Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/D91pb7q4WNm-YXTKoGmgehIroBE.roa
File: D91pb7q4WNm-YXTKoGmgehIroBE.roa (raw, json)
Hash identifier: A8owQeXqkmwyBhIoLBUxIm7npDCm48aT9BJy9G6yiYk=
Subject key identifier: 0F:DD:69:6F:BA:B8:58:D9:BE:61:74:CA:A0:69:A0:7A:12:2B:A0:11
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 01856D540F6C9C140887849188C8B2AEC1B1
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/D91pb7q4WNm-YXTKoGmgehIroBE.roa
Signing time: Sun 01 Jan 2023 12:35:03 +0000
ROA not before: Sun 01 Jan 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 147.189.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 15:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0f:6c:9c:14:08:87:84:91:88:c8:b2:ae:c1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 1 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fdd696fbab858d9be6174caa069a07a122ba011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:92:70:f8:2b:7b:ac:40:58:55:b6:ad:7f:
d3:eb:49:41:b9:e1:ab:db:cb:89:a0:8f:dc:54:ab:
31:ef:0c:ed:f1:8a:f5:8e:ec:1d:c9:ba:69:0f:9b:
39:d2:3d:2a:a4:08:11:13:35:7e:cb:7a:57:9f:84:
22:a3:29:c4:01:7c:c1:ff:a8:35:bd:b6:d6:93:50:
09:43:7a:f3:fd:2a:75:99:5c:68:36:42:28:58:e9:
a1:99:e9:cb:a9:13:6f:ee:6b:dd:e4:8a:30:23:d4:
30:1b:aa:7a:03:59:00:03:12:ba:37:b5:42:86:13:
27:79:bd:a0:64:c8:8e:9a:23:b7:4d:c6:1b:c4:35:
f7:42:17:47:33:d0:2c:56:8f:2b:ba:c4:75:09:e4:
4f:68:72:8a:6d:a7:cb:0e:78:09:f1:b7:9b:af:5d:
42:f7:a3:60:93:1a:03:e3:96:02:40:4a:ca:e2:f4:
7d:bc:39:48:35:47:4c:2b:53:68:d2:84:81:bd:92:
9c:3e:9e:d6:0d:a4:ad:6e:18:0a:86:3e:e9:a9:7e:
84:fe:8b:28:8f:6b:98:85:7a:27:c9:6b:10:56:2c:
4f:34:b8:87:b8:89:a4:d7:26:ef:70:6d:f8:5b:2d:
8d:0f:ba:ea:fc:6a:c1:db:c5:a7:e5:e0:81:f4:c0:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DD:69:6F:BA:B8:58:D9:BE:61:74:CA:A0:69:A0:7A:12:2B:A0:11
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/D91pb7q4WNm-YXTKoGmgehIroBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0c:67:61:b6:e6:5e:cb:c2:5b:bf:65:8a:4d:17:7f:6f:a1:
e6:d6:03:4c:f7:78:bd:72:57:4d:74:16:2c:83:c8:be:e5:12:
2d:0d:32:ea:ab:c5:ee:1a:27:4d:6b:19:3a:3e:5c:e5:04:59:
15:88:25:b5:8a:c9:31:ac:60:30:a4:7b:b3:fd:1e:66:70:24:
1c:7d:d1:88:87:b9:e0:2e:e6:ea:a3:72:65:37:08:31:b7:71:
bd:f7:01:65:05:84:04:1b:82:ea:f4:f3:db:b4:a4:c9:72:6a:
a2:0c:76:a1:85:30:4a:60:ba:ac:9f:67:a2:46:27:45:87:c9:
9c:31:78:eb:4a:45:72:b7:7a:25:7a:86:a4:3a:ef:5a:64:20:
25:85:d7:a9:cc:25:a0:24:e1:37:66:2d:05:dc:82:80:d6:04:
b6:04:38:40:28:8d:f4:8f:fa:f6:ee:a0:79:19:94:73:6e:d6:
a1:25:a3:04:7b:66:c1:89:b0:6d:d5:f4:ea:db:35:ce:dd:f1:
66:94:98:c2:db:8c:60:6b:57:08:4d:02:40:8b:9e:b1:9f:4e:
9a:bd:37:58:91:c4:c4:52:9b:3a:a9:c3:85:e1:80:07:99:97:
e0:c2:9b:55:fa:c7:f4:08:64:36:e4:35:36:aa:44:fd:9a:10:
1f:60:1f:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtVA9snBQIh4SRiMiyrsGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTk4ZDNjOWQ4YmRjOWMxZGZmOGUzMTk0MjQ0MTJiNmNk
YzFkZDMwHhcNMjMwMTAxMTIzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmRkNjk2ZmJhYjg1OGQ5YmU2MTc0Y2FhMDY5YTA3YTEyMmJhMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlOScPgre6xAWFW2rX/T60lBueGr
28uJoI/cVKsx7wzt8Yr1juwdybppD5s50j0qpAgREzV+y3pXn4QioynEAXzB/6g1
vbbWk1AJQ3rz/Sp1mVxoNkIoWOmhmenLqRNv7mvd5IowI9QwG6p6A1kAAxK6N7VC
hhMneb2gZMiOmiO3TcYbxDX3QhdHM9AsVo8rusR1CeRPaHKKbafLDngJ8bebr11C
96NgkxoD45YCQErK4vR9vDlINUdMK1No0oSBvZKcPp7WDaStbhgKhj7pqX6E/oso
j2uYhXonyWsQVixPNLiHuImk1ybvcG34Wy2ND7rq/GrB28Wn5eCB9MAdZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/daW+6uFjZvmF0yqBpoHoSK6ARMB8GA1UdIwQY
MBaAFGCZjTydi9ycHf+OMZQkQSts3B3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUptTlBKMkwzSndkXzQ0eGxDUkJLMnpjSGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NzlhZTktN2QyMi00MjUyLThjNWIt
MGVhNGQ1MzFiNzkzLzEvRDkxcGI3cTRXTm0tWVhUS29HbWdlaElyb0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83NzlhZTktN2QyMi00MjUyLThjNWItMGVhNGQ1MzFiNzkz
LzEvWUptTlBKMkwzSndkXzQ0eGxDUkJLMnpjSGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk72jMA0G
CSqGSIb3DQEBCwUAA4IBAQCkDGdhtuZey8Jbv2WKTRd/b6Hm1gNM93i9cldNdBYs
g8i+5RItDTLqq8XuGidNaxk6PlzlBFkViCW1iskxrGAwpHuz/R5mcCQcfdGIh7ng
Lubqo3JlNwgxt3G99wFlBYQEG4Lq9PPbtKTJcmqiDHahhTBKYLqsn2eiRidFh8mc
MXjrSkVyt3oleoakOu9aZCAlhdepzCWgJOE3Zi0F3IKA1gS2BDhAKI30j/r27qB5
GZRzbtahJaMEe2bBibBt1fTq2zXO3fFmlJjC24xga1cITQJAi56xn06avTdYkcTE
Ups6qcOF4YAHmZfgwptV+sf0CGQ25DU2qkT9mhAfYB/k
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org