Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/DyLlvM-bl_UprD33wvVpK8YlAvs.roa
File: DyLlvM-bl_UprD33wvVpK8YlAvs.roa (raw, json)
Hash identifier: WTpkwDrf/St8elKm6utTN7lIPy4qkhl+gM9jcb0Vz+k=
Subject key identifier: 0F:22:E5:BC:CF:9B:97:F5:29:AC:3D:F7:C2:F5:69:2B:C6:25:02:FB
Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Certificate serial: 018E432196622CD90042835120095A42FC0E
Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/DyLlvM-bl_UprD33wvVpK8YlAvs.roa
Signing time: Fri 15 Mar 2024 17:20:58 +0000
ROA not before: Fri 15 Mar 2024 17:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 91.227.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 07:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:21:96:62:2c:d9:00:42:83:51:20:09:5a:42:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Validity
Not Before: Mar 15 17:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f22e5bccf9b97f529ac3df7c2f5692bc62502fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:7a:9e:b1:95:de:a1:31:de:23:49:12:fc:
fe:e9:9a:c5:84:8f:72:a5:b7:f6:20:36:a9:8a:80:
9a:0b:90:26:10:be:f3:50:a7:66:27:21:ff:e4:5b:
c0:f5:59:18:6a:31:48:bc:0c:a0:3c:47:5b:94:57:
0a:4f:3d:ab:e4:50:8e:40:36:21:89:93:84:66:54:
7c:14:15:f0:c4:7d:7a:47:87:79:42:b7:73:06:fd:
ae:d3:f4:06:b3:99:07:a5:da:34:d1:79:d3:53:15:
a0:c1:92:22:db:ac:f4:4c:7f:27:f3:76:39:d7:b6:
a7:11:bf:e9:85:b8:7b:64:1e:79:fd:0b:49:0e:2f:
d6:6f:ea:48:b9:59:2c:be:6b:55:e2:90:32:f7:c3:
b0:20:f8:a4:0d:4f:62:ca:9e:2a:8a:7e:fa:eb:4c:
95:bf:ef:7d:be:d8:d6:70:94:e3:89:dc:4a:e4:25:
7b:68:d7:85:c2:29:7f:60:f0:1a:04:54:8f:bb:ec:
f6:2e:ed:bb:b7:99:c6:57:1c:7e:ca:00:4c:29:85:
b6:74:7c:e4:f4:e1:e6:dc:4d:b1:53:74:49:13:a1:
83:a4:0f:37:4f:1b:47:62:c9:23:fc:9a:c7:7c:20:
86:80:2b:54:dc:93:a7:d4:c3:36:38:9a:ec:b4:58:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:22:E5:BC:CF:9B:97:F5:29:AC:3D:F7:C2:F5:69:2B:C6:25:02:FB
X509v3 Authority Key Identifier:
keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/DyLlvM-bl_UprD33wvVpK8YlAvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
33:83:89:f2:34:3f:bf:ba:19:84:98:2d:44:b8:e1:27:3c:02:
52:81:60:bd:b1:f7:ce:e7:06:2b:94:c5:cb:91:ca:4f:37:e1:
1e:75:4f:70:fe:0f:72:8f:02:65:e7:ae:5d:53:75:88:96:8c:
ad:40:47:1e:4b:5a:70:54:d4:b5:ef:a9:7e:ed:9c:df:ae:c2:
31:95:4f:3b:b9:c3:16:1e:cb:a3:88:b7:f6:e2:0a:f8:16:be:
e2:c3:75:31:bd:17:61:39:21:f5:65:37:99:69:d0:23:ec:a1:
f7:49:0a:0b:52:d1:17:89:e8:fb:67:15:18:19:a9:2e:79:40:
c8:5d:ba:1a:5d:36:9e:aa:59:b7:08:4d:60:61:c9:40:1f:60:
8d:43:56:64:98:e3:78:af:18:59:db:4a:e2:48:ce:14:3d:70:
94:02:7e:12:e0:a0:dc:6d:d9:c5:48:6e:9c:b7:4d:9d:b9:df:
f9:5e:56:99:e2:62:fe:5f:ed:a0:c8:77:89:8b:06:b2:d8:bb:
16:ce:de:26:52:2f:2e:d5:e3:f8:c1:b7:99:a6:78:cb:a7:ff:
14:51:5c:ef:91:8b:fc:17:85:1f:3e:32:31:a6:0b:63:df:85:
38:19:9c:2c:dd:8b:76:cc:fd:75:d6:12:64:19:bd:51:46:9f:
65:14:3f:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5DIZZiLNkAQoNRIAlaQvwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM4ZjdjM2VjYWQyOWVjNTA2NDRiNzAwNjhiOTJhMWJl
NDcwNzQwHhcNMjQwMzE1MTcyMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjIyZTViY2NmOWI5N2Y1MjlhYzNkZjdjMmY1NjkyYmM2MjUwMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe56nrGV3qEx3iNJEvz+6ZrFhI9y
pbf2IDapioCaC5AmEL7zUKdmJyH/5FvA9VkYajFIvAygPEdblFcKTz2r5FCOQDYh
iZOEZlR8FBXwxH16R4d5QrdzBv2u0/QGs5kHpdo00XnTUxWgwZIi26z0TH8n83Y5
17anEb/phbh7ZB55/QtJDi/Wb+pIuVksvmtV4pAy98OwIPikDU9iyp4qin7660yV
v+99vtjWcJTjidxK5CV7aNeFwil/YPAaBFSPu+z2Lu27t5nGVxx+ygBMKYW2dHzk
9OHm3E2xU3RJE6GDpA83TxtHYskj/JrHfCCGgCtU3JOn1MM2OJrstFgmoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8i5bzPm5f1Kaw998L1aSvGJQL7MB8GA1UdIwQY
MBaAFF2jj3w+ytKexQZEtwBouSob5HB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4Yjkt
OTQwOGYxYmMwZDEyLzEvRHlMbHZNLWJsX1VwckQzM3d2VnBLOFlsQXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4YjktOTQwOGYxYmMwZDEy
LzEvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NyMA0G
CSqGSIb3DQEBCwUAA4IBAQAzg4nyND+/uhmEmC1EuOEnPAJSgWC9sffO5wYrlMXL
kcpPN+EedU9w/g9yjwJl565dU3WIloytQEceS1pwVNS176l+7ZzfrsIxlU87ucMW
HsujiLf24gr4Fr7iw3UxvRdhOSH1ZTeZadAj7KH3SQoLUtEXiej7ZxUYGakueUDI
XboaXTaeqlm3CE1gYclAH2CNQ1ZkmON4rxhZ20riSM4UPXCUAn4S4KDcbdnFSG6c
t02dud/5XlaZ4mL+X+2gyHeJiway2LsWzt4mUi8u1eP4wbeZpnjLp/8UUVzvkYv8
F4UfPjIxpgtj34U4GZws3Yt2zP111hJkGb1RRp9lFD9i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org