Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/2CwhP0-Fum5RftaRWdo_BIWLMcw.roa
File: 2CwhP0-Fum5RftaRWdo_BIWLMcw.roa (raw, json)
Hash identifier: 0t4nYZGeKYfzUCbWkZ/Pfzt1gY2pJTbzZ2ZJqzZ3STU=
Subject key identifier: D8:2C:21:3F:4F:85:BA:6E:51:7E:D6:91:59:DA:3F:04:85:8B:31:CC
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 0189D5DA99F41A37B2B9D0AF510B45406769
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/2CwhP0-Fum5RftaRWdo_BIWLMcw.roa
Signing time: Tue 08 Aug 2023 15:53:40 +0000
ROA not before: Tue 08 Aug 2023 15:53:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212935
IP address blocks: 91.203.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:da:99:f4:1a:37:b2:b9:d0:af:51:0b:45:40:67:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Aug 8 15:53:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d82c213f4f85ba6e517ed69159da3f04858b31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:ab:ed:54:58:9a:2d:a1:6a:64:10:2b:71:
2a:51:ec:00:dd:2f:53:76:5d:d2:a3:18:42:c9:d2:
f1:6d:d3:0c:50:b0:e2:0f:1d:1b:e1:25:27:f8:ae:
a8:c0:1b:c8:2e:8e:15:cc:57:ae:6e:8f:65:6c:cb:
44:ef:30:6e:cf:d3:be:57:aa:e6:98:b7:ea:d8:e1:
ae:60:48:60:9e:ca:55:ae:05:d3:51:b0:be:30:46:
74:d9:bc:9a:a2:f1:65:a6:ce:bc:a8:55:54:2d:21:
f9:17:08:51:f4:59:40:47:16:de:91:4c:6d:05:82:
63:f0:ef:fd:fd:cb:a5:d6:97:24:e1:e4:0a:25:8d:
86:b0:a8:c1:d2:23:92:8a:e7:c8:7b:bc:f8:16:68:
56:49:fe:97:3f:48:23:2f:24:9a:af:5c:0c:56:48:
53:46:85:90:36:73:e4:d3:98:84:02:49:97:25:c5:
f3:6d:a1:50:24:ab:94:cb:f3:35:25:03:e6:79:e7:
6a:7f:5a:72:d8:e2:66:3d:96:61:99:18:86:0b:f5:
cb:c2:00:49:4c:1b:2d:a3:19:86:8f:05:d4:24:8d:
38:e3:d9:69:f8:58:52:35:e8:89:64:02:c6:15:3e:
01:48:9b:47:de:fb:d2:73:d3:f1:8e:35:53:12:2f:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2C:21:3F:4F:85:BA:6E:51:7E:D6:91:59:DA:3F:04:85:8B:31:CC
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/2CwhP0-Fum5RftaRWdo_BIWLMcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:67:ff:82:5c:e8:e9:4e:74:bc:b7:d0:49:c1:94:78:97:e7:
0b:f7:f1:92:18:e3:56:f8:76:4c:5d:1d:6c:ac:58:3e:23:7b:
73:c5:8e:4b:12:65:3b:f2:6e:2c:af:5a:5e:a6:df:ca:27:eb:
58:e9:e7:24:18:a6:10:00:2c:1e:e3:9b:a2:58:f0:cd:66:df:
25:f1:6d:fd:f2:2e:6b:6d:b9:21:3f:4e:30:2d:36:38:aa:a2:
73:96:25:48:0a:94:e2:bb:ee:f8:74:03:86:f4:91:98:28:aa:
0d:90:da:0f:39:30:15:50:e0:41:cd:f4:b1:26:61:ac:fc:43:
3e:dc:7b:55:71:29:e0:39:b4:12:e0:76:03:8a:b6:24:00:f0:
a7:e3:55:f0:80:e6:6b:58:85:76:ce:3e:17:5c:69:b6:02:72:
ef:97:4e:de:2c:79:85:03:e8:68:04:05:ee:23:67:f4:67:14:
70:39:aa:bf:5e:0e:77:36:bd:66:e2:56:23:cc:f4:64:39:33:
d8:08:86:72:62:34:27:8f:90:d2:3e:9b:cc:d7:18:cc:9b:77:
6f:e4:00:99:7a:45:65:60:c0:6f:9b:b2:56:1c:28:60:f0:2d:
9b:4f:48:36:ac:84:56:35:cf:33:2c:c7:ee:9d:25:2d:94:e2:
e6:72:c9:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnV2pn0GjeyudCvUQtFQGdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4
YmMwNWQwHhcNMjMwODA4MTU1MzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODJjMjEzZjRmODViYTZlNTE3ZWQ2OTE1OWRhM2YwNDg1OGIzMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHSr7VRYmi2hamQQK3EqUewA3S9T
dl3SoxhCydLxbdMMULDiDx0b4SUn+K6owBvILo4VzFeubo9lbMtE7zBuz9O+V6rm
mLfq2OGuYEhgnspVrgXTUbC+MEZ02byaovFlps68qFVULSH5FwhR9FlARxbekUxt
BYJj8O/9/cul1pck4eQKJY2GsKjB0iOSiufIe7z4FmhWSf6XP0gjLySar1wMVkhT
RoWQNnPk05iEAkmXJcXzbaFQJKuUy/M1JQPmeedqf1py2OJmPZZhmRiGC/XLwgBJ
TBstoxmGjwXUJI0449lp+FhSNeiJZALGFT4BSJtH3vvSc9PxjjVTEi9fwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNgsIT9PhbpuUX7WkVnaPwSFizHMMB8GA1UdIwQY
MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt
Mzg1NDRjMmE4N2JiLzEvMkN3aFAwLUZ1bTVSZnRhUldkb19CSVdMTWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji
LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8seMA0G
CSqGSIb3DQEBCwUAA4IBAQBLZ/+CXOjpTnS8t9BJwZR4l+cL9/GSGONW+HZMXR1s
rFg+I3tzxY5LEmU78m4sr1pept/KJ+tY6eckGKYQACwe45uiWPDNZt8l8W398i5r
bbkhP04wLTY4qqJzliVICpTiu+74dAOG9JGYKKoNkNoPOTAVUOBBzfSxJmGs/EM+
3HtVcSngObQS4HYDirYkAPCn41XwgOZrWIV2zj4XXGm2AnLvl07eLHmFA+hoBAXu
I2f0ZxRwOaq/Xg53Nr1m4lYjzPRkOTPYCIZyYjQnj5DSPpvM1xjMm3dv5ACZekVl
YMBvm7JWHChg8C2bT0g2rIRWNc8zLMfunSUtlOLmcskm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:17 2024 by rpki-client on console-fra.rpki-client.org