Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/IKMu1Dcr810dFELU1jhUY83Vqx8.roa
File: IKMu1Dcr810dFELU1jhUY83Vqx8.roa (raw, json)
Hash identifier: QclnFNF4f8nEqIhZLOyKyuYTUckB1iyA/SZM7eBikPI=
Subject key identifier: 20:A3:2E:D4:37:2B:F3:5D:1D:14:42:D4:D6:38:54:63:CD:D5:AB:1F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018723B153E6201F1D7A01FD9E58CDFE3CB8
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/IKMu1Dcr810dFELU1jhUY83Vqx8.roa
Signing time: Mon 27 Mar 2023 15:30:36 +0000
ROA not before: Mon 27 Mar 2023 15:30:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 91.205.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:b1:53:e6:20:1f:1d:7a:01:fd:9e:58:cd:fe:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 27 15:30:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20a32ed4372bf35d1d1442d4d6385463cdd5ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:23:21:f9:19:03:8c:ab:cb:39:ab:2c:19:
b7:01:59:c9:12:7f:09:ca:dd:62:29:8b:81:11:fe:
db:1a:d1:8a:ac:58:1b:12:dd:1b:8a:4a:b9:49:1a:
61:6a:b9:88:7a:94:22:a9:56:13:8c:60:f4:98:20:
0a:82:fa:3e:a3:49:60:85:1a:83:72:e0:54:c6:59:
8d:e2:52:d6:c7:81:a4:80:9b:aa:e6:6f:ec:e8:f2:
e1:bc:ec:b5:6b:4d:24:bd:1e:34:34:fa:87:f1:55:
7e:7c:0b:26:0a:35:16:1b:0d:52:3a:02:19:bc:79:
06:5d:62:13:ba:7c:67:81:49:5b:67:bd:70:bf:48:
ac:db:95:8b:be:93:ad:9e:ee:4c:3f:13:65:cc:8c:
ed:fc:9c:42:2a:16:1a:76:fa:b3:10:8a:29:87:44:
2b:20:b7:fb:97:5f:c6:85:63:8b:8f:b2:e4:5e:e7:
f1:3a:a8:4f:29:da:09:38:ea:14:ff:06:41:28:b5:
d6:47:99:05:e2:c0:a3:12:b5:73:9f:fd:4b:0a:c2:
45:23:21:43:5b:39:a4:1a:a4:e5:e6:12:ec:94:5c:
43:53:8a:62:eb:71:5d:d5:df:ad:62:42:2f:3f:a2:
bb:5c:f0:0e:40:2f:c1:5a:0e:71:fc:af:43:f3:81:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:2E:D4:37:2B:F3:5D:1D:14:42:D4:D6:38:54:63:CD:D5:AB:1F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/IKMu1Dcr810dFELU1jhUY83Vqx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f7:fa:90:a1:3c:cf:a1:aa:7e:fa:dc:11:ad:34:62:99:85:
1c:05:cc:05:56:dd:8e:bd:cb:a8:f3:7c:26:cb:c8:16:a8:2a:
b3:88:85:45:99:cc:30:20:11:a7:52:b4:cd:8e:5c:33:62:e5:
dc:b9:f2:77:b7:24:69:e4:a7:4a:1d:d9:0c:a4:2b:ee:7f:5b:
6a:bc:35:29:49:5d:a5:ed:5c:63:32:13:40:c1:42:9e:fe:d4:
cf:9e:fc:ce:8d:37:72:23:83:4b:c5:a5:ed:21:66:53:68:99:
f7:7c:7e:87:af:05:f5:15:d3:26:b0:c7:59:0f:f9:7a:e8:df:
d7:d8:53:a9:bf:5b:92:c7:de:00:7f:a1:84:9f:cb:d0:53:95:
06:74:a1:96:c7:cb:dc:d8:a6:4b:7e:c2:2e:73:b3:98:21:7c:
1f:ab:24:c8:8d:4c:8b:a2:53:bb:e1:5d:75:45:46:cb:b2:23:
43:27:64:c9:57:12:31:d5:9b:5a:5d:9d:2c:1e:b5:10:c3:e8:
01:03:c8:45:b9:f3:74:ef:31:20:28:37:2b:9a:8d:bf:87:78:
0b:a2:a3:07:ac:a4:c2:f4:4c:87:1d:da:7b:b8:a3:b5:aa:4c:
7f:73:a6:9c:9c:b8:e3:3d:7f:ae:bb:e6:39:61:63:a2:d2:21:
88:b4:f1:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcjsVPmIB8degH9nljN/jy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwMzI3MTUzMDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGEzMmVkNDM3MmJmMzVkMWQxNDQyZDRkNjM4NTQ2M2NkZDVhYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaAjIfkZA4yryzmrLBm3AVnJEn8J
yt1iKYuBEf7bGtGKrFgbEt0bikq5SRpharmIepQiqVYTjGD0mCAKgvo+o0lghRqD
cuBUxlmN4lLWx4GkgJuq5m/s6PLhvOy1a00kvR40NPqH8VV+fAsmCjUWGw1SOgIZ
vHkGXWITunxngUlbZ71wv0is25WLvpOtnu5MPxNlzIzt/JxCKhYadvqzEIoph0Qr
ILf7l1/GhWOLj7LkXufxOqhPKdoJOOoU/wZBKLXWR5kF4sCjErVzn/1LCsJFIyFD
WzmkGqTl5hLslFxDU4pi63Fd1d+tYkIvP6K7XPAOQC/BWg5x/K9D84GYYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCjLtQ3K/NdHRRC1NY4VGPN1asfMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvSUtNdTFEY3I4MTBkRkVMVTFqaFVZODNWcXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83kMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ9/qQoTzPoap++twRrTRimYUcBcwFVt2Ovcuo83wm
y8gWqCqziIVFmcwwIBGnUrTNjlwzYuXcufJ3tyRp5KdKHdkMpCvuf1tqvDUpSV2l
7VxjMhNAwUKe/tTPnvzOjTdyI4NLxaXtIWZTaJn3fH6HrwX1FdMmsMdZD/l66N/X
2FOpv1uSx94Af6GEn8vQU5UGdKGWx8vc2KZLfsIuc7OYIXwfqyTIjUyLolO74V11
RUbLsiNDJ2TJVxIx1ZtaXZ0sHrUQw+gBA8hFufN07zEgKDcrmo2/h3gLoqMHrKTC
9EyHHdp7uKO1qkx/c6acnLjjPX+uu+Y5YWOi0iGItPGV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org