:78:55:b0:9b:
72:4b:6d:b9:f7:b4:2a:2e:d3:3b:de:53:6c:d5:8f:
da:83:81:a7:91:22:72:ad:85:f1:1a:69:d4:08:59:
b3:77:cb:58:85:1d:b4:68:d7:c4:b1:00:d6:32:8e:
b7:87:ac:b3:5a:10:78:f5:0f:55:41:9a:ac:03:fe:
17:d0:41:c9:f6:86:6f:89:30:e5:58:1e:72:43:72:
47:69:aa:29:e2:f9:18:ed:7d:61:76:69:c4:f9:dd:
db:5f:6c:40:ae:ed:02:a0:48:d3:19:c0:07:d4:80:
98:5c:62:5e:bb:ed:18:f3:6a:08:2c:ef:24:11:44:
b5:bc:d6:43:a6:01:45:ec:a4:41:d7:fa:46:2c:b6:
0f:f7:6b:aa:ac:ee:c5:50:d0:63:23:f8:cd:33:3b:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:1F:A2:4C:47:2D:5C:13:9A:4B:5B:E7:F7:6F:46:B9:06:6B:FB
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/00ofokxHLVwTmktb5_dvRrkGa_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.163.0/24
Signature Algorithm: sha256WithRSAEncryption
be:30:ad:8e:1d:97:9d:33:de:4f:2d:b2:12:e6:31:34:10:6a:
d6:93:69:09:3c:93:ae:20:db:fc:80:bf:d2:3a:2e:a7:c6:a9:
20:df:c2:2c:c7:20:8a:f0:a1:03:89:a0:64:48:01:27:d4:c1:
37:39:f8:cf:bd:44:00:2e:a3:5b:9c:2d:2d:2f:63:16:3e:51:
10:14:34:a0:3b:ab:74:63:3f:be:1e:6a:f2:3b:7f:81:4a:01:
fd:79:8d:c7:70:e1:3c:3b:b3:4e:f9:5a:11:2b:93:aa:46:90:
c0:2e:08:00:b0:12:ad:bf:eb:e2:61:08:72:34:18:b3:78:5d:
83:68:3b:a6:aa:4c:62:e6:5b:34:f5:85:11:7a:e4:71:55:ba:
8f:fc:96:27:d9:e8:f5:c2:91:f3:fd:a3:7a:96:2e:d8:db:77:
b6:72:f4:02:7e:52:bd:e9:dc:35:19:34:8c:f1:05:7b:d1:e4:
9a:d4:fe:0c:80:2d:7f:e5:b0:22:76:8a:94:d2:1d:43:46:50:
5b:fc:9d:3f:74:39:d2:a5:4c:03:a3:63:89:7e:e9:19:96:62:
59:3a:0b:1b:17:b5:c9:3c:c1:b7:e7:0a:64:bb:b0:30:be:0e:
cf:4f:4f:97:49:98:42:3d:75:1c:31:41:52:0b:eb:c7:18:8a:
0f:80:73:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuZm8uMgpWV7y9i2lIUxEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNDcyOGJkMWY1ZDEzNmQ3NjhiZjE3NTM0NjFjNTNkYTQ1
NzQ2Y2IwHhcNMjMwMTAxMTczNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzRhMWZhMjRjNDcyZDVjMTM5YTRiNWJlN2Y3NmY0NmI5MDY2YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuWQoODUpU9c1MlNzKIV01FtfNVb
DQqVyC2C09w0hgCyGX8S8b/VjYZ+MH7xuQbGbTOucOXXRihydrsLB6R3AO7LPS+1
jsO6XeYn1ggKCN3dnNQBYA+BxPB2T5yUnmmoc3fw8HhVsJtyS22597QqLtM73lNs
1Y/ag4GnkSJyrYXxGmnUCFmzd8tYhR20aNfEsQDWMo63h6yzWhB49Q9VQZqsA/4X
0EHJ9oZviTDlWB5yQ3JHaaop4vkY7X1hdmnE+d3bX2xAru0CoEjTGcAH1ICYXGJe
u+0Y82oILO8kEUS1vNZDpgFF7KRB1/pGLLYP92uqrO7FUNBjI/jNMzsHCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNKH6JMRy1cE5pLW+f3b0a5Bmv7MB8GA1UdIwQY
MBaAFF1HKL0fXRNtdovxdTRhxT2kV0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMt
NWUyMzY3MjY3M2QyLzEvMDBvZm9reEhMVndUbWt0YjVfZHZScmtHYV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMtNWUyMzY3MjY3M2Qy
LzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+mjMA0G
CSqGSIb3DQEBCwUAA4IBAQC+MK2OHZedM95PLbIS5jE0EGrWk2kJPJOuINv8gL/S
Oi6nxqkg38IsxyCK8KEDiaBkSAEn1ME3OfjPvUQALqNbnC0tL2MWPlEQFDSgO6t0
Yz++HmryO3+BSgH9eY3HcOE8O7NO+VoRK5OqRpDALggAsBKtv+viYQhyNBizeF2D
aDumqkxi5ls09YUReuRxVbqP/JYn2ej1wpHz/aN6li7Y23e2cvQCflK96dw1GTSM
8QV70eSa1P4MgC1/5bAidoqU0h1DRlBb/J0/dDnSpUwDo2OJfukZlmJZOgsbF7XJ
PMG35wpku7Awvg7PT0+XSZhCPXUcMUFSC+vHGIoPgHPK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org