Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/Rx6OgImX8DP1TvGOhpZo1KjlNrY.roa
File: Rx6OgImX8DP1TvGOhpZo1KjlNrY.roa (raw, json)
Hash identifier: 9VLuSOLG6V5fCs9yiQP9UfFQVkPc2T4z0OPIB823YAI=
Subject key identifier: 47:1E:8E:80:89:97:F0:33:F5:4E:F1:8E:86:96:68:D4:A8:E5:36:B6
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01856E14448E1AE2BD906916F7A27B81320B
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/Rx6OgImX8DP1TvGOhpZo1KjlNrY.roa
Signing time: Sun 01 Jan 2023 16:04:59 +0000
ROA not before: Sun 01 Jan 2023 16:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22351
IP address blocks: 91.232.198.0/24 maxlen: 24
91.232.208.0/24 maxlen: 24
185.87.144.0/22 maxlen: 24
91.232.235.0/24 maxlen: 24
91.232.129.0/24 maxlen: 24
80.73.219.0/24 maxlen: 24
80.73.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:44:8e:1a:e2:bd:90:69:16:f7:a2:7b:81:32:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jan 1 16:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471e8e808997f033f54ef18e869668d4a8e536b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:6e:74:0a:f3:54:96:3b:c9:7f:ef:ba:f9:
94:53:9d:60:ac:22:cd:cd:a5:80:47:7d:6b:e9:65:
b8:ed:3c:08:69:f5:dc:ad:4c:aa:ff:6a:ae:b4:a1:
c5:82:87:5c:bb:45:f8:85:af:40:74:50:e3:c9:6a:
a0:be:c9:60:01:59:75:87:18:ac:5d:37:0e:ac:c9:
64:05:79:c5:a3:e0:b0:82:92:d9:40:b7:66:3c:31:
c5:35:16:e8:d5:03:4a:28:cd:21:47:44:68:00:31:
b3:1c:54:ee:7e:67:15:34:82:95:75:5c:07:b6:ca:
01:fd:bf:55:67:6f:73:e1:99:6a:8e:df:b1:4a:ae:
a1:dc:da:6f:55:56:b9:6e:22:e3:c8:fe:3d:75:bf:
30:60:3a:06:f3:91:b4:b4:99:00:51:c3:ff:77:2c:
2b:36:77:a9:63:5c:e1:3f:fe:13:3b:4a:56:8a:d0:
b8:f2:4c:ed:b7:8a:a6:8c:c5:05:b7:4d:ce:9c:2c:
52:a5:86:af:68:a0:8a:fd:81:d1:c5:ed:75:7f:d0:
25:0f:ff:06:0b:50:59:7c:0f:d0:a1:b4:2a:04:9a:
2d:d0:31:9c:cf:b7:6c:84:03:ee:80:99:1d:5a:8f:
71:e6:73:fe:74:f2:1b:f8:03:53:fd:89:8c:0e:84:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:8E:80:89:97:F0:33:F5:4E:F1:8E:86:96:68:D4:A8:E5:36:B6
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/Rx6OgImX8DP1TvGOhpZo1KjlNrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.219.0-80.73.220.255
91.232.129.0/24
91.232.198.0/24
91.232.208.0/24
91.232.235.0/24
185.87.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:be:b3:2f:f7:d6:0e:05:b8:1a:76:7e:1b:a3:f2:10:a5:1c:
94:3e:5b:52:ea:5a:76:a0:b1:78:7b:d9:f3:25:5b:95:57:89:
b1:fc:64:47:95:70:8f:34:cc:a8:70:70:5b:64:bc:0c:da:2e:
8f:52:04:c5:d0:82:05:d5:bb:b4:19:f1:c1:86:f1:77:fd:f0:
02:d6:97:49:3a:c4:94:dc:3e:8f:09:4b:50:e3:68:7a:78:04:
cc:5d:ec:f2:b2:17:00:87:a9:00:1e:0b:21:9e:df:27:8d:17:
15:09:a7:df:23:2e:15:ae:61:a5:67:2c:6d:dc:2d:d9:79:63:
82:23:5d:45:e0:5e:eb:fc:8d:06:9a:9c:6e:a2:3d:02:6d:16:
fd:c9:60:06:b4:fe:43:31:13:ba:44:61:aa:b7:8a:00:93:d0:
d2:f3:2a:fe:5d:59:cd:34:02:36:da:35:93:e1:9b:7a:3b:4d:
37:02:7e:80:37:08:3f:c8:60:62:6e:5c:b2:75:23:7e:b1:ae:
eb:f3:c8:01:ed:c2:53:81:2d:41:eb:b0:28:d3:00:4b:25:7c:
52:3f:c4:42:e1:82:65:d8:eb:fe:ca:42:04:20:69:c7:f9:0c:
67:db:09:2a:ad:5c:f1:10:df:e5:ad:cf:21:2d:17:81:dc:58:
9d:8f:fe:df
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYVuFESOGuK9kGkW96J7gTILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjMwMTAxMTYwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFlOGU4MDg5OTdmMDMzZjU0ZWYxOGU4Njk2NjhkNGE4ZTUzNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgJudArzVJY7yX/vuvmUU51grCLN
zaWAR31r6WW47TwIafXcrUyq/2qutKHFgodcu0X4ha9AdFDjyWqgvslgAVl1hxis
XTcOrMlkBXnFo+CwgpLZQLdmPDHFNRbo1QNKKM0hR0RoADGzHFTufmcVNIKVdVwH
tsoB/b9VZ29z4Zlqjt+xSq6h3NpvVVa5biLjyP49db8wYDoG85G0tJkAUcP/dywr
NnepY1zhP/4TO0pWitC48kztt4qmjMUFt03OnCxSpYavaKCK/YHRxe11f9AlD/8G
C1BZfA/QobQqBJot0DGcz7dshAPugJkdWo9x5nP+dPIb+ANT/YmMDoTeqQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFEcejoCJl/Az9U7xjoaWaNSo5Ta2MB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvUng2T2dJbVg4RFAxVHZHT2hwWm8xS2psTnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBABQSdsD
BABQSdwDBABb6IEDBABb6MYDBABb6NADBABb6OsDBAK5V5AwDQYJKoZIhvcNAQEL
BQADggEBAJ++sy/31g4FuBp2fhuj8hClHJQ+W1LqWnagsXh72fMlW5VXibH8ZEeV
cI80zKhwcFtkvAzaLo9SBMXQggXVu7QZ8cGG8Xf98ALWl0k6xJTcPo8JS1DjaHp4
BMxd7PKyFwCHqQAeCyGe3yeNFxUJp98jLhWuYaVnLG3cLdl5Y4IjXUXgXuv8jQaa
nG6iPQJtFv3JYAa0/kMxE7pEYaq3igCT0NLzKv5dWc00AjbaNZPhm3o7TTcCfoA3
CD/IYGJuXLJ1I36xruvzyAHtwlOBLUHrsCjTAEslfFI/xELhgmXY6/7KQgQgacf5
DGfbCSqtXPEQ3+WtzyEtF4HcWJ2P/t8=
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:09 2024 by rpki-client on console-ams.rpki-client.org