Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/b5l73xOGjjqbjaJdmWtgfSYsYLM.roa
File: b5l73xOGjjqbjaJdmWtgfSYsYLM.roa (raw, json)
Hash identifier: KoiUCYRQd8PTukoje5OOchWUo3+zHpM64f4baicRsJ4=
Subject key identifier: 6F:99:7B:DF:13:86:8E:3A:9B:8D:A2:5D:99:6B:60:7D:26:2C:60:B3
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01924C62AEFF28D17923378225E785F86951
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/b5l73xOGjjqbjaJdmWtgfSYsYLM.roa
Signing time: Wed 02 Oct 2024 08:39:48 +0000
ROA not before: Wed 02 Oct 2024 08:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 91.92.43.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:62:ae:ff:28:d1:79:23:37:82:25:e7:85:f8:69:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 2 08:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f997bdf13868e3a9b8da25d996b607d262c60b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:b3:98:98:65:f1:ad:42:d3:06:e7:57:27:
e6:32:79:f1:7f:52:f4:85:74:3a:f1:6a:02:e1:62:
a2:23:12:ab:05:f7:dd:d0:58:cf:64:e4:63:fe:f4:
88:7e:b0:5c:b1:2a:16:f5:97:c2:f1:5a:4b:c3:7f:
4d:86:d1:a7:40:6f:8e:de:ba:2f:a1:c0:45:6a:bc:
aa:10:c5:2d:50:4d:e8:37:64:2e:c5:52:2a:ee:af:
31:e8:b3:9e:95:54:ff:8a:6f:bd:42:ff:7b:ee:c6:
d8:a7:a6:77:f4:d8:5b:ca:35:43:7c:dd:5f:ad:20:
8e:9d:47:d1:06:3b:5c:3b:ee:50:a1:82:45:bd:10:
96:27:3f:fd:4f:ce:ee:3a:c6:97:9f:88:5b:89:e8:
5a:67:ba:f8:b1:a6:b4:49:b4:5b:d1:53:5b:86:48:
fc:05:c7:f8:00:ae:74:1c:d2:68:36:0f:f3:2e:e8:
ec:a5:56:9a:c9:af:db:fb:ae:81:3c:9d:0f:09:2e:
b7:96:53:d9:df:13:8d:c8:1a:f0:d4:e0:33:20:80:
04:ca:48:9d:96:83:92:65:27:88:34:30:da:04:0f:
44:ad:4e:f1:67:bc:d4:1a:0f:c5:97:b6:7e:92:45:
01:81:b2:6b:dd:61:73:3d:1a:9e:1d:f8:46:3a:97:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:7B:DF:13:86:8E:3A:9B:8D:A2:5D:99:6B:60:7D:26:2C:60:B3
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/b5l73xOGjjqbjaJdmWtgfSYsYLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.43.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:6f:44:99:23:8f:55:b7:b9:f6:6b:f4:26:d0:80:f1:1a:
3b:14:c1:fc:31:8f:52:58:70:04:c2:3c:79:45:07:e5:e8:f4:
58:ca:12:4d:e5:b4:f4:f9:f4:d6:f6:54:10:4b:cf:08:a7:26:
b7:43:b7:54:eb:8f:c0:cc:3d:fe:c8:36:f3:32:10:05:ee:7b:
0d:fc:99:dc:09:47:35:6b:af:5a:ee:f3:5e:79:93:5e:83:37:
8e:e8:2f:36:f2:12:fa:5b:15:40:5e:2b:64:c6:a8:21:8f:54:
96:4c:32:32:69:01:dd:a3:98:b4:1c:3d:0a:27:31:41:6f:62:
93:4d:a3:5f:da:68:f4:08:97:6e:c5:91:46:12:b4:0d:75:6b:
bc:7d:87:70:5c:f6:32:cc:2e:29:7b:bd:a0:79:e7:97:16:5f:
a3:7f:09:a2:e1:8f:4f:1c:ee:17:c1:ed:3f:35:4c:9e:83:8c:
06:21:e9:35:4f:bf:73:50:33:b0:8a:3b:bf:39:1a:37:b2:c7:
56:36:27:80:d5:12:97:85:a7:ee:d7:bc:a8:09:2c:e4:e0:12:
6b:9b:88:d7:c2:37:01:27:17:30:7f:aa:c8:34:b9:cf:a2:f0:
80:99:5c:42:61:2b:fe:a8:20:8b:9d:72:75:ee:b7:40:de:77:
42:70:5d:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJMYq7/KNF5IzeCJeeF+GlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjQxMDAyMDgzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjk5N2JkZjEzODY4ZTNhOWI4ZGEyNWQ5OTZiNjA3ZDI2MmM2MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04GzmJhl8a1C0wbnVyfmMnnxf1L0
hXQ68WoC4WKiIxKrBffd0FjPZORj/vSIfrBcsSoW9ZfC8VpLw39NhtGnQG+O3rov
ocBFaryqEMUtUE3oN2QuxVIq7q8x6LOelVT/im+9Qv977sbYp6Z39NhbyjVDfN1f
rSCOnUfRBjtcO+5QoYJFvRCWJz/9T87uOsaXn4hbiehaZ7r4saa0SbRb0VNbhkj8
Bcf4AK50HNJoNg/zLujspVaaya/b+66BPJ0PCS63llPZ3xONyBrw1OAzIIAEykid
loOSZSeINDDaBA9ErU7xZ7zUGg/Fl7Z+kkUBgbJr3WFzPRqeHfhGOpeDHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG+Ze98Tho46m42iXZlrYH0mLGCzMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvYjVsNzN4T0dqanFiamFKZG1XdGdmU1lzWUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1wrAwQA
1GZrMA0GCSqGSIb3DQEBCwUAA4IBAQAF4G9EmSOPVbe59mv0JtCA8Ro7FMH8MY9S
WHAEwjx5RQfl6PRYyhJN5bT0+fTW9lQQS88Ipya3Q7dU64/AzD3+yDbzMhAF7nsN
/JncCUc1a69a7vNeeZNegzeO6C828hL6WxVAXitkxqghj1SWTDIyaQHdo5i0HD0K
JzFBb2KTTaNf2mj0CJduxZFGErQNdWu8fYdwXPYyzC4pe72geeeXFl+jfwmi4Y9P
HO4Xwe0/NUyeg4wGIek1T79zUDOwiju/ORo3ssdWNieA1RKXhafu17yoCSzk4BJr
m4jXwjcBJxcwf6rINLnPovCAmVxCYSv+qCCLnXJ17rdA3ndCcF28
-----END CERTIFICATE-----
Generated at Fri Nov 1 10:59:35 2024 by rpki-client on console-ams.rpki-client.org