Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/ONSRIkFaW3UewtuprT_fbEvEAjI.roa
File: ONSRIkFaW3UewtuprT_fbEvEAjI.roa (raw, json)
Hash identifier: 7d64x4qMUhPUDp7bfH/UTXX1ReBTmKPeWB61NAA67mo=
Subject key identifier: 38:D4:91:22:41:5A:5B:75:1E:C2:DB:A9:AD:3F:DF:6C:4B:C4:02:32
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0185710BE1116A172054F30EA30489EEFCB7
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/ONSRIkFaW3UewtuprT_fbEvEAjI.roa
Signing time: Mon 02 Jan 2023 05:54:41 +0000
ROA not before: Mon 02 Jan 2023 05:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51835
IP address blocks: 91.194.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:e1:11:6a:17:20:54:f3:0e:a3:04:89:ee:fc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jan 2 05:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38d49122415a5b751ec2dba9ad3fdf6c4bc40232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:1b:a2:54:d2:0f:df:3a:32:8e:5a:b3:60:
31:22:36:3e:b9:83:3e:92:59:44:a4:08:a7:a0:94:
30:4f:90:87:b9:d7:31:ca:47:75:a5:d4:d7:10:40:
42:a9:59:32:ad:82:4e:92:c5:5d:08:47:cd:21:e2:
ce:c5:9a:7f:e7:8c:41:d7:87:8a:b3:cc:f1:0e:d6:
74:98:a1:b1:3a:f7:fb:fb:ce:ba:3c:a5:c8:a1:6c:
45:53:52:00:4f:59:ae:18:a5:2b:80:3d:de:18:0b:
ba:00:a5:68:27:81:46:6b:8d:39:8c:1f:b4:e0:a4:
9f:8e:96:62:6e:1a:3b:aa:31:20:69:ac:24:9b:65:
95:1f:48:b8:8e:b1:4f:da:4f:89:91:67:60:e6:71:
fd:4d:39:60:0a:f0:c6:f6:47:28:79:6b:c7:ee:21:
f8:9e:1e:7a:4d:e2:da:19:6d:23:a6:67:23:2a:5c:
49:e7:ad:3b:44:73:19:95:f7:23:15:d5:1e:dd:a2:
cb:42:eb:97:6c:4e:65:dc:84:a0:14:f7:82:7f:c2:
50:c8:12:19:a0:0b:62:a3:a0:1d:6d:db:4e:9b:bb:
c9:21:0b:c8:d9:ba:57:19:56:05:a8:b3:c1:ad:99:
d3:6b:6c:1d:90:fa:ab:b8:63:17:ba:10:56:b8:00:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:91:22:41:5A:5B:75:1E:C2:DB:A9:AD:3F:DF:6C:4B:C4:02:32
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/ONSRIkFaW3UewtuprT_fbEvEAjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.31.0/24
Signature Algorithm: sha256WithRSAEncryption
86:57:de:83:17:70:23:d5:8f:d8:41:50:28:b9:d0:2c:e3:40:
3b:c7:ff:7f:af:58:f5:19:00:18:28:4f:9d:5f:4e:d9:34:e1:
3a:69:a4:32:b7:75:6b:39:dd:68:f4:23:41:7e:d7:e1:2f:bd:
1b:76:cb:0d:c6:13:d2:a7:f6:c0:f6:c6:10:22:ff:c5:8e:7d:
88:25:15:92:ba:63:55:ff:8e:03:d8:e0:6f:e2:90:c2:be:66:
03:06:a1:d0:9e:ab:96:f1:e7:7d:e2:31:af:fa:5a:8e:3e:3c:
9d:18:99:8b:e3:54:f4:db:fa:71:b2:5f:c4:4d:e7:ee:8b:75:
97:6e:53:fe:55:00:ea:8c:93:0f:1f:fa:4c:93:0e:d9:de:5d:
54:d8:1a:16:ff:c5:f5:cf:5f:fc:61:f3:40:67:fe:46:b5:04:
b0:e7:dc:49:bb:52:10:f1:8b:27:12:b6:e6:d4:7e:b4:e3:00:
68:87:75:c0:70:fb:71:05:0f:78:2c:93:96:27:50:76:aa:01:
87:1f:31:d5:32:fc:7d:ef:87:64:20:fd:1b:e8:f6:cf:39:06:
29:09:94:0a:41:4e:6b:c1:d2:6f:9b:3d:22:65:70:bf:da:10:
87:98:d6:d2:c0:1f:96:c2:c0:d2:de:b4:0b:f9:e3:28:90:3e:
1f:b2:e5:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxC+ERahcgVPMOowSJ7vy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NjBmZDU4NjQ4MjY4MDVjZjM2NTVlZWViMmZiODk4ZjM2
ZDk4MjEwHhcNMjMwMTAyMDU1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGQ0OTEyMjQxNWE1Yjc1MWVjMmRiYTlhZDNmZGY2YzRiYzQwMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX4bolTSD986Mo5as2AxIjY+uYM+
kllEpAinoJQwT5CHudcxykd1pdTXEEBCqVkyrYJOksVdCEfNIeLOxZp/54xB14eK
s8zxDtZ0mKGxOvf7+866PKXIoWxFU1IAT1muGKUrgD3eGAu6AKVoJ4FGa405jB+0
4KSfjpZibho7qjEgaawkm2WVH0i4jrFP2k+JkWdg5nH9TTlgCvDG9kcoeWvH7iH4
nh56TeLaGW0jpmcjKlxJ5607RHMZlfcjFdUe3aLLQuuXbE5l3ISgFPeCf8JQyBIZ
oAtio6AdbdtOm7vJIQvI2bpXGVYFqLPBrZnTa2wdkPqruGMXuhBWuADkPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDjUkSJBWlt1HsLbqa0/32xLxAIyMB8GA1UdIwQY
MBaAFJdg/VhkgmgFzzZV7usvuJjzbZghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMt
ZDlhMTA0NDA0YWFmLzEvT05TUklrRmFXM1Vld3R1cHJUX2ZiRXZFQWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMtZDlhMTA0NDA0YWFm
LzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8IfMA0G
CSqGSIb3DQEBCwUAA4IBAQCGV96DF3Aj1Y/YQVAoudAs40A7x/9/r1j1GQAYKE+d
X07ZNOE6aaQyt3VrOd1o9CNBftfhL70bdssNxhPSp/bA9sYQIv/Fjn2IJRWSumNV
/44D2OBv4pDCvmYDBqHQnquW8ed94jGv+lqOPjydGJmL41T02/pxsl/ETefui3WX
blP+VQDqjJMPH/pMkw7Z3l1U2BoW/8X1z1/8YfNAZ/5GtQSw59xJu1IQ8YsnErbm
1H604wBoh3XAcPtxBQ94LJOWJ1B2qgGHHzHVMvx974dkIP0b6PbPOQYpCZQKQU5r
wdJvmz0iZXC/2hCHmNbSwB+WwsDS3rQL+eMokD4fsuVu
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:32 2024 by rpki-client on console-fra.rpki-client.org