Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/osujnIJCI3SCyzSdBD93GUMJWFU.roa
File: osujnIJCI3SCyzSdBD93GUMJWFU.roa (raw, json)
Hash identifier: a+cY1RvL6AjPZ/WuYVnXaG1Xd/BDA61McfnJrC5kZeQ=
Subject key identifier: A2:CB:A3:9C:82:42:23:74:82:CB:34:9D:04:3F:77:19:43:09:58:55
Certificate issuer: /CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
Certificate serial: 01857295B3E895F92AB9BFA3245836919DF9
Authority key identifier: E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/osujnIJCI3SCyzSdBD93GUMJWFU.roa
Signing time: Mon 02 Jan 2023 13:04:51 +0000
ROA not before: Mon 02 Jan 2023 13:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 91.227.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:b3:e8:95:f9:2a:b9:bf:a3:24:58:36:91:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
Validity
Not Before: Jan 2 13:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2cba39c8242237482cb349d043f771943095855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:7a:5d:4e:1a:2e:21:67:b5:57:ef:3c:ef:
f7:32:d3:ba:2c:b4:7c:cf:db:5b:4f:d4:24:a5:12:
81:74:12:b8:15:00:3e:f0:52:3f:b1:15:63:c9:a9:
3a:96:da:22:83:9d:ca:bb:f1:40:65:b2:24:56:f0:
18:e2:58:75:77:98:e6:99:88:00:9d:7f:a3:64:fa:
98:f1:f0:7e:ea:10:10:a0:61:67:9e:86:18:e3:27:
ad:29:60:db:66:13:86:07:59:fc:e9:4e:62:ef:fa:
75:a8:05:39:a4:7a:21:ac:d2:5f:00:8d:b4:5f:7a:
dc:98:7d:ab:39:eb:cf:c7:77:a3:71:17:17:58:50:
5c:8f:44:a2:8a:ad:f4:bd:e5:fb:7f:95:e1:de:a0:
d6:f5:c1:73:43:52:f2:f0:96:d6:ee:20:14:1b:21:
c5:9b:fe:bb:b9:ee:6d:a5:12:9a:87:b5:3d:40:f3:
6d:e5:df:32:a0:9e:7b:18:f5:3d:ba:22:9f:64:35:
b4:96:f3:b2:5d:26:50:4a:97:02:79:fc:9a:18:00:
c7:0a:a8:41:e5:25:c4:9b:74:9d:51:10:f6:60:a1:
ae:d7:59:55:8e:61:0a:6d:e5:28:0e:4a:dd:ba:92:
d8:c9:c4:af:d2:bd:b4:85:df:2e:58:32:6b:54:5d:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:A3:9C:82:42:23:74:82:CB:34:9D:04:3F:77:19:43:09:58:55
X509v3 Authority Key Identifier:
keyid:E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/osujnIJCI3SCyzSdBD93GUMJWFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/6WxjtJSw0IpVqqGAX2INuNrSVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:93:39:ea:cd:53:0f:b3:83:72:82:46:3b:0c:8e:be:7f:31:
7f:8f:0d:6a:f1:78:57:10:88:33:94:7d:15:c5:e1:08:93:ef:
d1:b4:7e:d4:0f:f9:e1:b2:9b:87:82:26:ee:07:d8:5d:29:a3:
cf:32:cd:97:41:27:bf:40:32:5e:0a:3d:c5:00:41:34:e0:3f:
ac:e2:22:7e:2f:f8:dc:c5:45:6d:49:2d:4a:fb:bd:0d:8b:b5:
df:c1:0c:3d:bc:f1:92:7e:df:ef:20:fd:53:ea:d2:78:cb:83:
97:c7:c1:42:b7:bc:4d:dc:63:87:b6:5a:d2:39:98:ce:da:8a:
8a:4d:b8:db:67:0f:50:64:84:c4:3e:5c:25:81:7e:21:15:98:
ab:ce:30:b8:f8:68:7c:1e:43:0f:0a:f6:35:2c:63:92:69:21:
a1:c6:dc:0d:fe:81:7e:64:4a:de:38:10:b8:d0:a2:a4:6c:6e:
c5:ff:00:cb:18:ad:54:a7:e1:a5:37:9d:47:62:4a:2f:12:a3:
28:4c:e4:db:7d:27:99:c8:f4:d3:f3:c7:1c:2e:fd:a6:fd:18:
c5:88:72:15:8d:8c:ab:e0:47:e5:4c:63:88:35:c2:89:d7:b3:
35:75:5f:b6:51:6d:3a:18:ed:1b:44:e7:f4:a7:e0:45:ad:c8:
45:b1:50:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVylbPolfkqub+jJFg2kZ35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmM2M2I0OTRiMGQwOGE1NWFhYTE4MDVmNjIwZGI4ZGFk
MjU1N2YwHhcNMjMwMTAyMTMwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmNiYTM5YzgyNDIyMzc0ODJjYjM0OWQwNDNmNzcxOTQzMDk1ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuV6XU4aLiFntVfvPO/3MtO6LLR8
z9tbT9QkpRKBdBK4FQA+8FI/sRVjyak6ltoig53Ku/FAZbIkVvAY4lh1d5jmmYgA
nX+jZPqY8fB+6hAQoGFnnoYY4yetKWDbZhOGB1n86U5i7/p1qAU5pHohrNJfAI20
X3rcmH2rOevPx3ejcRcXWFBcj0Siiq30veX7f5Xh3qDW9cFzQ1Ly8JbW7iAUGyHF
m/67ue5tpRKah7U9QPNt5d8yoJ57GPU9uiKfZDW0lvOyXSZQSpcCefyaGADHCqhB
5SXEm3SdURD2YKGu11lVjmEKbeUoDkrdupLYycSv0r20hd8uWDJrVF2vrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKLLo5yCQiN0gss0nQQ/dxlDCVhVMB8GA1UdIwQY
MBaAFOlsY7SUsNCKVaqhgF9iDbja0lV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNld4anRKU3cwSXBWcXFHQVgySU51TnJTVlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zNDJmMzktY2RiMC00ZDUwLTljNzIt
M2EzODYyMTE4YTBmLzEvb3N1am5JSkNJM1NDeXpTZEJEOTNHVU1KV0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zNDJmMzktY2RiMC00ZDUwLTljNzItM2EzODYyMTE4YTBm
LzEvNld4anRKU3cwSXBWcXFHQVgySU51TnJTVlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+O4MA0G
CSqGSIb3DQEBCwUAA4IBAQA8kznqzVMPs4NygkY7DI6+fzF/jw1q8XhXEIgzlH0V
xeEIk+/RtH7UD/nhspuHgibuB9hdKaPPMs2XQSe/QDJeCj3FAEE04D+s4iJ+L/jc
xUVtSS1K+70Ni7XfwQw9vPGSft/vIP1T6tJ4y4OXx8FCt7xN3GOHtlrSOZjO2oqK
TbjbZw9QZITEPlwlgX4hFZirzjC4+Gh8HkMPCvY1LGOSaSGhxtwN/oF+ZEreOBC4
0KKkbG7F/wDLGK1Up+GlN51HYkovEqMoTOTbfSeZyPTT88ccLv2m/RjFiHIVjYyr
4EflTGOINcKJ17M1dV+2UW06GO0bROf0p+BFrchFsVA9
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:24 2024 by rpki-client on console-fra.rpki-client.org