Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/JG5uqPQlVVxoJ4uWtxWrdZlWZ04.roa
File: JG5uqPQlVVxoJ4uWtxWrdZlWZ04.roa (raw, json)
Hash identifier: Y/nxlniv0M7+1hILsbVomU1zRhWP5QV8/LJsgfkHbFU=
Subject key identifier: 24:6E:6E:A8:F4:25:55:5C:68:27:8B:96:B7:15:AB:75:99:56:67:4E
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 01856C4A7C5F761697857C2EACBD285831BB
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/JG5uqPQlVVxoJ4uWtxWrdZlWZ04.roa
Signing time: Sun 01 Jan 2023 07:44:58 +0000
ROA not before: Sun 01 Jan 2023 07:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57057
IP address blocks: 91.224.66.0/23 maxlen: 23
2a01:5741::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:7c:5f:76:16:97:85:7c:2e:ac:bd:28:58:31:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Jan 1 07:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=246e6ea8f425555c68278b96b715ab759956674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:7a:30:07:87:5d:27:12:37:7b:9b:ca:9d:
32:a4:6e:72:e5:93:ea:f7:a2:05:43:c8:4e:f3:89:
10:63:43:8d:26:5b:6d:7f:61:1d:d9:72:60:59:0a:
f3:ef:80:f2:9d:59:cd:1c:46:26:78:48:65:ca:2b:
6b:1c:b0:22:b8:e7:1a:ec:70:02:22:67:6e:0d:0a:
c1:d2:0b:16:d7:f6:93:7a:2a:25:e4:1b:d2:1f:84:
81:fe:26:e9:d9:1e:d8:75:58:2c:ed:3d:05:a4:85:
79:9c:f5:c6:28:26:8b:bd:d9:87:4a:27:7f:48:1d:
9f:0f:5c:64:f5:7a:73:98:e4:ee:83:0b:29:34:11:
76:7f:e7:80:1b:73:b8:83:98:08:86:0a:bc:69:60:
db:ae:06:f1:51:27:9e:fa:b7:78:73:95:f5:3e:d1:
3c:38:4f:21:1f:08:1d:69:dd:f7:96:31:b5:ac:7d:
a2:8b:65:4c:eb:ca:2c:1d:32:94:41:8a:72:08:89:
bc:2d:c5:dc:7a:19:41:aa:a8:38:79:98:ed:82:ed:
a1:3c:2b:86:f1:dc:ae:d9:04:98:d3:bc:36:54:6e:
a4:5b:17:43:98:cb:e4:d1:c7:40:6c:a4:84:7e:f9:
27:0a:ab:4f:cf:93:d3:72:47:9e:4e:cb:a4:8f:b9:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:6E:A8:F4:25:55:5C:68:27:8B:96:B7:15:AB:75:99:56:67:4E
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/JG5uqPQlVVxoJ4uWtxWrdZlWZ04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.66.0/23
IPv6:
2a01:5741::/32
Signature Algorithm: sha256WithRSAEncryption
b8:c1:94:d9:cb:1a:80:49:e3:ba:fb:a2:fa:9d:b4:23:6b:a4:
4f:62:c1:5d:09:fc:07:c9:05:df:0f:72:d6:b9:af:16:2d:2e:
16:ba:9f:0b:7b:96:5c:c7:92:e0:42:ef:f2:6d:d9:64:a3:14:
22:52:f9:12:85:b0:77:03:50:f6:19:41:c9:50:e8:04:14:84:
14:28:28:7d:b4:5d:17:41:53:16:df:a3:05:9f:ef:a3:bb:7e:
5d:82:11:b2:57:ec:12:61:59:15:80:a9:ef:29:43:de:79:e7:
c2:ad:59:21:b7:ab:85:c6:c6:9b:82:df:43:39:9d:5a:8b:3f:
c2:d6:0b:bb:e5:92:a4:24:b4:d9:e1:03:ef:07:7d:61:64:9f:
76:ed:48:91:81:9f:b2:9c:a7:e0:49:9b:77:6d:5e:47:2c:f7:
1d:8f:3e:bc:1a:8a:c0:8c:6e:26:f9:2e:c1:02:18:35:30:51:
a3:87:d1:a9:06:8c:97:7c:9c:e6:4e:ff:bd:9e:64:2b:f2:c4:
d7:c1:51:03:ec:5b:d1:c1:96:fa:7c:50:66:77:37:83:09:49:
11:32:a9:e3:40:6c:ca:b4:64:32:c7:f4:6d:f5:80:93:94:ef:
18:ad:95:33:06:dd:f0:b5:85:03:04:b3:31:3c:52:e6:6d:0f:
c3:8a:58:5e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsSnxfdhaXhXwurL0oWDG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOTIxYjZmZjFhYzQ0OWJhM2U3Zjg5MmNmMDgzMmQxY2Vi
N2Q0NjQwHhcNMjMwMTAxMDc0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZlNmVhOGY0MjU1NTVjNjgyNzhiOTZiNzE1YWI3NTk5NTY2NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqh6MAeHXScSN3ubyp0ypG5y5ZPq
96IFQ8hO84kQY0ONJlttf2Ed2XJgWQrz74DynVnNHEYmeEhlyitrHLAiuOca7HAC
ImduDQrB0gsW1/aTeiol5BvSH4SB/ibp2R7YdVgs7T0FpIV5nPXGKCaLvdmHSid/
SB2fD1xk9XpzmOTugwspNBF2f+eAG3O4g5gIhgq8aWDbrgbxUSee+rd4c5X1PtE8
OE8hHwgdad33ljG1rH2ii2VM68osHTKUQYpyCIm8LcXcehlBqqg4eZjtgu2hPCuG
8dyu2QSY07w2VG6kWxdDmMvk0cdAbKSEfvknCqtPz5PTckeeTsukj7n4jwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCRubqj0JVVcaCeLlrcVq3WZVmdOMB8GA1UdIwQY
MBaAFDGSG2/xrESbo+f4ks8IMtHOt9RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMt
OWQ3YTg4NzJiNDU0LzEvSkc1dXFQUWxWVnhvSjR1V3R4V3JkWmxXWjA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMtOWQ3YTg4NzJiNDU0
LzEvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBW+BCMA0E
AgACMAcDBQAqAVdBMA0GCSqGSIb3DQEBCwUAA4IBAQC4wZTZyxqASeO6+6L6nbQj
a6RPYsFdCfwHyQXfD3LWua8WLS4Wup8Le5Zcx5LgQu/ybdlkoxQiUvkShbB3A1D2
GUHJUOgEFIQUKCh9tF0XQVMW36MFn++ju35dghGyV+wSYVkVgKnvKUPeeefCrVkh
t6uFxsabgt9DOZ1aiz/C1gu75ZKkJLTZ4QPvB31hZJ927UiRgZ+ynKfgSZt3bV5H
LPcdjz68GorAjG4m+S7BAhg1MFGjh9GpBoyXfJzmTv+9nmQr8sTXwVED7FvRwZb6
fFBmdzeDCUkRMqnjQGzKtGQyx/Rt9YCTlO8YrZUzBt3wtYUDBLMxPFLmbQ/Dilhe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:52 2024 by rpki-client on console-ams.rpki-client.org