Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dR54_BXhLmQmfA3Rq8Zmh0aB3zA.roa
File: dR54_BXhLmQmfA3Rq8Zmh0aB3zA.roa (raw, json)
Hash identifier: fEquonZOcA1Bf8FZ1+Ua/uAiabdRbFkPvBc2DUh6wOs=
Subject key identifier: 75:1E:78:FC:15:E1:2E:64:26:7C:0D:D1:AB:C6:66:87:46:81:DF:30
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01856DC19AA887BE6C9525FE7388AB56C990
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dR54_BXhLmQmfA3Rq8Zmh0aB3zA.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47596
IP address blocks: 91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
91.203.235.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Feb 2023 10:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9a:a8:87:be:6c:95:25:fe:73:88:ab:56:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=751e78fc15e12e64267c0dd1abc666874681df30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:cc:8c:ab:fd:b2:4c:49:9f:67:ed:0d:d1:
31:9a:8a:c5:ba:77:0c:2b:f8:00:5d:14:36:d4:2e:
a9:1b:47:a2:d7:0d:89:d0:76:56:9b:d7:7d:cc:69:
50:02:64:3a:39:b2:55:0a:62:f9:63:d1:ca:86:d0:
9b:6f:ab:7b:8f:19:47:26:33:ed:86:24:5a:1d:0d:
67:e0:e1:06:7e:0b:ab:8c:4a:0f:91:5d:88:d3:1d:
84:88:5e:61:04:1b:8e:6f:5e:73:4c:d1:5f:a6:a7:
72:88:b9:d8:43:88:b9:fa:eb:2a:90:1e:ff:41:9b:
63:53:da:c1:ae:98:22:21:24:53:23:4a:7b:4a:59:
8e:fa:bb:4d:f5:90:29:4c:ed:fe:94:aa:dd:1d:72:
37:6a:59:f5:ce:1f:ed:79:10:f5:b7:f0:5d:db:6e:
3c:29:db:02:59:cc:32:16:d5:fa:cf:85:f9:3d:5f:
30:82:b6:00:fd:38:46:65:58:33:b7:a4:de:d5:05:
2e:b8:fc:b9:03:2c:49:43:a7:88:55:18:95:48:9f:
bb:17:0f:e2:0b:ad:a5:f8:52:c1:5e:7b:da:f8:02:
4b:b3:f2:90:02:8b:5a:30:e5:54:de:83:b7:64:cd:
ce:35:b8:cb:81:9d:df:b1:8c:3d:94:70:d2:8c:68:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:78:FC:15:E1:2E:64:26:7C:0D:D1:AB:C6:66:87:46:81:DF:30
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dR54_BXhLmQmfA3Rq8Zmh0aB3zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
91.241.47.0/24
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e9:ff:bb:83:99:4a:50:11:a8:84:49:b7:2b:cd:a7:5c:90:
20:15:12:5e:05:f2:60:d0:d6:66:68:dc:b3:64:16:6a:81:3e:
30:df:7e:c0:4d:10:1d:3a:b4:16:2e:17:d9:2e:66:c6:ca:de:
9e:11:4a:28:35:12:2b:85:c8:3e:39:70:d9:21:6a:2b:df:3b:
05:4f:9f:69:56:1f:1a:87:ce:a3:f0:25:08:82:5e:8e:00:56:
d7:70:2e:1a:0f:74:40:03:f2:b3:0b:a5:73:0b:2d:33:d5:08:
e5:44:d9:3d:c9:cc:68:bc:45:be:a2:e5:c8:6c:31:aa:5d:bc:
72:90:86:77:35:d0:d9:12:06:bd:ba:5e:63:fa:cd:32:a1:dc:
cf:28:19:45:43:6a:01:6d:d8:cd:30:15:ad:74:eb:9e:f4:0c:
92:d5:82:52:f7:0b:0c:b8:45:9f:9a:00:6e:73:95:f8:7e:78:
bf:26:94:42:06:d8:9b:95:ed:ec:ec:d6:f8:3c:59:ae:e3:f1:
5a:5a:f7:56:a2:b1:ed:9a:6e:bc:4a:79:a4:b7:82:1e:ba:13:
5a:57:be:9e:0c:73:84:6d:5e:3a:21:3e:7f:0d:a4:4d:e9:33:
a6:0d:30:40:87:e7:6d:0a:75:5c:23:94:41:d8:2c:b9:11:3b:
a9:aa:87:50
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVtwZqoh75slSX+c4irVsmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjMwMTAxMTQzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTFlNzhmYzE1ZTEyZTY0MjY3YzBkZDFhYmM2NjY4NzQ2ODFkZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjvMjKv9skxJn2ftDdExmorFuncM
K/gAXRQ21C6pG0ei1w2J0HZWm9d9zGlQAmQ6ObJVCmL5Y9HKhtCbb6t7jxlHJjPt
hiRaHQ1n4OEGfgurjEoPkV2I0x2EiF5hBBuOb15zTNFfpqdyiLnYQ4i5+usqkB7/
QZtjU9rBrpgiISRTI0p7SlmO+rtN9ZApTO3+lKrdHXI3aln1zh/teRD1t/Bd2248
KdsCWcwyFtX6z4X5PV8wgrYA/ThGZVgzt6Te1QUuuPy5AyxJQ6eIVRiVSJ+7Fw/i
C62l+FLBXnva+AJLs/KQAotaMOVU3oO3ZM3ONbjLgZ3fsYw9lHDSjGjlQQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHUeePwV4S5kJnwN0avGZodGgd8wMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvZFI1NF9CWGhMbVFtZkEzUnE4Wm1oMGFCM3pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8vrAwQA
W/EvAwQAwRNuAwQAwSv4MA0GCSqGSIb3DQEBCwUAA4IBAQBD6f+7g5lKUBGohEm3
K82nXJAgFRJeBfJg0NZmaNyzZBZqgT4w337ATRAdOrQWLhfZLmbGyt6eEUooNRIr
hcg+OXDZIWor3zsFT59pVh8ah86j8CUIgl6OAFbXcC4aD3RAA/KzC6VzCy0z1Qjl
RNk9ycxovEW+ouXIbDGqXbxykIZ3NdDZEga9ul5j+s0yodzPKBlFQ2oBbdjNMBWt
dOue9AyS1YJS9wsMuEWfmgBuc5X4fni/JpRCBtible3s7Nb4PFmu4/FaWvdWorHt
mm68Snmkt4IeuhNaV76eDHOEbV46IT5/DaRN6TOmDTBAh+dtCnVcI5RB2Cy5ETup
qodQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org