Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/3RgmbuYmrufZ6BB1P82mxyS5EIo.roa
File: 3RgmbuYmrufZ6BB1P82mxyS5EIo.roa (raw, json)
Hash identifier: z/f5G3UcdEk7nsNHdeA9VF4560hCd0J7Eez2yrnr9ME=
Subject key identifier: DD:18:26:6E:E6:26:AE:E7:D9:E8:10:75:3F:CD:A6:C7:24:B9:10:8A
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 019305B49717468F1535581C29A5D46939CC
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/3RgmbuYmrufZ6BB1P82mxyS5EIo.roa
Signing time: Thu 07 Nov 2024 08:19:01 +0000
ROA not before: Thu 07 Nov 2024 08:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 91.209.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 16:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:b4:97:17:46:8f:15:35:58:1c:29:a5:d4:69:39:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Nov 7 08:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd18266ee626aee7d9e810753fcda6c724b9108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:4a:27:96:29:b7:df:60:50:3e:a7:f8:cc:
99:13:57:a8:1f:3f:bb:3f:20:26:b7:4f:f6:75:63:
3d:d8:9a:bd:c4:f3:5d:25:95:ea:63:01:3f:f2:39:
23:68:33:e9:72:fb:ec:8a:10:18:f9:42:5a:dd:80:
a9:1a:f5:f3:7c:52:00:ab:39:a9:bb:a7:94:fe:b0:
08:72:e4:f7:48:80:90:ff:37:0d:3d:ad:0f:96:26:
72:82:cc:a2:9e:3a:00:d9:e3:b6:d5:ab:f0:e2:30:
e4:db:70:7f:bf:f0:59:ac:77:b8:e3:80:bb:90:8c:
41:1c:ca:99:cd:d0:42:63:4d:2e:c7:54:b0:e7:e2:
05:bf:32:63:7e:e7:32:15:ea:b4:4c:c4:64:9c:78:
4b:e5:57:94:0b:d9:de:b7:ef:fa:5b:5a:e3:4c:0e:
5b:49:a4:e5:fa:d5:ee:49:b4:3c:fa:9e:75:d1:2b:
93:08:46:fe:f8:c8:f0:62:a7:9f:ed:dc:d0:1a:56:
49:00:db:57:70:a3:88:de:22:04:f0:ad:3f:89:4f:
a7:4b:d7:40:db:f9:61:ba:6a:75:6e:77:c3:4e:9b:
20:9b:00:93:ec:bc:30:4b:91:77:2d:1f:c7:d3:4b:
31:35:ec:b7:6b:8d:b9:d0:aa:c7:17:2e:50:db:10:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:26:6E:E6:26:AE:E7:D9:E8:10:75:3F:CD:A6:C7:24:B9:10:8A
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/3RgmbuYmrufZ6BB1P82mxyS5EIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.48.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a8:25:14:00:ea:ad:c4:b2:28:7c:ef:e1:95:7b:9f:42:d1:
46:cc:49:bc:ab:15:1e:81:e5:70:ec:37:c2:e5:5c:cc:85:3a:
01:67:fc:be:66:bb:58:cd:15:6a:3e:92:8f:ca:9c:10:03:e8:
f1:a5:6e:bd:df:7b:a1:43:93:8e:8a:d1:c0:cd:8b:3f:40:02:
22:f0:0c:b5:76:6a:6c:0a:2c:68:a6:24:8c:bd:3c:9a:8d:e7:
a5:ca:8a:95:4c:fc:70:a4:e3:a9:67:b6:74:a0:cb:9a:4b:b3:
2a:9f:8d:04:a4:d7:bb:c7:a4:73:9c:98:f8:15:37:30:89:d6:
15:54:29:59:26:ab:47:b3:2b:45:81:28:00:03:7e:05:35:70:
19:b5:16:83:a1:45:da:3c:36:13:2e:78:23:65:96:ce:a6:3e:
d1:8c:83:13:10:b1:7d:07:19:32:db:db:cd:7f:f8:3c:69:f2:
4c:7b:e2:d7:ed:bd:db:ff:f9:95:ea:ed:d3:a0:1e:55:9e:2e:
d8:e2:98:3a:e1:03:4f:ed:5c:47:db:cd:97:04:77:70:0a:26:
e8:a6:e2:ee:54:72:09:47:1c:d2:b4:1c:26:f6:98:a3:79:10:
f4:cd:6e:d7:05:26:71:62:92:65:c8:6a:a3:c5:e9:7a:5e:49:
87:e0:19:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMFtJcXRo8VNVgcKaXUaTnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDcxM2FkYThkYWJjZjc3NjgxYzBjYTQyZDk5NjllNDQ3
YzhlYTcwHhcNMjQxMTA3MDgxOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDE4MjY2ZWU2MjZhZWU3ZDllODEwNzUzZmNkYTZjNzI0YjkxMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm15KJ5Ypt99gUD6n+MyZE1eoHz+7
PyAmt0/2dWM92Jq9xPNdJZXqYwE/8jkjaDPpcvvsihAY+UJa3YCpGvXzfFIAqzmp
u6eU/rAIcuT3SICQ/zcNPa0PliZygsyinjoA2eO21avw4jDk23B/v/BZrHe444C7
kIxBHMqZzdBCY00ux1Sw5+IFvzJjfucyFeq0TMRknHhL5VeUC9net+/6W1rjTA5b
SaTl+tXuSbQ8+p510SuTCEb++MjwYqef7dzQGlZJANtXcKOI3iIE8K0/iU+nS9dA
2/lhump1bnfDTpsgmwCT7LwwS5F3LR/H00sxNey3a4250KrHFy5Q2xAcCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0YJm7mJq7n2egQdT/NpsckuRCKMB8GA1UdIwQY
MBaAFEbXE62o2rz3doHAykLZlp5EfI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQt
YmUyMThjZWY0YTExLzEvM1JnbWJ1WW1ydWZaNkJCMVA4Mm14eVM1RUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQtYmUyMThjZWY0YTEx
LzEvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EwMA0G
CSqGSIb3DQEBCwUAA4IBAQCTqCUUAOqtxLIofO/hlXufQtFGzEm8qxUegeVw7DfC
5VzMhToBZ/y+ZrtYzRVqPpKPypwQA+jxpW6933uhQ5OOitHAzYs/QAIi8Ay1dmps
CixopiSMvTyajeelyoqVTPxwpOOpZ7Z0oMuaS7Mqn40EpNe7x6RznJj4FTcwidYV
VClZJqtHsytFgSgAA34FNXAZtRaDoUXaPDYTLngjZZbOpj7RjIMTELF9Bxky29vN
f/g8afJMe+LX7b3b//mV6u3ToB5Vni7Y4pg64QNP7VxH282XBHdwCibopuLuVHIJ
RxzStBwm9pijeRD0zW7XBSZxYpJlyGqjxel6XkmH4BmZ
-----END CERTIFICATE-----
Generated at Sat Nov 9 18:21:11 2024 by rpki-client on console-fra.rpki-client.org