Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/sY4gkWlCdjqKBMWUbXCLOeolBo8.roa
File: sY4gkWlCdjqKBMWUbXCLOeolBo8.roa (raw, json)
Hash identifier: A6ttb4ruI08jhGINsOikL/RFGz765agAuL92QFPT+IA=
Subject key identifier: B1:8E:20:91:69:42:76:3A:8A:04:C5:94:6D:70:8B:39:EA:25:06:8F
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 018D1D8B670DEBEC1B0485805D3CE76BB8EF
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/sY4gkWlCdjqKBMWUbXCLOeolBo8.roa
Signing time: Thu 18 Jan 2024 17:08:11 +0000
ROA not before: Thu 18 Jan 2024 17:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16190
IP address blocks: 91.218.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:8b:67:0d:eb:ec:1b:04:85:80:5d:3c:e7:6b:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Jan 18 17:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b18e20916942763a8a04c5946d708b39ea25068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:1c:0a:3b:35:5b:c4:56:79:54:ef:f6:53:
f8:a3:99:4a:ab:a7:2f:7e:db:d6:5f:be:cd:e8:a6:
45:8f:b1:51:8a:fd:ec:6a:85:b9:52:14:37:d5:b9:
d4:2e:cf:2a:a7:2e:a3:07:2f:4c:5b:df:b1:cb:43:
07:84:f3:59:ac:30:dc:b9:76:11:22:8d:6b:69:17:
7d:bd:9c:49:a9:2d:f8:85:e2:89:b3:df:e4:40:2c:
91:04:83:7a:eb:0f:4b:34:37:c8:02:8b:c2:e6:d9:
73:72:6e:a5:e6:e5:5a:fb:a0:33:19:56:51:0f:11:
f9:39:1e:e6:b4:d7:35:21:82:38:da:62:21:3e:bc:
86:58:ef:c1:08:51:fa:4c:8f:62:e5:6b:54:11:cb:
45:6d:98:c7:15:a6:38:d4:89:d3:70:0b:0b:f2:e8:
c8:c0:01:16:a8:1c:9a:b8:67:f8:e2:0c:f2:f4:17:
94:8c:df:58:24:35:42:7f:03:da:fa:d1:64:bd:e1:
17:95:7d:69:07:d6:f3:22:d9:f6:be:55:3f:53:0a:
51:10:c8:b4:e4:d0:14:24:e8:b4:a0:ee:3d:f1:b7:
79:f4:12:67:04:ba:36:df:39:d7:94:99:e4:8c:72:
2e:7a:66:f3:1e:a4:c8:74:2b:79:85:53:12:97:f3:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:20:91:69:42:76:3A:8A:04:C5:94:6D:70:8B:39:EA:25:06:8F
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/sY4gkWlCdjqKBMWUbXCLOeolBo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:c0:7a:1a:86:f5:7d:26:39:73:f9:d0:91:67:c8:60:76:5e:
63:ac:38:35:0e:ca:4c:e3:e4:bb:d2:32:64:a8:e8:ba:af:4a:
aa:53:ed:06:ca:36:99:9b:08:c6:a5:13:25:9d:8a:e9:59:0c:
3b:42:80:6d:aa:9c:e3:fe:ea:0f:0e:aa:79:e2:56:0d:d5:92:
18:07:7d:37:7b:51:e0:d3:01:ef:2b:03:f5:bc:5b:62:ed:cb:
8f:1c:d0:7e:f9:f1:e9:37:a8:ea:62:29:bd:2e:e2:e5:53:dc:
ba:36:87:b3:7e:1c:65:40:d1:21:45:52:dc:6b:c9:50:2c:6e:
10:ce:70:82:e0:d1:5b:9b:e6:ac:80:f6:96:98:a3:2e:13:ff:
07:19:a5:9c:4f:31:04:a2:20:32:b7:db:e8:fa:c3:b7:f9:9c:
70:ff:48:ab:25:3f:33:e9:a5:71:47:5f:5f:ca:25:21:22:dc:
a8:fe:c4:f5:ce:97:9b:0d:e9:af:73:fd:15:98:a0:20:43:3a:
05:ec:f4:77:44:92:86:e4:b8:b9:63:f9:99:3d:99:7f:86:1b:
80:2e:f0:d0:2a:98:56:88:08:21:87:ae:95:07:66:0d:c3:07:
33:35:ac:67:e0:d6:ce:79:0f:30:05:c4:47:3b:6a:f7:c5:01:
f5:d6:c6:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0di2cN6+wbBIWAXTzna7jvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDMwYmExMTUwNjc0MWQ2NzZlYTIwMmUyOTFlYzdlYzYx
OTFiMTcwHhcNMjQwMTE4MTcwODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThlMjA5MTY5NDI3NjNhOGEwNGM1OTQ2ZDcwOGIzOWVhMjUwNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJQcCjs1W8RWeVTv9lP4o5lKq6cv
ftvWX77N6KZFj7FRiv3saoW5UhQ31bnULs8qpy6jBy9MW9+xy0MHhPNZrDDcuXYR
Io1raRd9vZxJqS34heKJs9/kQCyRBIN66w9LNDfIAovC5tlzcm6l5uVa+6AzGVZR
DxH5OR7mtNc1IYI42mIhPryGWO/BCFH6TI9i5WtUEctFbZjHFaY41InTcAsL8ujI
wAEWqByauGf44gzy9BeUjN9YJDVCfwPa+tFkveEXlX1pB9bzItn2vlU/UwpREMi0
5NAUJOi0oO498bd59BJnBLo23znXlJnkjHIuembzHqTIdCt5hVMSl/OO+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGOIJFpQnY6igTFlG1wiznqJQaPMB8GA1UdIwQY
MBaAFLRDC6EVBnQdZ26iAuKR7H7GGRsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82MGNjZmEtMDkzMC00NmI0LTgzMTct
ZjhjYTljYjYzMzE3LzEvc1k0Z2tXbENkanFLQk1XVWJYQ0xPZW9sQm84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82MGNjZmEtMDkzMC00NmI0LTgzMTctZjhjYTljYjYzMzE3
LzEvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9oEMA0G
CSqGSIb3DQEBCwUAA4IBAQC4wHoahvV9Jjlz+dCRZ8hgdl5jrDg1DspM4+S70jJk
qOi6r0qqU+0GyjaZmwjGpRMlnYrpWQw7QoBtqpzj/uoPDqp54lYN1ZIYB303e1Hg
0wHvKwP1vFti7cuPHNB++fHpN6jqYim9LuLlU9y6NoezfhxlQNEhRVLca8lQLG4Q
znCC4NFbm+asgPaWmKMuE/8HGaWcTzEEoiAyt9vo+sO3+Zxw/0irJT8z6aVxR19f
yiUhItyo/sT1zpebDemvc/0VmKAgQzoF7PR3RJKG5Li5Y/mZPZl/hhuALvDQKphW
iAghh66VB2YNwwczNaxn4NbOeQ8wBcRHO2r3xQH11sbO
Generated at Sat Jan 20 22:08:32 2024 by rpki-client on console-ams.rpki-client.org