Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/uyMFxCzP3H0q-Kov7t2Y4HZsk6I.roa
File: uyMFxCzP3H0q-Kov7t2Y4HZsk6I.roa (raw, json)
Hash identifier: YdjQ6eaqiWj4/rzoGIsRlSK1kd7AWkY0F37Pn+dH3Lk=
Subject key identifier: BB:23:05:C4:2C:CF:DC:7D:2A:F8:AA:2F:EE:DD:98:E0:76:6C:93:A2
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 01856CC179EDCC3CF0B949C17979B3886C05
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/uyMFxCzP3H0q-Kov7t2Y4HZsk6I.roa
Signing time: Sun 01 Jan 2023 09:54:57 +0000
ROA not before: Sun 01 Jan 2023 09:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50321
IP address blocks: 91.238.104.0/23 maxlen: 23
91.238.105.0/24 maxlen: 24
2001:67c:1528::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:79:ed:cc:3c:f0:b9:49:c1:79:79:b3:88:6c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jan 1 09:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb2305c42ccfdc7d2af8aa2feedd98e0766c93a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:77:fb:dc:90:8c:60:5f:e7:52:ca:d1:76:
8a:11:fd:0e:28:71:71:c0:70:e8:de:05:9b:28:d3:
2e:68:14:24:e2:b7:c7:b4:38:36:e7:2e:bd:70:a2:
df:d7:c3:9e:ee:cd:26:de:78:f4:7e:17:40:fd:9f:
d5:26:e5:be:ab:d9:6c:40:ba:51:31:10:dc:8c:e4:
21:13:80:e9:4c:24:79:32:61:e4:4f:95:5a:97:eb:
01:4a:82:83:25:cb:c5:38:88:8d:f3:19:dc:bd:da:
08:5d:dd:4e:3a:45:8b:96:e4:57:80:62:b6:b1:d5:
fe:c0:03:77:92:39:ac:e2:d9:b5:55:b0:fe:eb:75:
5c:ff:86:7a:21:6d:ee:22:c0:41:94:1e:a6:1b:a1:
fe:e6:68:eb:55:22:9f:4f:71:de:59:ed:56:b3:7d:
3f:ea:72:bf:1a:1f:6a:e7:9b:73:a1:20:2e:f7:6f:
a0:e9:3d:cd:3b:4f:b4:e3:e2:f8:16:d8:fe:b4:c8:
2c:c2:bb:6e:b7:03:f3:2f:85:cb:a8:1f:03:6c:ee:
99:a1:ee:16:9f:42:0b:c5:91:29:80:b9:17:a0:6c:
7b:03:8c:77:f7:27:b3:f7:bc:0c:2d:ce:0d:be:bc:
f4:30:3b:03:40:01:44:52:98:b2:aa:0f:33:6b:1c:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:05:C4:2C:CF:DC:7D:2A:F8:AA:2F:EE:DD:98:E0:76:6C:93:A2
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/uyMFxCzP3H0q-Kov7t2Y4HZsk6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.104.0/23
IPv6:
2001:67c:1528::/48
Signature Algorithm: sha256WithRSAEncryption
4c:48:9e:6e:56:48:25:ab:7a:e6:73:eb:e3:f7:70:b6:69:ff:
04:fe:7c:ab:00:df:13:6b:ef:ba:14:84:b3:37:55:bc:fc:59:
0c:8f:ca:59:4a:43:5d:bd:5e:d9:03:e5:17:3a:2f:e6:af:ba:
64:39:43:f6:99:72:60:9f:f9:f1:22:5c:0f:9e:a6:16:9a:43:
db:bb:21:0f:74:52:27:f7:7a:55:60:ae:17:b0:c5:c9:ce:1b:
d7:7c:54:05:42:ac:89:5b:0c:78:65:cb:36:61:69:22:34:f9:
ab:ae:37:bd:3d:2a:4a:40:e7:d0:27:eb:70:02:e6:a6:88:56:
f5:e4:91:fa:d2:c6:cf:1b:ff:b1:8f:0c:ab:4f:b0:90:31:fd:
87:f5:e9:91:21:46:6a:d1:c3:48:3d:ee:41:37:90:11:86:5b:
cb:b1:f7:64:25:e7:5d:f1:87:a9:8b:69:5c:ad:d3:f6:1b:db:
ce:15:f3:73:5e:e1:10:c7:5b:f7:26:f5:1c:81:3c:e9:7d:cc:
c2:0d:4e:b7:fc:35:af:15:e0:ae:9e:4d:c9:5b:b1:49:e9:4c:
4a:e8:9e:c0:6b:36:28:1a:3b:f2:d2:e9:53:25:2a:18:32:12:
b5:d3:22:a2:22:ec:dd:ec:cb:56:ae:23:66:6b:69:2c:7b:08:
da:59:a5:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVswXntzDzwuUnBeXmziGwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4
NTgyNmUwHhcNMjMwMTAxMDk1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjIzMDVjNDJjY2ZkYzdkMmFmOGFhMmZlZWRkOThlMDc2NmM5M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzON3+9yQjGBf51LK0XaKEf0OKHFx
wHDo3gWbKNMuaBQk4rfHtDg25y69cKLf18Oe7s0m3nj0fhdA/Z/VJuW+q9lsQLpR
MRDcjOQhE4DpTCR5MmHkT5Val+sBSoKDJcvFOIiN8xncvdoIXd1OOkWLluRXgGK2
sdX+wAN3kjms4tm1VbD+63Vc/4Z6IW3uIsBBlB6mG6H+5mjrVSKfT3HeWe1Ws30/
6nK/Gh9q55tzoSAu92+g6T3NO0+04+L4Ftj+tMgswrtutwPzL4XLqB8DbO6Zoe4W
n0ILxZEpgLkXoGx7A4x39yez97wMLc4Nvrz0MDsDQAFEUpiyqg8zaxy0TQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLsjBcQsz9x9KviqL+7dmOB2bJOiMB8GA1UdIwQY
MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut
OTY1ZmFjOTc3NzIxLzEvdXlNRnhDelAzSDBxLUtvdjd0Mlk0SFpzazZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx
LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+5oMA8E
AgACMAkDBwAgAQZ8FSgwDQYJKoZIhvcNAQELBQADggEBAExInm5WSCWreuZz6+P3
cLZp/wT+fKsA3xNr77oUhLM3Vbz8WQyPyllKQ129XtkD5Rc6L+avumQ5Q/aZcmCf
+fEiXA+ephaaQ9u7IQ90Uif3elVgrhewxcnOG9d8VAVCrIlbDHhlyzZhaSI0+auu
N709KkpA59An63AC5qaIVvXkkfrSxs8b/7GPDKtPsJAx/Yf16ZEhRmrRw0g97kE3
kBGGW8ux92Ql513xh6mLaVyt0/Yb284V83Ne4RDHW/cm9RyBPOl9zMINTrf8Na8V
4K6eTclbsUnpTEronsBrNigaO/LS6VMlKhgyErXTIqIi7N3sy1auI2ZraSx7CNpZ
pZ0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:48 2024 by rpki-client on console-ams.rpki-client.org