Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DqBl3VbRa0VLsj5a9TAayR63-HQ.roa
File: DqBl3VbRa0VLsj5a9TAayR63-HQ.roa (raw, json)
Hash identifier: SF6rOGOOJ8QdBekAAZBNd5KLN4FoMR0/YZSSX5gtH3w=
Subject key identifier: 0E:A0:65:DD:56:D1:6B:45:4B:B2:3E:5A:F5:30:1A:C9:1E:B7:F8:74
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018C6D62467DC1BD2862825589140BDCAC4F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DqBl3VbRa0VLsj5a9TAayR63-HQ.roa
Signing time: Fri 15 Dec 2023 12:10:06 +0000
ROA not before: Fri 15 Dec 2023 12:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.229.134.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 08:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:62:46:7d:c1:bd:28:62:82:55:89:14:0b:dc:ac:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Dec 15 12:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ea065dd56d16b454bb23e5af5301ac91eb7f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:4f:81:bb:34:d7:09:65:37:0e:a3:9d:21:
f7:bf:e0:30:18:6f:28:91:80:bb:18:37:51:91:b7:
b4:1f:cb:2c:53:84:84:2c:ab:74:78:0f:44:c6:33:
e3:4c:99:86:7b:fa:52:1a:6e:5e:75:c9:0c:cc:23:
40:7b:e6:e0:89:95:7d:43:3a:26:46:b9:22:14:c2:
ae:4a:11:79:d7:ae:95:aa:7f:fe:45:e3:dc:d9:43:
1f:0f:8a:a8:d1:05:65:e8:97:69:97:05:13:d8:0b:
22:04:57:18:91:4f:10:fe:e1:b6:19:07:f8:61:ec:
2e:4d:1a:a6:0f:a5:2e:45:e1:53:a7:ef:46:a9:fc:
64:1d:7e:d8:64:53:fb:27:85:f5:36:04:3d:66:78:
08:71:c2:4d:b6:71:8e:66:8c:c2:00:71:03:34:8e:
12:2b:5b:e7:3b:b5:bc:b0:1c:43:4a:d9:2a:63:86:
51:0f:26:db:d5:44:a2:fb:6b:a8:44:aa:89:73:59:
d4:de:5d:de:dd:63:fe:61:d8:e2:b6:4f:1f:e4:89:
5b:97:f7:ea:10:e8:ca:61:6f:32:03:b3:55:da:1b:
6a:33:26:6f:76:1c:2b:75:37:fc:f4:73:46:8d:52:
25:ed:2d:6d:5c:70:da:7d:2b:9d:75:48:e1:af:ab:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A0:65:DD:56:D1:6B:45:4B:B2:3E:5A:F5:30:1A:C9:1E:B7:F8:74
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DqBl3VbRa0VLsj5a9TAayR63-HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:b4:62:31:aa:fc:f7:55:20:ac:72:27:7c:7a:dd:e6:23:c7:
e5:5a:bc:82:87:07:81:45:5b:bc:83:00:fb:5b:19:9f:f3:d7:
05:ee:51:6f:a5:fa:79:e8:f6:9d:bb:29:da:b5:2a:17:43:c6:
60:c0:4f:b9:75:91:55:01:4e:42:4d:75:44:72:c0:24:3d:36:
67:1a:ee:1c:37:16:49:4a:89:3d:24:39:64:50:0c:11:b9:5c:
ac:b5:19:21:ff:a0:c1:67:7e:8b:e0:30:73:66:ba:48:a4:d7:
dd:3f:28:a4:42:ac:19:1d:7f:b4:f7:35:3f:f2:a1:dc:50:96:
94:93:4b:d6:8b:a4:ad:49:a4:49:d5:3b:fb:93:52:72:de:09:
18:ef:06:74:e5:c5:bd:c8:b7:ae:f2:8c:99:38:0f:de:71:99:
0a:24:4e:dd:61:a1:4e:35:55:09:4b:20:18:29:71:9c:b9:1d:
cc:c8:17:a5:0f:a3:a4:57:ff:c3:26:54:e3:42:11:9b:32:bc:
8e:3f:9f:3a:09:f1:1c:1e:73:f6:5a:3a:07:05:b0:22:87:09:
c9:4f:d7:6a:7e:90:60:8c:a5:aa:3c:55:8f:22:24:8e:02:c5:
57:f0:97:7b:27:92:b6:9d:b8:78:f1:7b:64:34:9f:64:f1:bd:
ba:0d:5f:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxtYkZ9wb0oYoJViRQL3KxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMxMjE1MTIxMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWEwNjVkZDU2ZDE2YjQ1NGJiMjNlNWFmNTMwMWFjOTFlYjdmODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQhPgbs01wllNw6jnSH3v+AwGG8o
kYC7GDdRkbe0H8ssU4SELKt0eA9ExjPjTJmGe/pSGm5edckMzCNAe+bgiZV9Qzom
RrkiFMKuShF5166Vqn/+RePc2UMfD4qo0QVl6JdplwUT2AsiBFcYkU8Q/uG2GQf4
YewuTRqmD6UuReFTp+9GqfxkHX7YZFP7J4X1NgQ9ZngIccJNtnGOZozCAHEDNI4S
K1vnO7W8sBxDStkqY4ZRDybb1USi+2uoRKqJc1nU3l3e3WP+Ydjitk8f5Ilbl/fq
EOjKYW8yA7NV2htqMyZvdhwrdTf89HNGjVIl7S1tXHDafSuddUjhr6s3LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6gZd1W0WtFS7I+WvUwGsket/h0MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvRHFCbDNWYlJhMFZMc2o1YTlUQWF5UjYzLUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+WGMA0G
CSqGSIb3DQEBCwUAA4IBAQCxtGIxqvz3VSCscid8et3mI8flWryChweBRVu8gwD7
Wxmf89cF7lFvpfp56PaduynatSoXQ8ZgwE+5dZFVAU5CTXVEcsAkPTZnGu4cNxZJ
Sok9JDlkUAwRuVystRkh/6DBZ36L4DBzZrpIpNfdPyikQqwZHX+09zU/8qHcUJaU
k0vWi6StSaRJ1Tv7k1Jy3gkY7wZ05cW9yLeu8oyZOA/ecZkKJE7dYaFONVUJSyAY
KXGcuR3MyBelD6OkV//DJlTjQhGbMryOP586CfEcHnP2WjoHBbAihwnJT9dqfpBg
jKWqPFWPIiSOAsVX8Jd7J5K2nbh48XtkNJ9k8b26DV/G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org