Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/joTRUN8WRqfY11dz_Q2mYSLEK2E.roa
File: joTRUN8WRqfY11dz_Q2mYSLEK2E.roa (raw, json)
Hash identifier: Z+VmUv1jRIm35Q8PNTs4nP9RacpJR2u81Miutg4YTp0=
Subject key identifier: 8E:84:D1:50:DF:16:46:A7:D8:D7:57:73:FD:0D:A6:61:22:C4:2B:61
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019272CE8C4DF45874388DC54F23FB0B385B
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/joTRUN8WRqfY11dz_Q2mYSLEK2E.roa
Signing time: Wed 09 Oct 2024 19:43:11 +0000
ROA not before: Wed 09 Oct 2024 19:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 91.196.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 18 Oct 2024 09:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:ce:8c:4d:f4:58:74:38:8d:c5:4f:23:fb:0b:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Oct 9 19:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e84d150df1646a7d8d75773fd0da66122c42b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:0d:33:32:59:8f:56:d1:11:24:62:1e:ac:
b6:e9:b4:f9:22:d5:e0:64:27:0c:3a:aa:6a:83:1d:
13:c9:83:09:77:dc:54:2e:e1:23:d7:c5:26:40:32:
e2:6a:f9:78:42:57:5c:b6:e4:88:06:96:2c:72:d0:
83:df:b9:b8:1a:0c:40:a3:e7:42:58:84:54:2b:fc:
52:d8:c6:de:54:40:0b:b9:0f:79:4d:e4:c5:72:44:
40:e2:f2:9e:d6:a5:5b:8e:ad:67:ea:c1:8c:d4:44:
69:67:ba:fd:30:91:d2:5b:41:31:a7:7b:51:af:9b:
c6:38:44:35:cd:19:72:6d:88:b8:81:43:9d:b3:b9:
2c:fd:f7:03:58:aa:24:6b:bc:c2:6e:c6:ae:fc:11:
e9:d6:c8:9c:d1:18:fc:9e:dc:96:36:af:ef:d1:6a:
11:59:ad:80:d7:b6:e4:ac:08:d3:54:55:33:7b:18:
32:70:0e:d4:84:92:34:cc:84:c2:d8:3d:0b:26:7d:
2b:ca:cc:db:c4:de:20:8f:1f:9a:ea:a4:c5:fe:68:
df:f8:4d:d4:f8:77:69:60:9b:fa:8a:0a:4c:b9:dc:
70:9a:9f:fb:03:40:2d:6e:5d:ce:98:4f:34:10:7d:
92:34:fd:67:d7:c2:5d:9e:64:3a:bc:c9:b2:c3:af:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:D1:50:DF:16:46:A7:D8:D7:57:73:FD:0D:A6:61:22:C4:2B:61
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/joTRUN8WRqfY11dz_Q2mYSLEK2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.160.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f4:80:29:96:ee:fa:84:84:f3:e1:73:e9:07:37:fb:c9:6d:
3c:00:f1:b6:a6:13:d3:d3:7c:48:82:c1:ca:8d:ae:3b:43:ad:
fb:ae:d9:56:a8:08:f7:8a:90:ac:43:26:b0:11:f3:1a:24:89:
2d:0a:cb:f9:f5:c9:ea:9d:ec:9f:3f:ed:35:68:60:0c:11:3e:
a0:9e:c9:2f:3b:da:77:f2:fa:3e:2d:8a:24:71:9b:35:4f:fa:
d1:89:82:c3:90:aa:e4:a5:34:57:13:fe:69:fe:28:64:a3:cf:
7e:76:81:7f:ab:31:00:28:bd:f0:f9:d7:51:4a:ed:d5:0e:05:
c4:30:d3:bd:32:ab:f3:72:62:59:77:0f:81:47:99:a3:49:4d:
91:6b:db:59:2c:35:1d:0f:9f:f8:ef:39:c5:80:fb:6f:e5:3a:
a1:32:89:8b:ac:ac:a4:c7:bb:84:7d:90:17:14:90:48:e6:5e:
1b:bd:bf:0d:59:f5:a1:45:04:5e:17:0c:1f:8b:e6:96:c7:11:
c1:2a:d5:38:e0:c3:5d:66:6b:60:2e:46:8e:9a:ee:db:87:44:
27:4a:45:ed:b6:b2:2a:d3:32:92:b6:01:fa:89:c1:3d:c2:26:
69:ab:43:7b:c0:0a:f6:10:7a:5a:36:8f:b6:61:d1:ed:e9:e0:
75:8b:40:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJyzoxN9Fh0OI3FTyP7CzhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjQxMDA5MTk0MzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTg0ZDE1MGRmMTY0NmE3ZDhkNzU3NzNmZDBkYTY2MTIyYzQyYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFINMzJZj1bRESRiHqy26bT5ItXg
ZCcMOqpqgx0TyYMJd9xULuEj18UmQDLiavl4QldctuSIBpYsctCD37m4GgxAo+dC
WIRUK/xS2MbeVEALuQ95TeTFckRA4vKe1qVbjq1n6sGM1ERpZ7r9MJHSW0Exp3tR
r5vGOEQ1zRlybYi4gUOds7ks/fcDWKoka7zCbsau/BHp1sic0Rj8ntyWNq/v0WoR
Wa2A17bkrAjTVFUzexgycA7UhJI0zITC2D0LJn0ryszbxN4gjx+a6qTF/mjf+E3U
+HdpYJv6igpMudxwmp/7A0Atbl3OmE80EH2SNP1n18JdnmQ6vMmyw6/n3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6E0VDfFkan2NdXc/0NpmEixCthMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvam9UUlVOOFdScWZZMTFkel9RMm1ZU0xFSzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8SgMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ9IAplu76hITz4XPpBzf7yW08APG2phPT03xIgsHK
ja47Q637rtlWqAj3ipCsQyawEfMaJIktCsv59cnqneyfP+01aGAMET6gnskvO9p3
8vo+LYokcZs1T/rRiYLDkKrkpTRXE/5p/ihko89+doF/qzEAKL3w+ddRSu3VDgXE
MNO9MqvzcmJZdw+BR5mjSU2Ra9tZLDUdD5/47znFgPtv5TqhMomLrKykx7uEfZAX
FJBI5l4bvb8NWfWhRQReFwwfi+aWxxHBKtU44MNdZmtgLkaOmu7bh0QnSkXttrIq
0zKStgH6icE9wiZpq0N7wAr2EHpaNo+2YdHt6eB1i0Bs
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:34 2025 by rpki-client