Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/oqyvIlNZOiGCcltxMLHktgGaza0.roa
File: oqyvIlNZOiGCcltxMLHktgGaza0.roa (raw, json)
Hash identifier: PwBywC2JYYWjrpODNBj9xAToenFoH+d/UYfWUAwlsNU=
Subject key identifier: A2:AC:AF:22:53:59:3A:21:82:72:5B:71:30:B1:E4:B6:01:9A:CD:AD
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 0186EA5D484A348C0BE53059AC5C689F6A83
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/oqyvIlNZOiGCcltxMLHktgGaza0.roa
Signing time: Thu 16 Mar 2023 12:20:27 +0000
ROA not before: Thu 16 Mar 2023 12:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
2a0f:5f47::/32 maxlen: 32
2a0f:5f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:5d:48:4a:34:8c:0b:e5:30:59:ac:5c:68:9f:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Mar 16 12:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2acaf2253593a2182725b7130b1e4b6019acdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:7b:2c:6f:fa:af:a0:da:90:2c:fc:0b:4f:
85:fc:cc:65:1a:1c:15:08:8e:a8:61:23:a4:36:03:
bd:5e:f4:88:9e:d2:2f:20:d2:6c:a9:f0:2f:50:67:
9a:3b:1c:ce:7e:a5:1e:de:57:76:3d:cb:e4:d0:38:
82:f8:6d:a8:80:2c:cf:2b:c0:f3:07:5e:3c:9b:40:
2c:51:4e:cf:36:f7:3d:9d:8c:04:cb:b9:b0:ab:61:
61:52:01:69:a0:be:a9:ae:6f:e6:7c:14:1e:81:72:
a0:26:61:29:2d:a4:f5:30:dd:32:e9:b8:ca:df:a1:
67:49:06:76:50:9f:13:42:9d:98:da:ee:f3:a1:cc:
73:4a:bf:0c:9c:67:75:9a:f8:7f:a3:74:fa:bd:37:
06:22:f7:e3:c3:56:19:51:ef:47:79:63:1b:0e:64:
01:cc:c9:c1:e7:78:5d:49:ad:f3:07:b4:00:60:a5:
02:50:5d:91:e5:de:2b:0e:aa:9b:88:8a:30:2c:a7:
ec:2f:0a:ce:02:87:c0:4b:b2:d2:42:d9:4b:ae:33:
f8:9e:ca:74:09:42:a3:7e:cd:ec:33:69:84:88:b1:
9e:ed:bc:15:0d:8e:11:b2:47:43:06:2d:77:df:46:
0a:7c:c8:22:83:fa:3a:ee:ea:50:ce:61:7e:b7:00:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:AF:22:53:59:3A:21:82:72:5B:71:30:B1:E4:B6:01:9A:CD:AD
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/oqyvIlNZOiGCcltxMLHktgGaza0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
09:d0:1b:0c:b4:a3:14:6c:54:f9:a9:61:6b:cb:8f:5f:67:0f:
d4:da:e9:82:0b:05:c9:5e:85:4c:2b:4e:8e:64:8a:56:85:9c:
69:91:28:94:0b:9f:fc:03:80:72:04:ef:9e:49:0d:f5:87:7d:
ff:73:2a:62:5f:83:34:8b:49:d7:fb:93:e6:b9:02:ca:b4:ff:
4a:d0:af:1e:ab:21:48:5b:d8:0a:43:97:32:12:80:78:99:70:
c5:a5:6e:61:37:27:ad:01:94:7a:29:a9:d4:24:25:9f:cb:e0:
50:07:0d:df:d2:c1:df:6f:d4:e1:8b:05:ef:c5:68:0d:c8:19:
a3:ea:d1:07:d4:77:1f:b1:04:2a:7b:76:cb:fa:00:61:fe:be:
50:85:ce:c3:92:e5:51:22:d8:e9:64:ce:45:9a:6f:10:1c:e3:
24:2b:7c:fc:48:ad:37:8e:56:08:15:5a:45:d9:e5:40:36:a4:
cd:8d:c3:a2:1a:47:cc:27:72:c5:61:47:93:36:bc:29:3b:2d:
c4:35:28:0c:bb:a6:20:a0:1e:04:7e:9d:a3:89:6f:25:6b:fa:
de:64:53:76:d8:2b:82:09:13:0d:de:11:81:c5:83:e3:fc:d9:
85:0b:54:b9:5c:9d:27:b3:32:14:9b:7f:39:8c:f0:59:cc:29:
5d:1a:d5:40
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYbqXUhKNIwL5TBZrFxon2qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2
YjFlZDUwHhcNMjMwMzE2MTIyMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmFjYWYyMjUzNTkzYTIxODI3MjViNzEzMGIxZTRiNjAxOWFjZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko57LG/6r6DakCz8C0+F/MxlGhwV
CI6oYSOkNgO9XvSIntIvINJsqfAvUGeaOxzOfqUe3ld2Pcvk0DiC+G2ogCzPK8Dz
B148m0AsUU7PNvc9nYwEy7mwq2FhUgFpoL6prm/mfBQegXKgJmEpLaT1MN0y6bjK
36FnSQZ2UJ8TQp2Y2u7zocxzSr8MnGd1mvh/o3T6vTcGIvfjw1YZUe9HeWMbDmQB
zMnB53hdSa3zB7QAYKUCUF2R5d4rDqqbiIowLKfsLwrOAofAS7LSQtlLrjP4nsp0
CUKjfs3sM2mEiLGe7bwVDY4RskdDBi1330YKfMgig/o67upQzmF+twDztQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFKKsryJTWTohgnJbcTCx5LYBms2tMB8GA1UdIwQY
MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt
OTdjNWQ1OWIwYmJmLzEvb3F5dklsTlpPaUdDY2x0eE1MSGt0Z0dhemEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm
LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW9CiAwQA
W9C4AwQAW9DFAwQAW9DOMA0EAgACMAcDBQMqD19AMA0GCSqGSIb3DQEBCwUAA4IB
AQAJ0BsMtKMUbFT5qWFry49fZw/U2umCCwXJXoVMK06OZIpWhZxpkSiUC5/8A4By
BO+eSQ31h33/cypiX4M0i0nX+5PmuQLKtP9K0K8eqyFIW9gKQ5cyEoB4mXDFpW5h
NyetAZR6KanUJCWfy+BQBw3f0sHfb9ThiwXvxWgNyBmj6tEH1HcfsQQqe3bL+gBh
/r5Qhc7DkuVRItjpZM5Fmm8QHOMkK3z8SK03jlYIFVpF2eVANqTNjcOiGkfMJ3LF
YUeTNrwpOy3ENSgMu6YgoB4Efp2jiW8la/reZFN22CuCCRMN3hGBxYPj/NmFC1S5
XJ0nszIUm385jPBZzCldGtVA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:03 2023 by rpki-client on console-ams.rpki-client.org