Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/MiNOm8QkHF2-bFQDS7u8mTM1ucg.roa
File: MiNOm8QkHF2-bFQDS7u8mTM1ucg.roa (raw, json)
Hash identifier: 6ipXXKu9W2cbVIAc7EKnuWDhEcX+36tKpO17nS4x1DY=
Subject key identifier: 32:23:4E:9B:C4:24:1C:5D:BE:6C:54:03:4B:BB:BC:99:33:35:B9:C8
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 018CC86F5DF920C9B85DA10173541AB1AC33
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/MiNOm8QkHF2-bFQDS7u8mTM1ucg.roa
Signing time: Tue 02 Jan 2024 04:29:50 +0000
ROA not before: Tue 02 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56532
IP address blocks: 91.224.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5d:f9:20:c9:b8:5d:a1:01:73:54:1a:b1:ac:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Jan 2 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32234e9bc4241c5dbe6c54034bbbbc993335b9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:f2:41:7e:29:91:f4:54:72:66:01:d7:25:
6e:2f:7b:31:71:47:c9:db:ec:c4:ea:03:24:30:6c:
cd:b9:78:c1:cd:3b:cb:e2:1f:50:37:74:a2:bc:13:
5a:a8:1f:aa:b1:0e:25:ea:f7:95:b1:dc:fd:ca:d6:
09:0a:08:53:28:3a:91:30:f2:22:2c:e2:d8:e0:ee:
7f:97:ac:27:a1:be:e7:84:e0:51:f0:50:c1:b4:53:
3c:9b:39:26:1f:a8:3f:5f:89:48:4b:35:59:aa:49:
62:39:8e:0f:cd:55:a7:88:be:c9:04:07:17:f1:67:
c4:44:81:3a:20:63:4f:16:d6:8e:87:13:e7:aa:6a:
73:81:48:e7:d1:c7:f5:cd:c7:69:af:ee:5f:90:25:
18:b3:c2:96:0c:c0:2a:16:21:42:08:61:8f:e2:6d:
2e:57:4f:fb:2b:1d:8d:de:7e:2f:12:0f:ae:11:0a:
9c:2a:bf:6b:ba:9b:95:43:68:8b:b6:96:eb:6c:ca:
a9:a6:b6:62:43:2a:e8:0f:eb:6f:53:c9:80:40:c8:
ed:95:33:23:ae:b4:d9:81:f0:53:c7:89:8a:92:bf:
83:d0:5a:4e:d7:dd:e9:c8:15:59:d0:1a:1d:f5:f5:
42:ff:06:3d:cf:0f:6e:1f:7b:a6:07:fe:85:ed:8a:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:23:4E:9B:C4:24:1C:5D:BE:6C:54:03:4B:BB:BC:99:33:35:B9:C8
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/MiNOm8QkHF2-bFQDS7u8mTM1ucg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ba:65:d9:e2:6d:ff:b2:93:4b:c0:37:50:33:88:5b:85:d7:
16:23:81:82:da:26:f3:41:59:e2:d0:71:19:a6:16:52:af:32:
43:65:c4:b1:be:6b:07:bb:d8:79:ef:25:bf:0e:9c:06:df:5a:
e0:88:bb:bf:ab:2f:97:c5:0d:f1:c1:e0:e4:63:d9:9e:37:ae:
8a:f3:a0:e6:38:73:30:1d:07:31:8a:97:4c:bf:a1:c1:3a:6a:
0f:8c:7c:e6:52:12:35:8e:42:81:78:37:1a:92:16:2c:75:39:
a6:a7:77:79:58:96:6a:47:57:78:5e:e8:83:ac:fc:35:f8:13:
66:ed:19:f4:b0:05:48:c3:dd:c6:59:5b:51:f8:e6:32:cc:40:
04:e2:b7:55:fa:38:a8:90:68:1b:a6:72:27:ef:03:5b:ed:cc:
ca:bd:8d:c4:75:68:3d:75:d6:66:2d:50:b4:6a:3d:8e:8e:0f:
49:56:38:e3:55:67:63:51:ec:16:51:5b:57:ab:33:d3:e8:df:
d6:02:9b:c6:e9:ed:ba:39:6a:21:d1:6b:41:74:c4:97:dd:55:
42:0e:9b:26:62:4c:01:49:2a:e1:83:fd:02:e4:f2:3e:6b:e3:
f7:06:77:28:57:ce:69:16:39:97:ee:cd:8d:47:9b:34:c0:7d:
80:7d:00:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb135IMm4XaEBc1QasawzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk
Mjc5YWIwHhcNMjQwMTAyMDQyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjIzNGU5YmM0MjQxYzVkYmU2YzU0MDM0YmJiYmM5OTMzMzViOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplzyQX4pkfRUcmYB1yVuL3sxcUfJ
2+zE6gMkMGzNuXjBzTvL4h9QN3SivBNaqB+qsQ4l6veVsdz9ytYJCghTKDqRMPIi
LOLY4O5/l6wnob7nhOBR8FDBtFM8mzkmH6g/X4lISzVZqkliOY4PzVWniL7JBAcX
8WfERIE6IGNPFtaOhxPnqmpzgUjn0cf1zcdpr+5fkCUYs8KWDMAqFiFCCGGP4m0u
V0/7Kx2N3n4vEg+uEQqcKr9rupuVQ2iLtpbrbMqpprZiQyroD+tvU8mAQMjtlTMj
rrTZgfBTx4mKkr+D0FpO193pyBVZ0Bod9fVC/wY9zw9uH3umB/6F7YqKFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDIjTpvEJBxdvmxUA0u7vJkzNbnIMB8GA1UdIwQY
MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt
YWU4YjhkNzg4NzAwLzEvTWlOT204UWtIRjItYkZRRFM3dThtVE0xdWNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw
LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+DiMA0G
CSqGSIb3DQEBCwUAA4IBAQB+umXZ4m3/spNLwDdQM4hbhdcWI4GC2ibzQVni0HEZ
phZSrzJDZcSxvmsHu9h57yW/DpwG31rgiLu/qy+XxQ3xweDkY9meN66K86DmOHMw
HQcxipdMv6HBOmoPjHzmUhI1jkKBeDcakhYsdTmmp3d5WJZqR1d4XuiDrPw1+BNm
7Rn0sAVIw93GWVtR+OYyzEAE4rdV+jiokGgbpnIn7wNb7czKvY3EdWg9ddZmLVC0
aj2Ojg9JVjjjVWdjUewWUVtXqzPT6N/WApvG6e26OWoh0WtBdMSX3VVCDpsmYkwB
SSrhg/0C5PI+a+P3BncoV85pFjmX7s2NR5s0wH2AfQBt
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:33:05 2025 by rpki-client