Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/fPDfDOPMjEyUzcYhQVzLc0MYeXQ.roa
File: fPDfDOPMjEyUzcYhQVzLc0MYeXQ.roa (raw, json)
Hash identifier: J5Lp2oe3AaE9LeO+t7CLc+Xgn6+ulaOEndz8oQYRlB8=
Subject key identifier: 7C:F0:DF:0C:E3:CC:8C:4C:94:CD:C6:21:41:5C:CB:73:43:18:79:74
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CDDAF99F859F80FC96F1F66B9CFF7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/fPDfDOPMjEyUzcYhQVzLc0MYeXQ.roa
Signing time: Mon 02 Jan 2023 03:35:58 +0000
ROA not before: Mon 02 Jan 2023 03:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 91.186.212.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dd:af:99:f8:59:f8:0f:c9:6f:1f:66:b9:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cf0df0ce3cc8c4c94cdc621415ccb7343187974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:95:88:55:b9:a1:8d:d0:a5:f3:a2:40:b3:
55:f1:98:47:b0:f9:4c:1a:8f:29:e5:89:ed:48:8b:
ae:bd:02:2f:bd:53:2a:8f:9b:05:45:b5:f2:c2:6f:
cf:e2:32:21:c4:36:35:2b:68:4c:50:fa:08:eb:2d:
95:74:ec:97:b3:a4:8f:62:1b:03:d6:1a:1d:35:01:
60:2c:12:3a:41:be:70:34:6e:23:82:27:7a:a7:0d:
82:e8:21:b2:cc:4a:f4:1b:02:a9:0c:7d:2a:0e:b6:
4c:56:26:4a:a0:8a:68:8d:7c:83:49:50:87:ad:61:
43:72:e7:30:7a:95:0f:73:c1:52:9a:9b:e8:e0:1c:
27:6f:b8:21:de:96:0a:7a:20:fe:e7:ed:77:67:8f:
72:22:41:9a:79:97:5c:ae:be:2b:43:34:68:66:fa:
f3:6b:dc:9f:e0:0a:88:97:7d:b2:97:8b:fc:c0:f6:
0f:92:88:07:28:37:47:d2:aa:06:62:af:55:5e:c8:
d5:91:d7:e3:5d:ed:7a:b2:0e:6d:13:1d:a5:d7:8b:
eb:4c:37:49:bb:41:a7:d1:08:51:54:c3:79:45:94:
91:2f:05:36:d7:32:8a:41:64:62:a4:ba:e6:50:af:
6c:9f:e2:71:2b:09:c6:a5:31:04:50:36:a4:85:3e:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:DF:0C:E3:CC:8C:4C:94:CD:C6:21:41:5C:CB:73:43:18:79:74
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/fPDfDOPMjEyUzcYhQVzLc0MYeXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.212.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:30:f2:57:84:81:63:37:fd:23:50:4f:8b:31:a7:50:29:de:
36:b9:12:94:3e:36:87:60:6c:35:27:63:04:0f:5a:1c:0e:ec:
9a:14:d2:95:a2:c3:f3:9f:2d:69:50:2d:3e:13:88:75:b8:05:
1d:fe:c5:73:11:c5:34:e2:7b:28:87:57:93:f7:93:c6:57:79:
80:ef:8d:4d:11:80:d9:f2:49:66:16:d1:41:f8:38:bd:99:6b:
b7:cc:cb:68:48:39:bc:79:2d:52:0b:6d:41:ec:02:bd:ba:c8:
e3:73:e3:1d:e6:4c:7f:2f:c6:96:8c:96:fb:07:fd:fd:e6:f8:
08:56:53:c3:71:f4:b3:fa:ef:4d:92:94:49:df:c4:e9:78:b0:
ae:af:4e:ed:44:20:7c:0a:e3:2d:59:01:0d:17:0b:7d:60:67:
1f:86:fe:6c:08:c8:1d:ff:c7:b9:e7:7b:9b:7f:cf:cf:c2:24:
c0:90:be:9a:93:5f:0b:a7:1a:bb:b2:b3:cd:04:52:a4:5e:0e:
05:48:fe:2e:40:1d:94:f9:e6:d1:19:8c:c1:9e:b7:e0:14:95:
3f:c3:8c:ca:b6:b6:25:6e:56:16:79:b3:90:96:83:ef:1c:23:
76:e7:f2:e5:3e:0c:ed:21:02:5e:a3:bc:1e:dc:30:c5:ce:15:
46:f8:56:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjN2vmfhZ+A/Jbx9muc/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwMTAyMDMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2YwZGYwY2UzY2M4YzRjOTRjZGM2MjE0MTVjY2I3MzQzMTg3OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsOViFW5oY3QpfOiQLNV8ZhHsPlM
Go8p5YntSIuuvQIvvVMqj5sFRbXywm/P4jIhxDY1K2hMUPoI6y2VdOyXs6SPYhsD
1hodNQFgLBI6Qb5wNG4jgid6pw2C6CGyzEr0GwKpDH0qDrZMViZKoIpojXyDSVCH
rWFDcucwepUPc8FSmpvo4Bwnb7gh3pYKeiD+5+13Z49yIkGaeZdcrr4rQzRoZvrz
a9yf4AqIl32yl4v8wPYPkogHKDdH0qoGYq9VXsjVkdfjXe16sg5tEx2l14vrTDdJ
u0Gn0QhRVMN5RZSRLwU21zKKQWRipLrmUK9sn+JxKwnGpTEEUDakhT5ozwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHzw3wzjzIxMlM3GIUFcy3NDGHl0MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvZlBEZkRPUE1qRXlVemNZaFFWekxjME1ZZVhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW7rUMA0G
CSqGSIb3DQEBCwUAA4IBAQAPMPJXhIFjN/0jUE+LMadQKd42uRKUPjaHYGw1J2ME
D1ocDuyaFNKVosPzny1pUC0+E4h1uAUd/sVzEcU04nsoh1eT95PGV3mA741NEYDZ
8klmFtFB+Di9mWu3zMtoSDm8eS1SC21B7AK9usjjc+Md5kx/L8aWjJb7B/395vgI
VlPDcfSz+u9NkpRJ38TpeLCur07tRCB8CuMtWQENFwt9YGcfhv5sCMgd/8e553ub
f8/PwiTAkL6ak18Lpxq7srPNBFKkXg4FSP4uQB2U+ebRGYzBnrfgFJU/w4zKtrYl
blYWebOQloPvHCN25/LlPgztIQJeo7we3DDFzhVG+FYX
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org