Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/IBjZL2Umv7aQMkLSgy84hgbeNoI.roa
File: IBjZL2Umv7aQMkLSgy84hgbeNoI.roa (raw, json)
Hash identifier: m7CKlsTGp1c4n+XJzmkmjRLk+saWER4cSRhLZgXmbks=
Subject key identifier: 20:18:D9:2F:65:26:BF:B6:90:32:42:D2:83:2F:38:86:06:DE:36:82
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 01857094F43E234E7DA5A595573C0B38E42B
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/IBjZL2Umv7aQMkLSgy84hgbeNoI.roa
Signing time: Mon 02 Jan 2023 03:44:48 +0000
ROA not before: Mon 02 Jan 2023 03:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44484
IP address blocks: 91.201.228.0/24 maxlen: 24
91.201.228.0/22 maxlen: 22
91.201.229.0/24 maxlen: 24
91.201.230.0/24 maxlen: 24
91.201.231.0/24 maxlen: 24
176.117.192.0/21 maxlen: 21
176.117.192.0/19 maxlen: 19
176.117.204.0/24 maxlen: 24
176.117.205.0/24 maxlen: 24
176.117.210.0/24 maxlen: 24
176.117.211.0/24 maxlen: 24
176.117.212.0/24 maxlen: 24
176.117.213.0/24 maxlen: 24
176.117.207.0/24 maxlen: 24
176.117.208.0/24 maxlen: 24
176.117.209.0/24 maxlen: 24
176.117.214.0/24 maxlen: 24
176.117.215.0/24 maxlen: 24
176.117.216.0/24 maxlen: 24
176.117.217.0/24 maxlen: 24
176.117.218.0/24 maxlen: 24
176.117.219.0/24 maxlen: 24
176.117.221.0/24 maxlen: 24
176.117.222.0/24 maxlen: 24
176.117.223.0/24 maxlen: 24
176.117.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f4:3e:23:4e:7d:a5:a5:95:57:3c:0b:38:e4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Jan 2 03:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2018d92f6526bfb6903242d2832f388606de3682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:c1:23:04:45:7d:e3:2c:09:1e:40:35:07:
47:19:f2:99:e6:d0:89:70:3a:ce:74:51:03:ae:48:
27:15:f1:89:b9:d7:07:bd:7a:ea:71:03:ec:57:89:
df:ed:6f:8b:d9:b6:28:f3:e2:68:65:0a:60:96:b7:
25:07:48:24:bd:6e:fa:e2:c7:49:38:14:5c:d8:23:
42:91:bd:c5:8e:bf:40:39:b5:18:83:ad:6f:98:46:
be:36:92:02:2c:7f:17:71:5e:e0:15:2b:c7:e7:b6:
bb:71:e8:49:23:91:8a:df:80:7c:36:94:b5:9e:79:
98:72:ed:9a:d4:b8:02:ef:95:73:f8:a5:a8:79:0b:
f9:8f:98:97:53:a3:21:20:7b:84:b3:b0:de:0b:9d:
45:66:21:de:dd:8e:09:76:46:1c:b1:76:1b:37:d0:
71:5e:29:ef:57:80:69:6a:9b:f7:46:ee:53:e5:d8:
dc:35:10:03:75:09:94:db:44:4d:66:b7:56:3c:82:
84:7e:f3:89:05:cf:7c:8c:f0:a2:de:3c:16:b6:90:
2e:09:a5:5c:c4:e3:05:0e:6a:49:6b:49:01:84:06:
a4:81:1d:b1:42:d6:f4:db:6a:69:9a:1c:d6:fa:77:
7c:87:18:9d:68:86:cf:2b:ee:aa:6b:5f:ef:22:1a:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:D9:2F:65:26:BF:B6:90:32:42:D2:83:2F:38:86:06:DE:36:82
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/IBjZL2Umv7aQMkLSgy84hgbeNoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.228.0/22
176.117.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:ca:42:cb:a3:85:33:dc:6b:6d:6c:69:8a:9b:5c:5a:4c:a0:
89:6f:a9:b4:af:ea:f5:a4:66:14:92:9b:2c:e9:2f:e2:19:67:
f0:d9:5b:6b:21:82:80:d2:1d:28:5c:a8:58:ea:4f:86:b9:00:
2f:73:78:a1:cf:af:f1:5d:8d:68:0f:c4:52:5b:97:cc:2d:8c:
f5:8d:2c:83:b4:cd:35:fa:4b:ca:4f:8c:9e:1f:99:34:70:2e:
b8:6f:af:4a:61:51:c2:2e:85:01:d8:6a:c9:54:3e:87:0c:ac:
5c:bb:57:09:d4:ca:45:65:78:73:35:77:28:ca:41:a0:a1:cc:
58:2a:c1:28:17:e3:37:3b:15:2c:bb:cb:2c:2d:ff:32:32:cd:
7c:4d:fd:00:7e:7b:f3:2c:ea:c4:91:25:f6:bb:a1:24:01:b6:
c4:d2:78:61:48:32:cc:05:78:76:5c:a1:bc:23:2d:0e:33:ee:
bb:ff:b4:35:3e:75:27:06:9f:95:9e:41:95:b0:59:1f:43:75:
77:ee:52:d2:a7:04:61:ab:35:27:50:d3:47:7d:bb:44:47:70:
85:85:8f:ff:1d:67:27:cf:0e:f2:6b:b7:9b:34:68:32:ef:af:
bc:24:70:3d:84:b6:66:f9:79:ec:01:e6:c8:ec:06:20:65:e6:
d9:7d:43:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlPQ+I059paWVVzwLOOQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODA1ZTFjZmZjMTM5MmU3ZDE3NjhmOGYwNTU0YTFjN2Y2
MzQ0YWQwHhcNMjMwMTAyMDM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDE4ZDkyZjY1MjZiZmI2OTAzMjQyZDI4MzJmMzg4NjA2ZGUzNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJvBIwRFfeMsCR5ANQdHGfKZ5tCJ
cDrOdFEDrkgnFfGJudcHvXrqcQPsV4nf7W+L2bYo8+JoZQpglrclB0gkvW764sdJ
OBRc2CNCkb3Fjr9AObUYg61vmEa+NpICLH8XcV7gFSvH57a7cehJI5GK34B8NpS1
nnmYcu2a1LgC75Vz+KWoeQv5j5iXU6MhIHuEs7DeC51FZiHe3Y4JdkYcsXYbN9Bx
XinvV4Bpapv3Ru5T5djcNRADdQmU20RNZrdWPIKEfvOJBc98jPCi3jwWtpAuCaVc
xOMFDmpJa0kBhAakgR2xQtb022ppmhzW+nd8hxidaIbPK+6qa1/vIho2awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCAY2S9lJr+2kDJC0oMvOIYG3jaCMB8GA1UdIwQY
MBaAFNeAXhz/wTkufRdo+PBVShx/Y0StMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUt
MjI1NGJjMmNhNmMwLzEvSUJqWkwyVW12N2FRTWtMU2d5ODRoZ2JlTm9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUtMjI1NGJjMmNhNmMw
LzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8nkAwQF
sHXAMA0GCSqGSIb3DQEBCwUAA4IBAQCOykLLo4Uz3GttbGmKm1xaTKCJb6m0r+r1
pGYUkpss6S/iGWfw2VtrIYKA0h0oXKhY6k+GuQAvc3ihz6/xXY1oD8RSW5fMLYz1
jSyDtM01+kvKT4yeH5k0cC64b69KYVHCLoUB2GrJVD6HDKxcu1cJ1MpFZXhzNXco
ykGgocxYKsEoF+M3OxUsu8ssLf8yMs18Tf0AfnvzLOrEkSX2u6EkAbbE0nhhSDLM
BXh2XKG8Iy0OM+67/7Q1PnUnBp+VnkGVsFkfQ3V37lLSpwRhqzUnUNNHfbtER3CF
hY//HWcnzw7ya7ebNGgy76+8JHA9hLZm+XnsAebI7AYgZebZfUMF
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:49 2024 by rpki-client on console-ams.rpki-client.org