Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/aGz4lznnnBAtAZzNyN2R2ZCM-24.roa
File: aGz4lznnnBAtAZzNyN2R2ZCM-24.roa (raw, json)
Hash identifier: kyV49WcjITGP2DIU9XSrOY7sZM5s3xiI+A7XevDcZUE=
Subject key identifier: 68:6C:F8:97:39:E7:9C:10:2D:01:9C:CD:C8:DD:91:D9:90:8C:FB:6E
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 018FF0EA736148355FC82F3474B3BF8D3CCD
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/aGz4lznnnBAtAZzNyN2R2ZCM-24.roa
Signing time: Fri 07 Jun 2024 04:17:27 +0000
ROA not before: Fri 07 Jun 2024 04:17:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.198.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 14:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f0:ea:73:61:48:35:5f:c8:2f:34:74:b3:bf:8d:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Jun 7 04:17:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=686cf89739e79c102d019ccdc8dd91d9908cfb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:89:24:d1:54:03:01:47:f2:cd:2f:2c:86:
c0:d5:8e:44:73:6f:60:fa:c5:b5:a8:b3:e6:a7:2c:
1b:2d:df:8f:99:13:d2:bc:a5:1e:66:7b:dd:9c:a1:
16:5d:e2:e5:c9:a1:39:87:a9:1f:b4:c7:41:81:cb:
06:cf:4f:1e:de:4e:a9:7d:63:6a:68:00:70:2c:23:
88:bf:fc:ee:d5:83:c3:46:38:cf:60:f0:f4:23:9d:
4e:91:25:70:78:e9:78:25:d4:7d:44:08:54:04:9f:
79:fe:29:5f:ef:e1:c5:ea:c5:83:e8:fc:e9:ca:10:
c1:c4:91:30:a5:ff:a3:ff:10:f9:e4:fe:13:e4:62:
a2:3c:e6:6b:c7:fc:05:e9:d5:c3:dd:fa:a0:f4:43:
cc:ae:dd:56:2a:11:ef:0a:ce:60:ab:04:5c:32:28:
90:2e:39:95:b9:2f:e2:ff:ea:3c:33:b5:96:0c:99:
97:46:0a:a9:b0:48:b9:63:06:61:41:88:c9:0d:35:
fd:e3:a5:1d:e5:02:69:62:98:c2:de:ee:6e:b1:87:
df:8d:26:18:ce:7a:8e:b3:af:95:ce:f4:ff:b1:21:
51:a2:f1:f6:f1:86:95:dd:86:43:08:a8:43:80:e4:
3e:e5:88:db:bc:e9:c4:cd:ed:21:b4:f2:36:ee:98:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6C:F8:97:39:E7:9C:10:2D:01:9C:CD:C8:DD:91:D9:90:8C:FB:6E
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/aGz4lznnnBAtAZzNyN2R2ZCM-24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.95.0/24
Signature Algorithm: sha256WithRSAEncryption
93:59:56:07:bd:0d:bf:01:28:7e:b2:b3:88:38:08:89:19:d5:
88:d2:ca:27:2c:29:d2:aa:24:f2:12:59:8c:75:74:d3:74:a0:
c8:07:25:dc:93:dc:be:d4:04:5b:14:63:d7:97:7c:dc:55:79:
1e:1e:92:a5:24:b6:1e:b5:9f:17:f5:fa:3d:2e:90:90:b4:de:
1b:ff:d8:82:f5:60:83:06:43:1e:4e:75:c7:ef:5c:ae:02:dc:
9a:be:64:ed:62:bd:a2:43:c2:9a:8e:d7:99:90:49:ff:1e:d4:
cc:cd:4a:b3:34:83:30:eb:f4:ad:08:d3:44:ea:59:25:3c:6d:
42:7d:9a:39:5d:86:6c:1d:8c:40:40:89:2c:8b:aa:fe:5f:f4:
5a:1b:e3:f4:65:b3:e7:b4:ae:7b:e2:d9:cd:36:59:7a:5b:2c:
4d:e5:d6:ab:99:c3:0b:8f:42:34:75:2e:4d:4d:44:20:66:7a:
a8:d1:8b:cb:c3:6b:9d:0e:ca:a5:1c:92:30:8e:f9:8f:5e:9a:
b3:aa:3d:3b:79:8e:0b:c6:8f:1e:9b:6e:7c:fe:01:42:ca:5e:
b8:35:03:d9:3f:e3:88:19:43:8f:66:22:e5:1f:22:5d:21:d5:
63:2a:2a:20:ee:e7:9f:f5:6e:e0:1a:9a:9b:95:58:a8:e3:30:
b6:f0:4e:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/w6nNhSDVfyC80dLO/jTzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3
MjRlODIwHhcNMjQwNjA3MDQxNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODZjZjg5NzM5ZTc5YzEwMmQwMTljY2RjOGRkOTFkOTkwOGNmYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveeJJNFUAwFH8s0vLIbA1Y5Ec29g
+sW1qLPmpywbLd+PmRPSvKUeZnvdnKEWXeLlyaE5h6kftMdBgcsGz08e3k6pfWNq
aABwLCOIv/zu1YPDRjjPYPD0I51OkSVweOl4JdR9RAhUBJ95/ilf7+HF6sWD6Pzp
yhDBxJEwpf+j/xD55P4T5GKiPOZrx/wF6dXD3fqg9EPMrt1WKhHvCs5gqwRcMiiQ
LjmVuS/i/+o8M7WWDJmXRgqpsEi5YwZhQYjJDTX946Ud5QJpYpjC3u5usYffjSYY
znqOs6+VzvT/sSFRovH28YaV3YZDCKhDgOQ+5YjbvOnEze0htPI27pgGnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhs+Jc555wQLQGczcjdkdmQjPtuMB8GA1UdIwQY
MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt
Yjc3NmEyMjA0NTZiLzEvYUd6NGx6bm5uQkF0QVp6TnlOMlIyWkNNLTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi
LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZfMA0G
CSqGSIb3DQEBCwUAA4IBAQCTWVYHvQ2/ASh+srOIOAiJGdWI0sonLCnSqiTyElmM
dXTTdKDIByXck9y+1ARbFGPXl3zcVXkeHpKlJLYetZ8X9fo9LpCQtN4b/9iC9WCD
BkMeTnXH71yuAtyavmTtYr2iQ8KajteZkEn/HtTMzUqzNIMw6/StCNNE6lklPG1C
fZo5XYZsHYxAQIksi6r+X/RaG+P0ZbPntK574tnNNll6WyxN5darmcMLj0I0dS5N
TUQgZnqo0YvLw2udDsqlHJIwjvmPXpqzqj07eY4Lxo8em258/gFCyl64NQPZP+OI
GUOPZiLlHyJdIdVjKiog7uef9W7gGpqblVio4zC28E7U
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:03 2025 by rpki-client