Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/1-yKBypn5NQZZRoeT7K5x4xVxxv8.roa
File: 1-yKBypn5NQZZRoeT7K5x4xVxxv8.roa (raw, json)
Hash identifier: OwNPN4ftfwbGOhnIqoYKAVwmGkh0Hc+PGPNs0y/iLOQ=
Subject key identifier: FB:22:81:CA:99:F9:35:06:59:46:87:93:EC:AE:71:E3:15:71:C6:FF
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0187DC98A1F4F5592711F355250BF4EE58A2
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/1-yKBypn5NQZZRoeT7K5x4xVxxv8.roa
Signing time: Tue 02 May 2023 13:13:23 +0000
ROA not before: Tue 02 May 2023 13:13:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30644
IP address blocks: 91.207.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 14:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:98:a1:f4:f5:59:27:11:f3:55:25:0b:f4:ee:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: May 2 13:13:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb2281ca99f9350659468793ecae71e31571c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:7f:08:84:cc:b6:59:37:2f:6b:8a:9f:90:
33:ff:0f:e2:66:68:ae:c4:f0:c4:d0:c8:6a:50:dd:
f0:12:b2:e9:27:ea:00:45:46:e0:cf:f8:61:90:07:
bb:35:81:65:74:cc:64:e5:43:d1:c2:76:9b:99:37:
9c:83:48:b8:57:3c:b3:6f:8f:90:a5:72:bf:6f:d5:
e0:d7:df:1d:d2:65:bc:64:8d:e7:94:ca:73:77:aa:
f2:6b:f4:48:5b:eb:19:33:79:c5:16:8d:d7:37:4f:
0e:bb:f9:92:58:6d:42:28:7c:12:db:91:a7:20:dc:
97:90:55:50:07:b5:39:50:f4:04:50:0e:c4:0c:ff:
26:3f:d1:46:b2:3b:78:ec:77:4e:e3:b8:ae:92:c4:
4e:c0:4c:6c:66:cb:89:01:63:92:e7:c0:5e:fc:f1:
1c:69:97:8f:ee:90:79:89:48:fd:c2:a5:a8:3f:be:
38:70:ba:4a:69:df:ff:f8:88:38:63:9f:b9:f6:48:
40:69:cf:f5:c6:7e:3f:03:c3:77:1e:b8:c0:28:db:
4e:49:b8:4f:d7:be:af:92:d1:8c:be:4f:91:cd:2e:
41:ff:97:e7:75:3d:25:4a:ff:bb:eb:b4:2d:d6:8b:
09:93:3f:85:10:2a:77:3e:88:87:cf:a1:ef:52:b1:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:81:CA:99:F9:35:06:59:46:87:93:EC:AE:71:E3:15:71:C6:FF
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/1-yKBypn5NQZZRoeT7K5x4xVxxv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3a:2d:3d:cf:09:4e:11:00:95:80:65:c5:70:a3:e4:4d:0a:
2d:f8:c5:65:db:5c:8a:3c:6a:73:82:f5:42:1f:53:2d:42:38:
76:f9:3e:86:38:cd:8f:b2:5a:0f:ca:19:83:0a:57:23:6a:f6:
38:56:53:60:11:f1:65:67:59:3a:7d:b4:43:21:3b:06:54:bc:
a6:c7:dd:3f:b6:f9:00:5c:a6:38:1d:88:7d:71:c5:76:cf:cf:
ec:84:ba:4f:37:91:36:03:3b:f8:92:91:16:50:c2:ea:7e:8e:
70:11:c6:75:2b:0c:b3:f0:fb:b4:88:78:ca:83:4b:99:e8:ef:
cf:4c:74:68:f1:9f:9b:2b:35:46:40:ab:1d:a5:de:0f:cd:c8:
92:b2:6d:db:01:f1:95:30:44:9a:e3:9e:95:98:af:e0:86:66:
53:60:52:90:f2:b7:ca:6c:5c:65:c1:11:32:01:68:79:9d:d0:
1b:89:0d:46:12:cd:6b:f7:0b:f9:eb:ed:eb:50:97:9f:62:19:
29:16:6b:93:c2:ea:48:d7:70:f9:ba:8e:3e:c4:a9:43:01:1e:
1f:65:63:f7:aa:bc:07:f9:3b:8e:74:26:a0:ab:0f:1e:f4:9e:
ef:3f:12:54:87:2a:42:dc:66:71:07:b5:99:c4:64:96:6d:cd:
e4:dc:7c:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYfcmKH09VknEfNVJQv07liiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTE5NmRlZDViYTVkNjg2ZTcwOTVjNmQ1YzYzOGM2Yjhm
OGJhZGEwHhcNMjMwNTAyMTMxMzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjIyODFjYTk5ZjkzNTA2NTk0Njg3OTNlY2FlNzFlMzE1NzFjNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSV/CITMtlk3L2uKn5Az/w/iZmiu
xPDE0MhqUN3wErLpJ+oARUbgz/hhkAe7NYFldMxk5UPRwnabmTecg0i4Vzyzb4+Q
pXK/b9Xg198d0mW8ZI3nlMpzd6rya/RIW+sZM3nFFo3XN08Ou/mSWG1CKHwS25Gn
INyXkFVQB7U5UPQEUA7EDP8mP9FGsjt47HdO47iuksROwExsZsuJAWOS58Be/PEc
aZeP7pB5iUj9wqWoP744cLpKad//+Ig4Y5+59khAac/1xn4/A8N3HrjAKNtOSbhP
176vktGMvk+RzS5B/5fndT0lSv+767Qt1osJkz+FECp3PoiHz6HvUrEfxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsigcqZ+TUGWUaHk+yuceMVccb/MB8GA1UdIwQY
MBaAFBxRlt7Vul1obnCVxtXGOMa4+LraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEt
MjBiZjI3NWZkMGU3LzEvMS15S0J5cG41TlFaWlJvZVQ3SzV4NHhWeHh2OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTkvMTU5ZmEzLTMxNmUtNGY1ZS04YjYxLTIwYmYyNzVmZDBl
Ny8xL0hGR1czdFc2WFdodWNKWEcxY1k0eHJqNHV0by5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvPATAN
BgkqhkiG9w0BAQsFAAOCAQEAOjotPc8JThEAlYBlxXCj5E0KLfjFZdtcijxqc4L1
Qh9TLUI4dvk+hjjNj7JaD8oZgwpXI2r2OFZTYBHxZWdZOn20QyE7BlS8psfdP7b5
AFymOB2IfXHFds/P7IS6TzeRNgM7+JKRFlDC6n6OcBHGdSsMs/D7tIh4yoNLmejv
z0x0aPGfmys1RkCrHaXeD83IkrJt2wHxlTBEmuOelZiv4IZmU2BSkPK3ymxcZcER
MgFoeZ3QG4kNRhLNa/cL+evt61CXn2IZKRZrk8LqSNdw+bqOPsSpQwEeH2Vj96q8
B/k7jnQmoKsPHvSe7z8SVIcqQtxmcQe1mcRklm3N5Nx83Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:05 2024 by rpki-client on console-fra.rpki-client.org