Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/f5FbOSg6J0YzQv0Q4PdDO9NMmFU.roa
File: f5FbOSg6J0YzQv0Q4PdDO9NMmFU.roa (raw, json)
Hash identifier: 5lsASz98l1aUDFTqZTAg4QzARNMvMmSHRMFWIgKgyZA=
Subject key identifier: 7F:91:5B:39:28:3A:27:46:33:42:FD:10:E0:F7:43:3B:D3:4C:98:55
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B495B35E73BA32C0E8DC21D3D1C6BE01F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/f5FbOSg6J0YzQv0Q4PdDO9NMmFU.roa
Signing time: Thu 19 Oct 2023 19:13:16 +0000
ROA not before: Thu 19 Oct 2023 19:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 91.244.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:5b:35:e7:3b:a3:2c:0e:8d:c2:1d:3d:1c:6b:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 19 19:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f915b39283a27463342fd10e0f7433bd34c9855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:96:52:40:b3:e9:3a:45:e9:0c:eb:a6:26:
15:b9:1e:c0:e2:40:a7:1a:9c:7a:1f:8b:99:f1:2d:
8e:75:07:f0:9a:bd:54:73:39:f1:d4:33:82:78:15:
74:f7:f9:c5:59:5f:7f:07:73:ef:dd:47:7b:eb:9e:
47:46:90:f4:a1:06:76:6a:4f:3a:1b:be:31:04:74:
cc:e6:db:93:44:96:26:b5:42:98:04:e5:6c:3c:3e:
db:90:0c:d5:a9:74:94:57:e0:ac:d2:01:60:da:09:
0e:0b:0d:28:c9:2b:95:d4:f9:bd:f3:5c:40:ea:d0:
c9:45:12:82:51:5a:3b:d4:ce:be:f0:4f:9c:22:b7:
78:04:29:6f:53:34:52:9e:b0:b7:a9:53:13:ca:44:
f3:6e:57:1e:5e:c9:b2:31:bb:8a:18:e7:b4:9a:bb:
b8:55:e0:e5:8d:65:9d:ac:57:ba:dd:0d:83:31:8d:
d6:91:fe:b2:3c:ab:24:73:b1:72:e9:f1:2f:7e:78:
a6:76:53:08:39:64:e6:91:82:9e:a4:93:02:dd:90:
f6:df:c9:83:76:33:12:c5:42:cc:63:14:ee:61:bd:
37:f3:3c:5e:ec:44:aa:11:8d:34:f0:71:8f:62:75:
6e:e5:20:1e:3d:df:a8:6e:e9:91:de:a1:b3:18:ef:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:5B:39:28:3A:27:46:33:42:FD:10:E0:F7:43:3B:D3:4C:98:55
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/f5FbOSg6J0YzQv0Q4PdDO9NMmFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.199.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8d:46:f8:a4:40:7a:0a:44:3d:10:41:29:2a:a4:16:21:51:
a5:c3:39:f1:29:f4:1c:25:4e:a3:e7:1f:04:32:c9:fe:35:62:
80:be:44:33:5b:8b:71:03:93:7b:ad:ef:fb:b6:1a:00:00:07:
e1:48:79:cc:77:2e:b8:87:30:28:4f:d5:26:26:14:21:72:53:
2d:35:a0:3b:d5:48:ac:c8:6f:a6:a2:b8:e0:63:6f:57:eb:ba:
0b:ab:82:c1:22:2f:9d:15:ad:0a:20:38:aa:50:a4:0f:fd:ec:
60:5f:6e:97:4f:e4:e5:48:12:19:9e:94:cf:84:1f:59:a8:05:
6e:25:de:28:a0:27:74:d1:58:c9:8f:b1:69:42:22:56:01:cc:
7b:08:8f:c3:db:c8:10:c8:85:5d:67:2c:ee:f1:25:a7:22:11:
2c:ac:e0:a7:7c:39:86:27:d0:bf:ec:06:f6:37:05:49:8f:de:
bd:9e:e6:f6:86:0d:c7:ce:ff:2d:18:b2:a1:38:c0:e2:ed:b6:
d6:68:a0:85:3b:be:7f:8e:6c:8e:40:37:c5:1d:7d:0b:90:8a:
06:db:16:16:5a:c4:ee:57:94:95:f7:6c:33:f5:3a:9d:21:fb:
81:37:b8:d5:04:ba:bb:f1:80:c9:96:16:2f:2c:04:08:45:da:
54:4f:25:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtJWzXnO6MsDo3CHT0ca+AfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMxMDE5MTkxMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjkxNWIzOTI4M2EyNzQ2MzM0MmZkMTBlMGY3NDMzYmQzNGM5ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRKWUkCz6TpF6QzrpiYVuR7A4kCn
Gpx6H4uZ8S2OdQfwmr1Ucznx1DOCeBV09/nFWV9/B3Pv3Ud7655HRpD0oQZ2ak86
G74xBHTM5tuTRJYmtUKYBOVsPD7bkAzVqXSUV+Cs0gFg2gkOCw0oySuV1Pm981xA
6tDJRRKCUVo71M6+8E+cIrd4BClvUzRSnrC3qVMTykTzblceXsmyMbuKGOe0mru4
VeDljWWdrFe63Q2DMY3Wkf6yPKskc7Fy6fEvfnimdlMIOWTmkYKepJMC3ZD238mD
djMSxULMYxTuYb038zxe7ESqEY008HGPYnVu5SAePd+obumR3qGzGO++dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+RWzkoOidGM0L9EOD3QzvTTJhVMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvZjVGYk9TZzZKMFl6UXYwUTRQZERPOU5NbUZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/THMA0G
CSqGSIb3DQEBCwUAA4IBAQCXjUb4pEB6CkQ9EEEpKqQWIVGlwznxKfQcJU6j5x8E
Msn+NWKAvkQzW4txA5N7re/7thoAAAfhSHnMdy64hzAoT9UmJhQhclMtNaA71Uis
yG+morjgY29X67oLq4LBIi+dFa0KIDiqUKQP/exgX26XT+TlSBIZnpTPhB9ZqAVu
Jd4ooCd00VjJj7FpQiJWAcx7CI/D28gQyIVdZyzu8SWnIhEsrOCnfDmGJ9C/7Ab2
NwVJj969nub2hg3Hzv8tGLKhOMDi7bbWaKCFO75/jmyOQDfFHX0LkIoG2xYWWsTu
V5SV92wz9TqdIfuBN7jVBLq78YDJlhYvLAQIRdpUTyUE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org