Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6tsnsEHWUYSXeQMUzWJZyJKGfI4.roa
File: 6tsnsEHWUYSXeQMUzWJZyJKGfI4.roa (raw, json)
Hash identifier: Fd9zxKxSBDi1sZb1JVVGItdscsjO8txDSeYuqnq06nE=
Subject key identifier: EA:DB:27:B0:41:D6:51:84:97:79:03:14:CD:62:59:C8:92:86:7C:8E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018A9350A4746B06DBF5A434066958B92BEC
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6tsnsEHWUYSXeQMUzWJZyJKGfI4.roa
Signing time: Thu 14 Sep 2023 10:50:50 +0000
ROA not before: Thu 14 Sep 2023 10:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209670
IP address blocks: 91.132.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:50:a4:74:6b:06:db:f5:a4:34:06:69:58:b9:2b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Sep 14 10:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eadb27b041d6518497790314cd6259c892867c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:94:ab:3c:64:95:80:d1:2d:e9:32:7b:c7:
ad:b2:fe:9a:3a:20:4e:15:16:52:ac:cd:07:61:4c:
ec:a3:e7:79:7c:29:7b:89:03:cc:f5:bd:67:a8:b7:
9c:9a:7b:50:f8:14:8e:de:c6:b5:7b:60:aa:65:b8:
ef:05:ce:b6:ab:74:0b:b3:ef:1f:02:1d:14:91:c4:
40:24:15:e7:a4:3a:a8:34:f1:84:25:15:4b:b6:17:
7b:a0:f4:91:ca:00:8d:85:b5:4d:b2:a6:17:7b:37:
6a:1e:f3:3f:f8:2b:60:5c:2d:bc:aa:75:3b:34:f1:
58:a3:33:ea:65:e9:f9:06:94:66:e4:af:57:d1:0e:
4c:04:df:ef:48:9d:3d:16:3f:d9:a8:f0:c0:be:98:
ee:70:e2:32:47:fa:4a:ad:14:83:b0:8d:80:a3:8f:
be:53:57:39:65:45:dd:96:5d:f8:46:aa:9d:56:1d:
7d:89:30:dd:62:11:22:4a:81:a3:27:0b:d7:61:9c:
57:ea:11:2a:32:78:cb:b3:d9:01:ec:1d:1a:f4:95:
8c:2d:6b:de:5a:2b:e1:89:1a:30:50:70:d0:1e:c2:
bb:fe:07:9c:7f:e5:51:1e:eb:85:e2:34:77:9c:7a:
05:dc:6f:72:27:5f:48:d5:4e:27:b1:ce:52:a9:09:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:27:B0:41:D6:51:84:97:79:03:14:CD:62:59:C8:92:86:7C:8E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6tsnsEHWUYSXeQMUzWJZyJKGfI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:af:bc:65:36:37:ed:46:6d:99:6e:77:95:ec:df:23:e9:11:
77:e2:c3:ca:1e:4e:4a:22:42:57:a1:84:2b:48:da:a2:bc:98:
22:15:f5:13:c3:f3:2b:b9:82:c8:33:22:77:2b:7a:12:6c:65:
41:db:5a:1d:8c:29:83:a7:72:dc:c2:0a:17:4d:04:0e:4d:ec:
f0:12:ee:67:a6:2a:37:5a:02:42:ae:94:a5:cb:11:94:ee:7d:
37:7e:3d:6a:9b:1b:95:46:08:31:33:37:ea:08:e9:ce:8f:42:
dc:2d:5d:88:ea:20:47:6f:95:a2:e3:76:54:e6:10:15:ca:d8:
47:0e:be:a1:85:cb:6c:a9:58:97:c4:72:f8:89:e0:3a:f3:ff:
07:a8:98:97:f0:d6:c1:34:74:72:f2:df:05:bc:af:f1:d2:d7:
18:7f:65:8f:12:ca:87:15:50:1b:fa:f8:b1:f7:ea:9e:30:d6:
61:bb:eb:cd:88:b0:1e:40:d1:74:35:1d:ac:98:d3:fa:db:36:
07:7c:8d:d9:3f:af:21:57:7c:df:e9:6c:f1:b9:7d:f7:7b:df:
a3:fd:85:cc:0e:5e:22:87:ea:b2:54:3e:d6:e6:51:9e:53:a8:
7c:2c:44:53:12:88:45:a9:5e:1e:d1:7e:ea:be:92:14:9a:39:
ad:8d:9d:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqTUKR0awbb9aQ0BmlYuSvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwOTE0MTA1MDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWRiMjdiMDQxZDY1MTg0OTc3OTAzMTRjZDYyNTljODkyODY3YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9GUqzxklYDRLekye8etsv6aOiBO
FRZSrM0HYUzso+d5fCl7iQPM9b1nqLecmntQ+BSO3sa1e2CqZbjvBc62q3QLs+8f
Ah0UkcRAJBXnpDqoNPGEJRVLthd7oPSRygCNhbVNsqYXezdqHvM/+CtgXC28qnU7
NPFYozPqZen5BpRm5K9X0Q5MBN/vSJ09Fj/ZqPDAvpjucOIyR/pKrRSDsI2Ao4++
U1c5ZUXdll34RqqdVh19iTDdYhEiSoGjJwvXYZxX6hEqMnjLs9kB7B0a9JWMLWve
WivhiRowUHDQHsK7/gecf+VRHuuF4jR3nHoF3G9yJ19I1U4nsc5SqQlk+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrbJ7BB1lGEl3kDFM1iWciShnyOMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvNnRzbnNFSFdVWVNYZVFNVXpXSlp5SktHZkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4QYMA0G
CSqGSIb3DQEBCwUAA4IBAQCmr7xlNjftRm2ZbneV7N8j6RF34sPKHk5KIkJXoYQr
SNqivJgiFfUTw/MruYLIMyJ3K3oSbGVB21odjCmDp3LcwgoXTQQOTezwEu5npio3
WgJCrpSlyxGU7n03fj1qmxuVRggxMzfqCOnOj0LcLV2I6iBHb5Wi43ZU5hAVythH
Dr6hhctsqViXxHL4ieA68/8HqJiX8NbBNHRy8t8FvK/x0tcYf2WPEsqHFVAb+vix
9+qeMNZhu+vNiLAeQNF0NR2smNP62zYHfI3ZP68hV3zf6WzxuX33e9+j/YXMDl4i
h+qyVD7W5lGeU6h8LERTEohFqV4e0X7qvpIUmjmtjZ0w
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org