Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/b27aH3LEnum71qEr0cWSkQNS8ZY.roa
File: b27aH3LEnum71qEr0cWSkQNS8ZY.roa (raw, json)
Hash identifier: a1UQggpC25KqS6tPXsIGc5uX0f9Pl0f/jelMPPAogYQ=
Subject key identifier: 6F:6E:DA:1F:72:C4:9E:E9:BB:D6:A1:2B:D1:C5:92:91:03:52:F1:96
Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Certificate serial: 018CC49315455A174370EEB68CE0DEB52B58
Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/b27aH3LEnum71qEr0cWSkQNS8ZY.roa
Signing time: Mon 01 Jan 2024 10:30:22 +0000
ROA not before: Mon 01 Jan 2024 10:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43911
IP address blocks: 91.195.220.0/23 maxlen: 23
2001:67c:220::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Mar 2024 11:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:15:45:5a:17:43:70:ee:b6:8c:e0:de:b5:2b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f6eda1f72c49ee9bbd6a12bd1c592910352f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:f7:61:aa:25:c0:c5:ae:61:0c:94:01:ab:
75:25:c4:d6:95:28:40:8a:d6:66:f6:d9:bb:91:52:
9a:9f:42:0c:ac:30:36:d4:c5:3b:60:8c:48:b6:80:
6b:56:07:b5:76:ca:cf:d5:ad:89:9c:ba:48:5a:e3:
a4:7b:14:2c:51:0d:e1:78:8b:6f:45:2f:19:9b:f2:
1e:12:ab:30:2f:1d:46:b1:f8:b0:92:32:96:cf:ca:
70:ad:85:8c:34:79:8d:8a:58:6b:79:e0:45:d9:25:
75:6c:05:94:96:5e:14:a2:97:07:b5:ea:cc:8a:69:
d7:df:5e:17:d6:c3:a8:0d:e4:e6:8a:39:b3:d7:cd:
96:ba:c8:d1:56:f3:03:ce:42:6d:66:9c:ad:7d:1e:
52:5d:7a:8e:45:f7:c0:15:5c:9a:2e:62:e9:3b:a7:
7e:31:28:38:df:fa:97:44:a5:ca:33:b2:78:2c:76:
a2:41:97:60:21:d5:ca:6d:e4:db:d8:6b:86:d2:25:
4c:11:8c:25:c2:72:68:4d:cc:d4:41:81:d2:27:3d:
37:85:b3:a4:dd:62:c5:2a:b6:cc:61:db:ab:76:d0:
69:0b:14:e0:7f:bc:30:0d:c8:70:44:b9:0e:f1:9d:
5f:48:66:9c:77:e8:09:d4:6e:cc:3e:e8:c2:75:2e:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6E:DA:1F:72:C4:9E:E9:BB:D6:A1:2B:D1:C5:92:91:03:52:F1:96
X509v3 Authority Key Identifier:
keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/b27aH3LEnum71qEr0cWSkQNS8ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.220.0/23
IPv6:
2001:67c:220::/48
Signature Algorithm: sha256WithRSAEncryption
14:c8:ab:55:97:43:51:81:28:9a:4e:4e:78:34:26:74:e0:cc:
2d:b5:86:1b:d3:d5:7c:7f:b5:16:c4:c5:69:35:13:62:e0:ec:
26:11:a7:b1:2d:52:5f:92:8c:f1:5e:de:1b:3a:f1:1c:86:86:
01:3b:41:da:5f:94:2a:ff:e8:da:5e:14:32:bc:cc:70:27:ba:
ce:59:33:50:61:3b:56:81:5d:85:39:53:92:4e:cd:39:ab:05:
51:e7:90:f3:a3:83:1b:10:91:9d:09:fb:29:35:2c:59:62:b1:
be:62:22:f9:0f:b0:ff:ff:6c:24:20:0b:7e:6a:8f:07:f8:38:
f6:4e:46:19:b3:a6:4f:85:c6:e1:f0:f2:18:f2:9d:26:a4:d5:
f0:5e:b9:ad:01:04:5b:1c:51:40:9b:2b:9b:12:76:b1:8e:4a:
10:d5:7a:1e:75:4c:d2:a7:3a:ad:06:a9:4f:bc:7b:79:f8:54:
46:89:dc:74:b8:1c:87:c9:2a:00:06:21:3a:11:a0:83:c3:66:
e8:42:5d:02:02:e4:b4:33:be:34:2c:c7:0c:c8:b3:72:ce:68:
72:4a:9c:ad:29:9d:37:4e:94:fc:58:6a:6c:7f:76:0b:18:a8:
de:88:0b:79:f7:f5:ec:04:13:27:e2:65:e5:8b:63:5c:7d:e1:
f2:59:f2:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzEkxVFWhdDcO62jODetStYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Y2I1ZjNmYjk1NzI1MWFhZDRiYTA5ZDBiYWI3MzUyYjc0
YmIwN2QwHhcNMjQwMTAxMTAzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjZlZGExZjcyYzQ5ZWU5YmJkNmExMmJkMWM1OTI5MTAzNTJmMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsL3YaolwMWuYQyUAat1JcTWlShA
itZm9tm7kVKan0IMrDA21MU7YIxItoBrVge1dsrP1a2JnLpIWuOkexQsUQ3heItv
RS8Zm/IeEqswLx1GsfiwkjKWz8pwrYWMNHmNilhreeBF2SV1bAWUll4UopcHterM
imnX314X1sOoDeTmijmz182WusjRVvMDzkJtZpytfR5SXXqORffAFVyaLmLpO6d+
MSg43/qXRKXKM7J4LHaiQZdgIdXKbeTb2GuG0iVMEYwlwnJoTczUQYHSJz03hbOk
3WLFKrbMYdurdtBpCxTgf7wwDchwRLkO8Z1fSGacd+gJ1G7MPujCdS6vtQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG9u2h9yxJ7pu9ahK9HFkpEDUvGWMB8GA1UdIwQY
MBaAFCjLXz+5VyUarUugnQurc1K3S7B9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNjYzMmItMWZiZi00OTZmLWIzNTUt
MTUzNmZjNzgzODVkLzEvYjI3YUgzTEVudW03MXFFcjBjV1NrUU5TOFpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNjYzMmItMWZiZi00OTZmLWIzNTUtMTUzNmZjNzgzODVk
LzEvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8PcMA8E
AgACMAkDBwAgAQZ8AiAwDQYJKoZIhvcNAQELBQADggEBABTIq1WXQ1GBKJpOTng0
JnTgzC21hhvT1Xx/tRbExWk1E2Lg7CYRp7EtUl+SjPFe3hs68RyGhgE7QdpflCr/
6NpeFDK8zHAnus5ZM1BhO1aBXYU5U5JOzTmrBVHnkPOjgxsQkZ0J+yk1LFlisb5i
IvkPsP//bCQgC35qjwf4OPZORhmzpk+FxuHw8hjynSak1fBeua0BBFscUUCbK5sS
drGOShDVeh51TNKnOq0GqU+8e3n4VEaJ3HS4HIfJKgAGIToRoIPDZuhCXQIC5LQz
vjQsxwzIs3LOaHJKnK0pnTdOlPxYamx/dgsYqN6IC3n39ewEEyfiZeWLY1x94fJZ
8us=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:09 2024 by rpki-client on console-ams.rpki-client.org