Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/SKrXry-qq7kyrCclLaBj2goUZJY.roa
File: SKrXry-qq7kyrCclLaBj2goUZJY.roa (raw, json)
Hash identifier: n0uP0N0CP+qFQarSDrFEH4kXQOuoeUE/ZnLTEG6Jb1U=
Subject key identifier: 48:AA:D7:AF:2F:AA:AB:B9:32:AC:27:25:2D:A0:63:DA:0A:14:64:96
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01928A63899338697179CCDCD36A3020A622
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/SKrXry-qq7kyrCclLaBj2goUZJY.roa
Signing time: Mon 14 Oct 2024 09:37:11 +0000
ROA not before: Mon 14 Oct 2024 09:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 91.237.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:63:89:93:38:69:71:79:cc:dc:d3:6a:30:20:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Oct 14 09:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48aad7af2faaabb932ac27252da063da0a146496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:78:b1:2b:43:b5:0e:80:4d:d3:44:65:9e:
e8:64:0f:26:98:26:77:03:8a:80:17:b2:0c:df:c6:
e1:cb:49:8b:8a:52:35:93:94:59:12:c9:66:5d:ef:
86:a6:2a:ea:9f:39:ab:ac:b7:77:79:22:7c:22:d3:
33:43:9a:77:41:96:8a:39:ae:bf:b4:6b:3a:18:03:
b9:ae:bd:7f:18:3e:62:3c:ec:c9:d2:17:e0:77:6e:
76:cd:8e:68:17:8a:71:ec:a2:2f:19:1c:e2:e3:ed:
51:fa:a9:9d:30:5d:ae:fb:c4:b4:a4:c3:6c:2f:c0:
f7:5e:51:25:c3:30:64:46:af:05:f8:0e:2e:ac:dc:
aa:e9:49:03:9a:ab:2b:9e:3a:3e:a4:fb:b8:72:e0:
41:08:77:3d:f8:12:0d:1b:cc:27:6e:72:4b:0d:43:
87:72:29:c4:8f:62:11:a4:9b:f9:2b:ec:6b:b3:86:
ee:4e:23:37:af:73:62:2a:a7:34:66:a3:97:a5:ac:
e5:a9:e6:fc:16:e1:ea:6c:85:ce:a8:d7:74:bd:5c:
90:5d:3d:ac:3e:b7:ea:7a:27:8b:b8:9d:f4:54:6f:
e8:27:17:54:a3:08:d8:55:ba:e2:ef:0a:f5:d8:dd:
c3:17:fb:c3:5b:03:21:31:84:73:56:ff:47:2d:43:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:D7:AF:2F:AA:AB:B9:32:AC:27:25:2D:A0:63:DA:0A:14:64:96
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/SKrXry-qq7kyrCclLaBj2goUZJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ec:17:70:e3:d9:cb:cb:53:e7:4b:91:a2:1a:a4:d6:45:08:
7b:2b:d3:6d:36:f8:90:cb:08:02:35:2d:10:35:54:e8:5b:e9:
b4:d6:cd:b7:cb:52:ea:ee:d2:a8:20:62:20:79:11:8d:c7:a3:
28:db:bb:ab:ec:be:16:2c:a0:ea:d6:a8:d4:a4:da:d9:b9:2d:
28:83:a4:c7:e2:c1:d1:e8:81:c3:68:22:ee:14:5c:b3:71:dd:
27:39:da:ce:52:d9:70:5b:bf:ea:cb:01:d8:56:52:ee:1e:2d:
7e:1a:bd:84:b6:e9:82:76:3a:88:71:fa:a7:54:a7:1b:0c:11:
de:64:92:f6:04:e0:27:24:cf:81:cf:fd:37:85:98:aa:ca:71:
d6:9a:21:f8:22:46:d8:55:e4:40:e9:37:fc:61:38:07:a3:d2:
de:0c:d1:2f:23:9b:24:8b:57:7d:90:02:3c:03:88:9b:61:d0:
e9:bd:d5:52:ca:d0:ef:5b:d2:50:cb:74:9d:d1:32:e9:88:99:
ed:fd:12:52:d3:86:36:fa:07:6f:ac:02:d4:7b:88:48:b9:0c:
d2:ac:34:8d:f3:e9:5d:34:43:76:2f:ed:2e:3d:7f:e8:88:0c:
7a:82:3b:9a:33:d5:ce:cc:88:7e:a7:e7:c7:52:44:91:63:ab:
1a:3b:c8:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKKY4mTOGlxeczc02owIKYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjQxMDE0MDkzNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGFhZDdhZjJmYWFhYmI5MzJhYzI3MjUyZGEwNjNkYTBhMTQ2NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry14sStDtQ6ATdNEZZ7oZA8mmCZ3
A4qAF7IM38bhy0mLilI1k5RZEslmXe+GpirqnzmrrLd3eSJ8ItMzQ5p3QZaKOa6/
tGs6GAO5rr1/GD5iPOzJ0hfgd252zY5oF4px7KIvGRzi4+1R+qmdMF2u+8S0pMNs
L8D3XlElwzBkRq8F+A4urNyq6UkDmqsrnjo+pPu4cuBBCHc9+BING8wnbnJLDUOH
cinEj2IRpJv5K+xrs4buTiM3r3NiKqc0ZqOXpazlqeb8FuHqbIXOqNd0vVyQXT2s
PrfqeieLuJ30VG/oJxdUowjYVbri7wr12N3DF/vDWwMhMYRzVv9HLUPsoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiq168vqqu5MqwnJS2gY9oKFGSWMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvU0tyWHJ5LXFxN2t5ckNjbExhQmoyZ29VWkpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+13MA0G
CSqGSIb3DQEBCwUAA4IBAQCD7Bdw49nLy1PnS5GiGqTWRQh7K9NtNviQywgCNS0Q
NVToW+m01s23y1Lq7tKoIGIgeRGNx6Mo27ur7L4WLKDq1qjUpNrZuS0og6TH4sHR
6IHDaCLuFFyzcd0nOdrOUtlwW7/qywHYVlLuHi1+Gr2EtumCdjqIcfqnVKcbDBHe
ZJL2BOAnJM+Bz/03hZiqynHWmiH4IkbYVeRA6Tf8YTgHo9LeDNEvI5ski1d9kAI8
A4ibYdDpvdVSytDvW9JQy3Sd0TLpiJnt/RJS04Y2+gdvrALUe4hIuQzSrDSN8+ld
NEN2L+0uPX/oiAx6gjuaM9XOzIh+p+fHUkSRY6saO8i0
-----END CERTIFICATE-----
Generated at Tue Nov 19 09:35:27 2024 by rpki-client on console-ams.rpki-client.org