Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/GL6bw26a0r8QcgL2pfGsmBTqOgk.roa
File: GL6bw26a0r8QcgL2pfGsmBTqOgk.roa (raw, json)
Hash identifier: bqSK+2LUW9JjUDPw4FKEoJYx/RcQT+cyalDYacTb5kA=
Subject key identifier: 18:BE:9B:C3:6E:9A:D2:BF:10:72:02:F6:A5:F1:AC:98:14:EA:3A:09
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01856E143651C95AB2042B5A9AC66C5DDD49
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/GL6bw26a0r8QcgL2pfGsmBTqOgk.roa
Signing time: Sun 01 Jan 2023 16:04:56 +0000
ROA not before: Sun 01 Jan 2023 16:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9192
IP address blocks: 91.126.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:36:51:c9:5a:b2:04:2b:5a:9a:c6:6c:5d:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 1 16:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18be9bc36e9ad2bf107202f6a5f1ac9814ea3a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:3b:33:c1:76:d2:c4:c8:61:bf:b6:77:7e:
10:ae:fd:f4:52:35:86:4e:4c:00:fe:51:08:b0:a7:
26:bc:33:05:fa:ea:e0:25:e5:e4:71:54:b5:c0:2a:
7f:1a:c0:1a:fb:57:7d:37:d8:d5:e3:7a:cc:fa:f7:
14:63:c7:6f:02:f5:5b:4c:49:70:d5:ea:ed:3d:16:
68:97:75:91:b7:8b:b2:c7:84:e8:36:4c:9a:c9:ea:
b3:a7:4d:18:46:fd:76:45:d9:d8:68:b6:fe:71:49:
22:b4:7d:43:a3:d6:6e:1c:bd:24:15:2e:8c:fa:a4:
43:77:34:45:45:41:d8:b3:ce:b2:39:c5:86:bb:fc:
ce:8a:8d:d4:be:5e:ec:fb:82:56:a1:e2:ce:20:57:
2b:b3:d0:90:68:ac:eb:69:e5:23:b8:10:aa:9f:49:
d6:35:5d:14:69:9c:e0:ed:80:bf:5f:6c:5e:e5:bc:
22:8e:34:9a:25:0a:e0:d9:14:49:63:90:44:45:2e:
d2:39:9d:79:55:c4:23:82:80:89:e7:82:51:55:10:
64:e0:53:61:6f:b0:b4:0d:99:e2:51:c9:e4:f5:ff:
09:28:d4:27:a2:de:bb:1a:f7:90:35:04:01:4c:32:
59:4f:cc:4c:46:ba:93:e8:04:1d:01:d5:9e:fa:ba:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:9B:C3:6E:9A:D2:BF:10:72:02:F6:A5:F1:AC:98:14:EA:3A:09
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/GL6bw26a0r8QcgL2pfGsmBTqOgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.78.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4a:ae:b8:2f:8b:12:00:b6:a9:02:f0:eb:6e:d6:7e:38:0a:
18:e1:77:cf:66:9d:41:e6:e4:46:ba:50:d3:b8:e0:bf:87:ed:
12:5e:ab:7e:58:33:02:9f:22:99:d3:9e:2b:b2:3a:fd:a7:97:
17:42:da:62:d0:49:5e:a9:23:77:fe:f3:ce:a6:68:29:d4:64:
a2:27:09:a3:64:b8:9c:43:f7:be:12:34:36:55:78:1a:41:b3:
fd:1b:27:e4:9c:ea:ef:82:2e:e9:59:f2:a8:6a:7b:f9:4d:96:
64:ed:cf:dd:64:6e:e1:93:f6:26:f5:44:2a:c3:1d:cc:b3:8e:
25:86:1b:7a:07:dd:c1:fa:88:29:83:6d:65:b0:d5:ff:95:60:
09:5d:04:4c:2b:53:39:d1:ba:f5:db:52:8f:0d:e0:5a:c4:71:
50:60:fe:ab:4c:0d:c5:80:a7:58:a6:48:09:f2:b2:3a:ce:8d:
71:82:b7:60:48:1b:d2:5f:c5:ad:53:f8:09:19:8d:50:75:60:
04:17:5b:65:62:27:6e:7e:bb:ab:1e:c0:08:f8:7b:53:09:34:
8e:26:fc:c0:e5:4b:36:23:c4:a1:fc:b1:ba:0f:82:11:01:50:
ce:36:01:7a:4c:81:e6:15:2a:cf:4c:e4:58:03:a4:9a:9e:de:
3e:53:f1:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFDZRyVqyBCtamsZsXd1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1
NGFiMWMwHhcNMjMwMTAxMTYwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGJlOWJjMzZlOWFkMmJmMTA3MjAyZjZhNWYxYWM5ODE0ZWEzYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2E7M8F20sTIYb+2d34Qrv30UjWG
TkwA/lEIsKcmvDMF+urgJeXkcVS1wCp/GsAa+1d9N9jV43rM+vcUY8dvAvVbTElw
1ertPRZol3WRt4uyx4ToNkyayeqzp00YRv12RdnYaLb+cUkitH1Do9ZuHL0kFS6M
+qRDdzRFRUHYs86yOcWGu/zOio3Uvl7s+4JWoeLOIFcrs9CQaKzraeUjuBCqn0nW
NV0UaZzg7YC/X2xe5bwijjSaJQrg2RRJY5BERS7SOZ15VcQjgoCJ54JRVRBk4FNh
b7C0DZniUcnk9f8JKNQnot67GveQNQQBTDJZT8xMRrqT6AQdAdWe+rrZfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBi+m8NumtK/EHIC9qXxrJgU6joJMB8GA1UdIwQY
MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt
N2Q0YmIyMzgwNDg3LzEvR0w2YncyNmEwcjhRY2dMMnBmR3NtQlRxT2drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3
LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW35OMA0G
CSqGSIb3DQEBCwUAA4IBAQB5Sq64L4sSALapAvDrbtZ+OAoY4XfPZp1B5uRGulDT
uOC/h+0SXqt+WDMCnyKZ054rsjr9p5cXQtpi0EleqSN3/vPOpmgp1GSiJwmjZLic
Q/e+EjQ2VXgaQbP9GyfknOrvgi7pWfKoanv5TZZk7c/dZG7hk/Ym9UQqwx3Ms44l
hht6B93B+ogpg21lsNX/lWAJXQRMK1M50br121KPDeBaxHFQYP6rTA3FgKdYpkgJ
8rI6zo1xgrdgSBvSX8WtU/gJGY1QdWAEF1tlYidufrurHsAI+HtTCTSOJvzA5Us2
I8Sh/LG6D4IRAVDONgF6TIHmFSrPTORYA6Sant4+U/FB
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:37 2024 by rpki-client on console-fra.rpki-client.org