Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/SmB04EH6ZIksyZjP6Mva289RdQI.roa
File: SmB04EH6ZIksyZjP6Mva289RdQI.roa (raw, json)
Hash identifier: CfpO3tbJeqNhoOwNAWRAZ4y3b6qY6v37ckgY1RDPVyY=
Subject key identifier: 4A:60:74:E0:41:FA:64:89:2C:C9:98:CF:E8:CB:DA:DB:CF:51:75:02
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 01856F0B75A9A40F0C0AB442248DCD8A287D
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/SmB04EH6ZIksyZjP6Mva289RdQI.roa
Signing time: Sun 01 Jan 2023 20:35:00 +0000
ROA not before: Sun 01 Jan 2023 20:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 91.238.60.0/24 maxlen: 24
91.247.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:75:a9:a4:0f:0c:0a:b4:42:24:8d:cd:8a:28:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Jan 1 20:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a6074e041fa64892cc998cfe8cbdadbcf517502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:5e:d8:e0:c2:e6:44:3a:b1:ab:d2:74:e7:
e8:00:8e:c4:ef:4c:3e:da:66:9a:ed:1b:d1:02:13:
a7:42:e0:54:7f:a7:40:9a:77:c9:1a:02:6b:33:78:
53:a5:99:8a:e3:f0:76:8c:b0:56:ee:db:b4:a7:b6:
80:19:5e:fa:39:56:56:c9:33:5d:7e:ee:e1:ee:93:
a0:9a:2e:09:31:3b:a5:4f:7c:0d:56:6d:fd:f2:65:
5e:95:24:60:8c:79:a5:46:88:18:32:cc:52:e7:7e:
4a:d7:b2:f0:5f:34:3c:fb:b4:15:93:b5:3d:ce:56:
f6:c5:1a:24:36:a3:e8:8f:cf:5d:15:37:c8:77:bc:
68:62:82:34:7b:fd:6b:42:31:c5:54:78:e3:57:98:
0a:15:a0:87:92:da:c5:7d:d0:2a:4a:b7:27:10:93:
57:96:04:d1:74:03:56:12:ed:c0:b6:e9:b9:4d:bd:
f2:05:77:9c:b7:0b:46:66:45:a7:de:a0:87:2d:54:
93:fc:7b:67:40:9e:dd:24:1c:2e:e8:65:d4:2c:9f:
a3:75:03:6e:f1:61:37:38:30:f7:c0:46:15:4c:7c:
79:bf:89:ec:e0:b5:e5:17:21:4a:1c:33:c3:c2:8e:
05:a6:96:1f:c3:9c:23:12:61:39:34:65:d4:ba:5c:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:74:E0:41:FA:64:89:2C:C9:98:CF:E8:CB:DA:DB:CF:51:75:02
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/SmB04EH6ZIksyZjP6Mva289RdQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.60.0/24
91.247.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:94:23:f0:b9:27:06:bf:03:e4:9e:95:de:bd:6f:50:a1:2b:
ea:23:c3:e3:5a:da:0f:b9:73:a6:b3:29:43:1d:c4:b5:3f:d5:
3b:cb:39:2d:a3:6a:11:ef:8c:99:33:b5:d7:0a:94:d5:b6:f2:
2f:8e:5c:df:eb:73:9b:5c:bd:fc:75:3e:14:8e:d9:99:3e:0b:
34:21:5b:cd:81:bc:3a:95:5b:4e:f1:9b:ff:76:5e:67:44:31:
50:6b:eb:56:7e:49:df:b2:15:4c:55:78:21:97:42:e0:b7:4a:
13:7b:74:28:8e:9c:df:5b:e5:ca:a6:fc:e0:ca:43:04:cb:41:
fa:77:ce:b6:c9:c8:0a:07:3e:6d:0b:d8:97:2d:c0:d4:3d:d0:
32:16:76:6a:09:ab:d3:4b:9e:39:ea:2b:29:5f:47:6a:38:6e:
d9:b0:40:c8:6f:69:3c:81:96:71:8a:ce:e8:db:c7:8f:c9:89:
4a:a4:f9:17:7e:6c:4b:88:2e:29:37:bb:ca:08:ce:58:38:81:
64:2d:8e:2c:da:23:a7:17:65:40:9a:88:62:e7:a0:28:15:16:
db:e2:e4:80:f4:f4:01:d3:21:72:8e:52:97:7b:8f:52:02:74:
81:da:d3:43:eb:60:eb:6a:aa:fa:47:7e:b4:28:f5:6b:c5:24:
5d:b9:01:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvC3WppA8MCrRCJI3Niih9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl
ZThhNmMwHhcNMjMwMTAxMjAzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTYwNzRlMDQxZmE2NDg5MmNjOTk4Y2ZlOGNiZGFkYmNmNTE3NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRxe2ODC5kQ6savSdOfoAI7E70w+
2maa7RvRAhOnQuBUf6dAmnfJGgJrM3hTpZmK4/B2jLBW7tu0p7aAGV76OVZWyTNd
fu7h7pOgmi4JMTulT3wNVm398mVelSRgjHmlRogYMsxS535K17LwXzQ8+7QVk7U9
zlb2xRokNqPoj89dFTfId7xoYoI0e/1rQjHFVHjjV5gKFaCHktrFfdAqSrcnEJNX
lgTRdANWEu3Atum5Tb3yBXectwtGZkWn3qCHLVST/HtnQJ7dJBwu6GXULJ+jdQNu
8WE3ODD3wEYVTHx5v4ns4LXlFyFKHDPDwo4FppYfw5wjEmE5NGXUulyV+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEpgdOBB+mSJLMmYz+jL2tvPUXUCMB8GA1UdIwQY
MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt
YWJjY2EyYjQ0ZTlmLzEvU21CMDRFSDZaSWtzeVpqUDZNdmEyODlSZFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm
LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+48AwQA
W/eTMA0GCSqGSIb3DQEBCwUAA4IBAQAblCPwuScGvwPknpXevW9QoSvqI8PjWtoP
uXOmsylDHcS1P9U7yzkto2oR74yZM7XXCpTVtvIvjlzf63ObXL38dT4UjtmZPgs0
IVvNgbw6lVtO8Zv/dl5nRDFQa+tWfknfshVMVXghl0Lgt0oTe3QojpzfW+XKpvzg
ykMEy0H6d862ycgKBz5tC9iXLcDUPdAyFnZqCavTS5456ispX0dqOG7ZsEDIb2k8
gZZxis7o28ePyYlKpPkXfmxLiC4pN7vKCM5YOIFkLY4s2iOnF2VAmohi56AoFRbb
4uSA9PQB0yFyjlKXe49SAnSB2tND62Draqr6R360KPVrxSRduQE9
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:24 2024 by rpki-client on console-ams.rpki-client.org