Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/pBS-uoIzsocUIr62zHlB9F2razU.roa
File: pBS-uoIzsocUIr62zHlB9F2razU.roa (raw, json)
Hash identifier: Udn/X0FWVqCFosYuTasB/aYGl2dqm3b3RwkUOsKErr8=
Subject key identifier: A4:14:BE:BA:82:33:B2:87:14:22:BE:B6:CC:79:41:F4:5D:AB:6B:35
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 018570B9890C632376538BF35F0A3B67D609
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/pBS-uoIzsocUIr62zHlB9F2razU.roa
Signing time: Mon 02 Jan 2023 04:24:45 +0000
ROA not before: Mon 02 Jan 2023 04:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43906
IP address blocks: 91.198.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:89:0c:63:23:76:53:8b:f3:5f:0a:3b:67:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Jan 2 04:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a414beba8233b2871422beb6cc7941f45dab6b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:a5:d3:fc:f9:9a:bb:62:05:e0:1e:ac:18:
d0:29:b2:02:28:22:05:7d:27:36:7c:73:ca:19:ad:
43:4f:95:18:a7:b1:e3:39:dc:53:d1:b8:52:c9:38:
25:3a:6d:0e:c3:0a:9f:f4:5f:5d:9a:75:ec:84:b8:
f2:e3:4a:4d:ee:d4:03:83:27:0f:ed:4c:95:8d:19:
75:8a:89:fc:6a:27:e6:2f:78:4e:4d:02:06:0c:38:
b9:6a:8c:64:6c:6f:d6:ac:aa:0a:7b:ba:6d:77:df:
47:34:c2:f7:95:6c:06:10:9b:25:fd:48:01:a8:69:
2b:dc:d5:7c:bc:e1:61:2d:e4:b1:aa:4f:ba:14:78:
70:e8:d9:5b:42:0d:6b:57:97:aa:78:47:e5:15:b2:
8f:e4:c9:e9:af:6d:30:5d:90:8f:c4:3b:d5:b6:f2:
cf:e8:2c:ab:93:f6:3b:56:d1:6c:9d:89:d7:6a:76:
7c:91:c4:1a:27:a0:ef:8e:a8:0e:36:f6:97:1c:12:
94:d0:a4:b6:15:b1:c0:b5:92:bd:3a:63:50:1e:8c:
8e:49:f3:37:8b:3e:ca:65:4a:55:61:69:89:9b:26:
29:4b:ca:6b:ca:31:ae:6d:0b:da:b1:30:71:1b:5f:
fa:da:44:4d:38:14:a1:3f:32:05:7d:10:16:6c:de:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:BE:BA:82:33:B2:87:14:22:BE:B6:CC:79:41:F4:5D:AB:6B:35
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/pBS-uoIzsocUIr62zHlB9F2razU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.229.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a7:60:26:45:66:99:d4:7a:a7:e3:00:23:98:69:94:2d:63:
0b:b2:4e:54:ff:3d:3d:15:6d:17:52:c8:07:96:83:d9:9d:54:
ee:2b:11:42:43:4f:64:3e:fc:f7:81:ba:08:53:e3:76:ab:c7:
8b:75:04:fa:47:6d:a4:f6:ee:b3:0b:07:2d:36:f3:75:f8:b1:
60:b3:e5:d7:59:2f:18:19:56:13:3f:37:23:55:b7:7c:39:87:
ad:33:89:98:3b:3d:e6:b5:e2:62:73:c8:1f:e3:3d:2d:4f:7d:
ab:b4:fe:74:66:7e:79:37:af:24:94:be:69:1d:22:4e:ab:e0:
f9:5c:ed:53:21:9d:c7:47:13:fc:18:7d:ae:bf:76:96:31:a9:
bf:65:4a:ec:dd:09:22:3f:6c:87:9a:bd:8b:d5:e4:84:b9:c5:
d6:2a:fc:95:d9:81:97:f0:39:c6:93:7e:77:2c:a5:b8:d3:34:
f9:8c:b0:df:f3:37:04:67:43:b6:4f:e5:a1:3c:bb:da:37:13:
55:03:11:b6:71:92:7c:23:81:5b:70:53:6e:2d:46:2a:67:39:
35:25:96:dd:b6:a9:5d:5e:f7:e3:61:ca:7e:4c:38:8d:c8:31:
a8:d6:a9:df:a8:4e:f3:9b:7d:cf:a5:7e:00:2d:ad:8d:6f:1e:
1e:3a:f2:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwuYkMYyN2U4vzXwo7Z9YJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTc5ZDM3ZGEwMTZhYmQxMzI3OTI3MGJhNTVkNmIzYzI5
NjA1NzgwHhcNMjMwMTAyMDQyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDE0YmViYTgyMzNiMjg3MTQyMmJlYjZjYzc5NDFmNDVkYWI2YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBGl0/z5mrtiBeAerBjQKbICKCIF
fSc2fHPKGa1DT5UYp7HjOdxT0bhSyTglOm0Owwqf9F9dmnXshLjy40pN7tQDgycP
7UyVjRl1ion8aifmL3hOTQIGDDi5aoxkbG/WrKoKe7ptd99HNML3lWwGEJsl/UgB
qGkr3NV8vOFhLeSxqk+6FHhw6NlbQg1rV5eqeEflFbKP5Mnpr20wXZCPxDvVtvLP
6Cyrk/Y7VtFsnYnXanZ8kcQaJ6DvjqgONvaXHBKU0KS2FbHAtZK9OmNQHoyOSfM3
iz7KZUpVYWmJmyYpS8pryjGubQvasTBxG1/62kRNOBShPzIFfRAWbN4ufwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQUvrqCM7KHFCK+tsx5QfRdq2s1MB8GA1UdIwQY
MBaAFBaXnTfaAWq9EyeScLpV1rPClgV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzIt
YjlkYmRjOGI0MzljLzEvcEJTLXVvSXpzb2NVSXI2MnpIbEI5RjJyYXpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzItYjlkYmRjOGI0Mzlj
LzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8blMA0G
CSqGSIb3DQEBCwUAA4IBAQC+p2AmRWaZ1Hqn4wAjmGmULWMLsk5U/z09FW0XUsgH
loPZnVTuKxFCQ09kPvz3gboIU+N2q8eLdQT6R22k9u6zCwctNvN1+LFgs+XXWS8Y
GVYTPzcjVbd8OYetM4mYOz3mteJic8gf4z0tT32rtP50Zn55N68klL5pHSJOq+D5
XO1TIZ3HRxP8GH2uv3aWMam/ZUrs3QkiP2yHmr2L1eSEucXWKvyV2YGX8DnGk353
LKW40zT5jLDf8zcEZ0O2T+WhPLvaNxNVAxG2cZJ8I4FbcFNuLUYqZzk1JZbdtqld
XvfjYcp+TDiNyDGo1qnfqE7zm33PpX4ALa2Nbx4eOvJu
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:42 2024 by rpki-client on console-ams.rpki-client.org