Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v9au52NQvOlZUinmaO_p6yFM36I.roa
File: v9au52NQvOlZUinmaO_p6yFM36I.roa (raw, json)
Hash identifier: q52bqj+GbGKKfk1c7vkyKP/t82eyx16BobwoVY6zosM=
Subject key identifier: BF:D6:AE:E7:63:50:BC:E9:59:52:29:E6:68:EF:E9:EB:21:4C:DF:A2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CCC4143803AED2E00EC3E4B99ED6C2AAB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v9au52NQvOlZUinmaO_p6yFM36I.roa
Signing time: Tue 02 Jan 2024 22:17:58 +0000
ROA not before: Tue 02 Jan 2024 22:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 193.33.48.0/24 maxlen: 24
91.224.22.0/24 maxlen: 24
91.224.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 20:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cc:41:43:80:3a:ed:2e:00:ec:3e:4b:99:ed:6c:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 22:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd6aee76350bce9595229e668efe9eb214cdfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:90:80:04:4e:d4:59:4a:42:57:94:6e:be:
d2:df:00:66:a0:e5:f7:5d:30:cb:ce:1e:5d:40:e0:
4e:df:5e:3e:49:e4:34:32:28:94:c2:93:6b:1f:41:
a9:c4:87:60:f6:59:f2:40:9e:9d:7e:d8:12:1c:d7:
99:6b:b2:3c:78:69:06:20:9b:7c:35:23:6a:fe:aa:
60:b9:bb:67:6b:c9:cc:fc:c1:4c:58:21:61:06:c3:
ad:c8:e7:f8:88:34:ab:41:a1:05:ac:ff:d2:af:02:
8d:b5:f1:c9:bb:fa:5b:ce:8b:fa:2a:8b:90:d6:c7:
2f:83:fd:b2:19:b0:0e:ca:06:9a:61:00:11:f3:2f:
66:8a:3c:99:2c:36:b2:69:32:82:b9:31:54:b6:13:
b4:1e:61:3d:2d:01:d3:e7:a1:99:0f:61:9b:2e:47:
3a:37:09:04:a6:cd:d5:1d:09:3c:3a:c2:6d:91:5e:
a7:ed:b6:da:cc:81:2d:5f:95:a8:f9:cd:27:d5:12:
cc:c1:b9:88:dd:cb:9a:dc:89:5f:af:71:cf:ae:28:
d8:da:ab:e8:3f:a1:11:95:ec:71:e9:58:a7:e5:cb:
16:a9:b7:6b:7d:1a:1b:2c:09:ba:c0:a5:0b:15:82:
34:38:f8:b6:89:1d:01:bd:4a:c4:21:16:69:56:d2:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:AE:E7:63:50:BC:E9:59:52:29:E6:68:EF:E9:EB:21:4C:DF:A2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v9au52NQvOlZUinmaO_p6yFM36I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.22.0/23
193.33.48.0/24
Signature Algorithm: sha256WithRSAEncryption
08:16:96:a3:35:af:63:18:ed:d2:76:5f:b5:12:df:54:44:13:
09:6a:b3:f3:6f:68:e0:b5:2e:cf:01:c4:61:d9:10:35:91:f2:
27:2b:47:01:6b:2d:7a:ed:12:81:e0:be:98:11:52:cc:1a:59:
b6:9c:95:4c:0d:d4:eb:f0:5c:e3:2e:69:02:af:1c:49:15:64:
90:f0:16:67:fc:74:a4:27:c1:36:d3:07:be:cf:6d:73:4b:8d:
10:7c:2a:8d:08:46:21:21:cd:11:f6:9c:5a:cc:59:20:5a:6d:
b3:cb:bc:70:e9:4d:66:16:19:01:9c:7c:f7:a0:bf:61:ee:9d:
79:bb:01:b9:71:64:5e:99:f6:ba:08:91:bf:59:f7:cc:9b:40:
f5:a3:84:a4:96:bb:38:68:8c:43:9c:b4:06:b5:cf:68:fc:96:
27:4d:1f:8c:96:28:a3:a6:a0:06:63:3e:6e:28:51:20:b2:76:
77:d9:16:d4:b0:86:14:9c:f9:47:1e:f2:35:b1:7a:9f:07:80:
a8:d7:22:73:61:eb:d7:1a:f5:fc:2d:6f:51:26:ce:a7:0c:62:
ae:40:1a:d0:f2:2d:4f:5d:e7:fb:8e:48:b9:7a:0e:88:dc:a6:
93:ec:5c:84:3d:e4:e6:3f:1e:4b:d1:5d:40:0c:8a:6c:1c:6d:
4a:a3:f6:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzMQUOAOu0uAOw+S5ntbCqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwMTAyMjIxNzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmQ2YWVlNzYzNTBiY2U5NTk1MjI5ZTY2OGVmZTllYjIxNGNkZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli6QgARO1FlKQleUbr7S3wBmoOX3
XTDLzh5dQOBO314+SeQ0MiiUwpNrH0GpxIdg9lnyQJ6dftgSHNeZa7I8eGkGIJt8
NSNq/qpgubtna8nM/MFMWCFhBsOtyOf4iDSrQaEFrP/SrwKNtfHJu/pbzov6KouQ
1scvg/2yGbAOygaaYQAR8y9mijyZLDayaTKCuTFUthO0HmE9LQHT56GZD2GbLkc6
NwkEps3VHQk8OsJtkV6n7bbazIEtX5Wo+c0n1RLMwbmI3cua3Ilfr3HPrijY2qvo
P6ERlexx6Vin5csWqbdrfRobLAm6wKULFYI0OPi2iR0BvUrEIRZpVtItvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL/WrudjULzpWVIp5mjv6eshTN+iMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvdjlhdTUyTlF2T2xaVWlubWFPX3A2eUZNMzZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+AWAwQA
wSEwMA0GCSqGSIb3DQEBCwUAA4IBAQAIFpajNa9jGO3Sdl+1Et9URBMJarPzb2jg
tS7PAcRh2RA1kfInK0cBay167RKB4L6YEVLMGlm2nJVMDdTr8FzjLmkCrxxJFWSQ
8BZn/HSkJ8E20we+z21zS40QfCqNCEYhIc0R9pxazFkgWm2zy7xw6U1mFhkBnHz3
oL9h7p15uwG5cWRemfa6CJG/WffMm0D1o4Sklrs4aIxDnLQGtc9o/JYnTR+Mliij
pqAGYz5uKFEgsnZ32RbUsIYUnPlHHvI1sXqfB4Co1yJzYevXGvX8LW9RJs6nDGKu
QBrQ8i1PXef7jki5eg6I3KaT7FyEPeTmPx5L0V1ADIpsHG1Ko/aq
Generated at Sat Jan 6 23:29:47 2024 by rpki-client on console-fra.rpki-client.org