Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/0vlefdchoQJRhGn03NBTdV9OQwQ.roa
File: 0vlefdchoQJRhGn03NBTdV9OQwQ.roa (raw, json)
Hash identifier: 91m/mKrDeYiMasmtwxbYWuIHU/YXrUw9Mb0lrgpsJkc=
Subject key identifier: D2:F9:5E:7D:D7:21:A1:02:51:84:69:F4:DC:D0:53:75:5F:4E:43:04
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 018570706C04F340B32BCB36F42A1CE91E74
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/0vlefdchoQJRhGn03NBTdV9OQwQ.roa
Signing time: Mon 02 Jan 2023 03:04:53 +0000
ROA not before: Mon 02 Jan 2023 03:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30725
IP address blocks: 91.226.27.0/24 maxlen: 24
91.226.26.0/23 maxlen: 23
91.226.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6c:04:f3:40:b3:2b:cb:36:f4:2a:1c:e9:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jan 2 03:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f95e7dd721a102518469f4dcd053755f4e4304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:77:2f:00:60:ee:d3:88:1b:c4:09:4a:90:
0c:bd:13:8e:05:48:d7:90:7f:41:e9:47:95:b6:d0:
56:8b:d5:02:8a:36:d9:6e:60:8c:69:b2:54:8c:17:
1e:f2:34:9b:c5:a8:47:43:2d:d2:1a:98:84:ad:b6:
54:1b:72:ce:5c:ea:f9:f3:3a:1c:ef:59:34:a1:b0:
a7:9a:ba:b3:69:c9:8b:71:79:bf:de:89:1c:ec:db:
46:89:25:3e:8b:55:86:c0:ae:78:2d:a5:21:56:09:
d7:46:9b:0a:54:b0:eb:af:0f:53:13:20:11:17:dd:
0e:88:c9:f4:55:5d:e7:e6:ca:f8:d6:0a:d3:7f:e5:
cd:fe:9d:98:57:fc:76:ac:6d:de:c3:fb:42:66:6a:
19:cb:e8:78:0f:c3:2a:14:60:85:7a:4b:52:e8:f6:
5b:e4:04:81:8a:5c:b4:bc:ed:07:2a:55:58:1f:18:
91:ec:e1:3f:4f:8c:e4:fd:56:49:fb:71:7e:df:ec:
fa:62:6b:5b:c1:c3:7a:53:e3:24:0a:3d:d8:e6:09:
96:77:45:f5:dc:ac:36:b5:25:35:75:d3:e2:d4:39:
b2:cc:6e:4c:84:c9:4f:54:53:b1:0d:1b:cb:85:75:
3e:ec:10:52:72:2e:ed:ad:19:19:3c:96:4c:2f:7b:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:5E:7D:D7:21:A1:02:51:84:69:F4:DC:D0:53:75:5F:4E:43:04
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/0vlefdchoQJRhGn03NBTdV9OQwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:d2:26:f8:01:7d:84:8e:48:73:08:e5:d6:c7:28:24:30:ec:
85:8d:23:a3:b9:8c:6b:8c:14:4f:62:4c:fa:c6:b1:ed:76:e6:
72:e8:66:65:eb:95:d6:e4:5d:54:e9:9c:68:5a:12:2f:2c:78:
09:9b:df:f9:1c:e1:45:97:e6:e5:6e:b4:12:87:b9:c0:8c:8f:
54:2a:e6:1c:e9:4e:93:c4:d7:9d:86:05:bb:c8:d8:ec:49:3e:
a9:0f:5a:c1:5c:81:b0:0e:a9:84:8b:8b:b7:a4:8c:4c:f4:84:
76:0a:ee:30:fb:dd:38:70:34:56:5f:4e:72:ce:44:ed:61:a5:
31:e7:78:84:07:85:5f:ac:8a:4f:b6:18:4c:86:14:a9:25:ef:
03:38:c4:9d:9e:96:47:ef:b1:3b:8d:34:14:3c:6e:f3:8c:d9:
0c:89:2e:17:c9:b0:6c:6b:56:27:8f:50:b1:01:e1:ad:15:71:
97:bc:09:51:fe:21:a1:7f:21:df:ac:f3:34:6f:38:82:52:2b:
be:5f:9b:3d:69:24:17:eb:2b:ae:3f:a4:13:d6:38:a1:ad:43:
53:37:5b:a5:60:f4:46:e2:35:8c:e8:89:71:b0:c0:af:48:7f:
11:1b:18:46:dd:19:9c:27:89:9c:ba:79:c6:bf:a7:e6:05:e8:
dc:71:41:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwcGwE80CzK8s29Coc6R50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0
NzkyY2UwHhcNMjMwMTAyMDMwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmY5NWU3ZGQ3MjFhMTAyNTE4NDY5ZjRkY2QwNTM3NTVmNGU0MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkd3LwBg7tOIG8QJSpAMvROOBUjX
kH9B6UeVttBWi9UCijbZbmCMabJUjBce8jSbxahHQy3SGpiErbZUG3LOXOr58zoc
71k0obCnmrqzacmLcXm/3okc7NtGiSU+i1WGwK54LaUhVgnXRpsKVLDrrw9TEyAR
F90OiMn0VV3n5sr41grTf+XN/p2YV/x2rG3ew/tCZmoZy+h4D8MqFGCFektS6PZb
5ASBily0vO0HKlVYHxiR7OE/T4zk/VZJ+3F+3+z6YmtbwcN6U+MkCj3Y5gmWd0X1
3Kw2tSU1ddPi1DmyzG5MhMlPVFOxDRvLhXU+7BBSci7trRkZPJZML3svDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNL5Xn3XIaECUYRp9NzQU3VfTkMEMB8GA1UdIwQY
MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt
MDJiMzM1ODJjNzQ3LzEvMHZsZWZkY2hvUUpSaEduMDNOQlRkVjlPUXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3
LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+IaMA0G
CSqGSIb3DQEBCwUAA4IBAQBd0ib4AX2EjkhzCOXWxygkMOyFjSOjuYxrjBRPYkz6
xrHtduZy6GZl65XW5F1U6ZxoWhIvLHgJm9/5HOFFl+blbrQSh7nAjI9UKuYc6U6T
xNedhgW7yNjsST6pD1rBXIGwDqmEi4u3pIxM9IR2Cu4w+904cDRWX05yzkTtYaUx
53iEB4VfrIpPthhMhhSpJe8DOMSdnpZH77E7jTQUPG7zjNkMiS4XybBsa1Ynj1Cx
AeGtFXGXvAlR/iGhfyHfrPM0bziCUiu+X5s9aSQX6yuuP6QT1jihrUNTN1ulYPRG
4jWM6IlxsMCvSH8RGxhG3RmcJ4mcunnGv6fmBejccUHh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:26 2024 by rpki-client on console-ams.rpki-client.org