Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/U2wfya_rGHMZwF0m4gf2coHcYZA.roa
File: U2wfya_rGHMZwF0m4gf2coHcYZA.roa (raw, json)
Hash identifier: JDGxYWUX/XQWj+3tPOYDh1QdNvtUqKqWxEghKtH1BqY=
Subject key identifier: 53:6C:1F:C9:AF:EB:18:73:19:C0:5D:26:E2:07:F6:72:81:DC:61:90
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 01888B16E0696371649DBCACC1F9B5241E89
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/U2wfya_rGHMZwF0m4gf2coHcYZA.roa
Signing time: Mon 05 Jun 2023 10:25:12 +0000
ROA not before: Mon 05 Jun 2023 10:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:16:e0:69:63:71:64:9d:bc:ac:c1:f9:b5:24:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jun 5 10:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=536c1fc9afeb187319c05d26e207f67281dc6190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:77:e0:53:4e:b7:be:5c:3a:c8:03:8e:5d:
46:d9:40:1b:7f:f4:4f:2a:df:8e:28:52:fa:71:46:
41:12:49:0e:1e:c5:6c:be:6a:70:34:a5:a1:88:57:
25:d1:15:93:09:cf:bb:95:f3:7c:7b:a5:83:53:cc:
4f:6c:0d:0f:df:e5:f0:52:be:fc:f9:df:bb:02:cb:
f3:ea:d6:3f:6f:27:84:07:fe:ff:82:7c:7d:d3:70:
2a:61:1b:9f:5f:4b:6a:b9:ed:80:a7:e4:b5:f3:b0:
89:71:85:6c:fd:cf:04:8c:30:68:3e:80:a1:94:10:
25:65:03:4f:2f:f4:46:ee:5b:b5:82:50:59:af:25:
23:7d:37:8b:89:86:c4:fd:48:b4:92:0e:e7:c6:68:
e4:b7:15:7e:75:bc:7b:c8:1d:d2:9e:9c:07:c7:89:
d8:dd:a5:d9:dd:91:c7:74:c6:39:2a:ca:89:38:13:
cb:1c:06:a4:bc:62:a4:28:5c:cd:23:55:b6:78:a1:
ea:89:d2:b5:22:a8:1d:99:b5:6f:a0:a1:6d:1f:9b:
b8:3d:65:7d:43:c0:04:4d:6e:5f:a2:96:3f:b9:a9:
6e:78:53:fe:e3:fb:0b:f6:77:67:22:c4:96:26:a4:
86:e2:9c:cc:a9:de:92:c2:57:2a:55:c1:75:c3:a0:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:1F:C9:AF:EB:18:73:19:C0:5D:26:E2:07:F6:72:81:DC:61:90
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/U2wfya_rGHMZwF0m4gf2coHcYZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f0:73:35:ae:28:27:04:c8:35:ec:9c:c4:92:24:1e:f9:03:
f5:b1:51:6a:92:c7:47:18:e6:15:22:6b:89:66:e2:67:af:8d:
04:7c:bc:7a:fc:84:92:0d:a6:7f:e1:de:92:93:09:c8:13:0f:
7d:e2:b6:e4:95:4c:29:47:1e:bb:07:d0:ce:61:c4:dc:42:14:
74:4e:2e:fc:c1:a6:73:f1:80:61:03:f5:2a:b9:d5:d6:94:22:
56:7a:67:9a:05:b1:03:71:12:5c:d9:f8:dc:a3:bb:0b:0f:5f:
e9:4f:10:2c:bf:ac:73:8c:3c:4c:b1:07:08:fb:cc:fc:80:44:
6c:a5:9e:37:c6:ba:ce:92:aa:d5:22:c2:ae:ff:19:cb:14:64:
04:73:5b:6a:25:ae:75:31:27:e7:fd:12:8c:4f:30:2c:79:94:
c5:f5:ab:12:50:d0:66:5f:a9:b2:a5:d3:3a:01:33:c6:96:be:
14:93:b4:ab:d6:eb:00:b9:b7:6e:a7:85:e6:95:bb:c8:b7:ee:
40:df:29:76:89:80:e0:f7:a0:80:55:0a:a9:0c:d3:a7:46:41:
f0:c7:5d:7c:71:e8:ca:ed:61:13:66:ae:9a:28:99:3c:f1:f6:
e5:82:fb:84:7c:4b:d7:8a:3a:b5:bc:00:b5:6a:75:be:34:01:
2a:4e:39:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiLFuBpY3Fknbyswfm1JB6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0
ZGNkMjkwHhcNMjMwNjA1MTAyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzZjMWZjOWFmZWIxODczMTljMDVkMjZlMjA3ZjY3MjgxZGM2MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM534FNOt75cOsgDjl1G2UAbf/RP
Kt+OKFL6cUZBEkkOHsVsvmpwNKWhiFcl0RWTCc+7lfN8e6WDU8xPbA0P3+XwUr78
+d+7Asvz6tY/byeEB/7/gnx903AqYRufX0tque2Ap+S187CJcYVs/c8EjDBoPoCh
lBAlZQNPL/RG7lu1glBZryUjfTeLiYbE/Ui0kg7nxmjktxV+dbx7yB3SnpwHx4nY
3aXZ3ZHHdMY5KsqJOBPLHAakvGKkKFzNI1W2eKHqidK1IqgdmbVvoKFtH5u4PWV9
Q8AETW5fopY/ualueFP+4/sL9ndnIsSWJqSG4pzMqd6SwlcqVcF1w6C1PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFNsH8mv6xhzGcBdJuIH9nKB3GGQMB8GA1UdIwQY
MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt
YzY5YTdmMDNlMThmLzEvVTJ3ZnlhX3JHSE1ad0YwbTRnZjJjb0hjWVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm
LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DpMA0G
CSqGSIb3DQEBCwUAA4IBAQCp8HM1rignBMg17JzEkiQe+QP1sVFqksdHGOYVImuJ
ZuJnr40EfLx6/ISSDaZ/4d6SkwnIEw994rbklUwpRx67B9DOYcTcQhR0Ti78waZz
8YBhA/UqudXWlCJWemeaBbEDcRJc2fjco7sLD1/pTxAsv6xzjDxMsQcI+8z8gERs
pZ43xrrOkqrVIsKu/xnLFGQEc1tqJa51MSfn/RKMTzAseZTF9asSUNBmX6mypdM6
ATPGlr4Uk7Sr1usAubdup4XmlbvIt+5A3yl2iYDg96CAVQqpDNOnRkHwx118cejK
7WETZq6aKJk88fblgvuEfEvXijq1vAC1anW+NAEqTjlE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:41 2024 by rpki-client on console-ams.rpki-client.org