Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/12CUiI7YMG_riL9sqPGssAg4-3E.roa
File: 12CUiI7YMG_riL9sqPGssAg4-3E.roa (raw, json)
Hash identifier: kuIklFPNVYSN1vyPsg1lFLiw9nR0jv1Ss5+rNH/GLR8=
Subject key identifier: D7:60:94:88:8E:D8:30:6F:EB:88:BF:6C:A8:F1:AC:B0:08:38:FB:71
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 018572713B763BF78BEFD7A9C73330893078
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/12CUiI7YMG_riL9sqPGssAg4-3E.roa
Signing time: Mon 02 Jan 2023 12:25:01 +0000
ROA not before: Mon 02 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51816
IP address blocks: 91.220.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:3b:76:3b:f7:8b:ef:d7:a9:c7:33:30:89:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Jan 2 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76094888ed8306feb88bf6ca8f1acb00838fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:09:42:28:85:e1:57:bf:66:42:d3:9d:3d:
0c:06:d8:0f:ca:a2:fb:83:8e:ca:0a:62:41:c5:71:
2e:3a:65:ae:93:b8:8a:c6:f1:40:1d:d2:8e:07:fb:
4f:76:42:ac:ba:5b:b9:cc:e5:fc:04:ef:31:16:ac:
49:18:df:31:a1:4b:be:ed:37:35:2d:b8:6c:61:88:
ed:35:cb:a5:1c:85:82:15:fe:af:b5:0a:80:e0:1f:
26:41:c0:c4:d2:9d:92:83:3c:39:85:97:39:9f:d5:
d7:9f:f2:e9:66:20:e6:30:fa:fa:60:7b:81:9e:75:
0a:f9:1d:1a:c9:cc:80:d4:23:3c:ca:0b:0e:3b:0e:
a1:38:14:ef:8b:bb:88:f6:5b:ed:fe:3b:3c:65:01:
31:af:0f:7d:21:25:21:71:95:7d:7e:0b:de:e8:9b:
e2:c5:32:eb:2d:74:d5:e9:e4:8d:af:1b:61:df:1f:
77:c1:d9:7f:0c:84:c4:f7:2b:7e:7a:96:6e:40:d0:
81:f0:42:3b:3e:fb:d7:05:88:d4:da:56:15:f9:7e:
84:5f:75:56:4f:9c:ef:a0:0f:e2:60:c1:e9:50:f9:
f7:d3:a2:b7:3e:05:fc:0c:6e:b2:f2:8d:5c:34:31:
a0:31:10:3b:67:6a:c9:f8:cd:7a:ed:cc:80:c2:aa:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:94:88:8E:D8:30:6F:EB:88:BF:6C:A8:F1:AC:B0:08:38:FB:71
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/12CUiI7YMG_riL9sqPGssAg4-3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.107.0/24
Signature Algorithm: sha256WithRSAEncryption
90:79:7b:a1:07:71:82:7d:bf:7b:b5:13:80:e1:92:78:ce:1a:
34:61:d4:6d:43:ef:09:14:18:f3:33:06:0d:09:9f:2c:5f:44:
c7:79:ff:7e:a3:6e:a9:a4:54:d5:c8:a1:a1:0f:bd:57:10:a1:
fb:f0:0c:6a:16:27:a3:8a:b0:16:70:69:ca:09:06:d0:2f:25:
d8:a6:7d:68:b4:37:c2:10:1e:e5:48:c1:83:e6:96:80:04:a4:
c4:b5:f1:88:81:8b:04:c9:d8:52:3f:4c:2f:78:9a:d9:1f:8b:
d5:87:b4:de:08:48:d3:f0:91:0b:d0:b7:43:ff:8d:f6:d2:b4:
9d:8c:06:7a:f5:2d:1e:48:c9:64:b6:fe:0f:85:99:f5:74:33:
a6:f9:99:61:28:b8:bc:88:dc:96:ba:81:cc:f4:e2:d9:70:c0:
2d:17:7c:73:37:7c:b9:04:d9:ba:ed:71:4d:a1:02:b0:c1:cb:
6e:b8:d0:c0:a3:38:eb:54:e5:e4:77:42:34:a9:33:c4:df:3f:
9f:e7:ef:14:4d:f0:37:fa:82:00:5b:bb:52:c0:d8:8d:f2:20:
ec:e9:53:91:cc:35:45:a1:ff:9a:fc:7e:2f:be:dd:cf:b6:45:
c3:70:b8:d4:2b:e6:d5:a3:8c:c5:60:9a:98:a9:50:2a:6b:c0:
57:97:6e:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycTt2O/eL79epxzMwiTB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGM2NzljYmFmOGMyYWQ3YmQ3ZTE1OTA4NmZkZjBhMjdk
MmEyODQwHhcNMjMwMTAyMTIyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzYwOTQ4ODhlZDgzMDZmZWI4OGJmNmNhOGYxYWNiMDA4MzhmYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rgJQiiF4Ve/ZkLTnT0MBtgPyqL7
g47KCmJBxXEuOmWuk7iKxvFAHdKOB/tPdkKsulu5zOX8BO8xFqxJGN8xoUu+7Tc1
LbhsYYjtNculHIWCFf6vtQqA4B8mQcDE0p2Sgzw5hZc5n9XXn/LpZiDmMPr6YHuB
nnUK+R0aycyA1CM8ygsOOw6hOBTvi7uI9lvt/js8ZQExrw99ISUhcZV9fgve6Jvi
xTLrLXTV6eSNrxth3x93wdl/DITE9yt+epZuQNCB8EI7PvvXBYjU2lYV+X6EX3VW
T5zvoA/iYMHpUPn306K3PgX8DG6y8o1cNDGgMRA7Z2rJ+M167cyAwqpzewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdglIiO2DBv64i/bKjxrLAIOPtxMB8GA1UdIwQY
MBaAFDhMZ5y6+MKte9fhWQhv3won0qKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMmVhYTItY2NiOS00OGUxLTk2MmQt
ZTNlYTY0OTRkNGVhLzEvMTJDVWlJN1lNR19yaUw5c3FQR3NzQWc0LTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMmVhYTItY2NiOS00OGUxLTk2MmQtZTNlYTY0OTRkNGVh
LzEvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xrMA0G
CSqGSIb3DQEBCwUAA4IBAQCQeXuhB3GCfb97tROA4ZJ4zho0YdRtQ+8JFBjzMwYN
CZ8sX0THef9+o26ppFTVyKGhD71XEKH78AxqFiejirAWcGnKCQbQLyXYpn1otDfC
EB7lSMGD5paABKTEtfGIgYsEydhSP0wveJrZH4vVh7TeCEjT8JEL0LdD/4320rSd
jAZ69S0eSMlktv4PhZn1dDOm+ZlhKLi8iNyWuoHM9OLZcMAtF3xzN3y5BNm67XFN
oQKwwctuuNDAozjrVOXkd0I0qTPE3z+f5+8UTfA3+oIAW7tSwNiN8iDs6VORzDVF
of+a/H4vvt3PtkXDcLjUK+bVo4zFYJqYqVAqa8BXl26F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:35 2024 by rpki-client on console-fra.rpki-client.org