Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/D9y_3DES31X7BzMPTbvNHTHVxfg.roa
File: D9y_3DES31X7BzMPTbvNHTHVxfg.roa (raw, json)
Hash identifier: dZmgJZmmo7Y4U1ryUJ4JX5IPMQGjDqvW81XntELzWds=
Subject key identifier: 0F:DC:BF:DC:31:12:DF:55:FB:07:33:0F:4D:BB:CD:1D:31:D5:C5:F8
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 018571831C87AC37E23F2918E100F0DF2731
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/D9y_3DES31X7BzMPTbvNHTHVxfg.roa
Signing time: Mon 02 Jan 2023 08:04:55 +0000
ROA not before: Mon 02 Jan 2023 08:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 46.150.64.0/19 maxlen: 20
91.237.6.0/23 maxlen: 24
195.42.126.0/23 maxlen: 24
91.237.12.0/22 maxlen: 23
176.111.176.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:1c:87:ac:37:e2:3f:29:18:e1:00:f0:df:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Jan 2 08:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fdcbfdc3112df55fb07330f4dbbcd1d31d5c5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:07:c6:5f:b1:9d:9f:d9:96:0b:84:46:56:
c8:80:9f:7c:b5:54:a6:54:fd:d3:96:60:ed:8b:d8:
44:35:c3:92:00:3a:c4:9f:d9:43:43:f7:41:80:32:
85:28:2e:c6:de:c8:50:c4:da:71:4f:40:fb:a1:c7:
eb:e7:7e:20:47:aa:ed:84:c1:9c:95:c9:8f:9c:fe:
27:07:f6:94:91:83:9f:bd:57:2b:bd:4d:88:11:e7:
ca:41:df:e7:75:be:c9:ce:07:80:e9:2e:d8:1b:a7:
ad:ec:11:a2:79:da:0c:53:bd:26:e3:46:96:0d:3f:
6a:bb:f3:a1:12:7e:95:c0:92:3e:9a:b5:25:54:6a:
8c:56:ea:57:a7:f7:a5:b4:67:f4:a9:37:74:00:0f:
3a:a7:a6:88:29:1c:64:b6:a4:ae:cf:a5:62:e4:46:
7c:34:64:d1:02:ba:dc:6c:da:f5:59:f5:af:46:03:
3c:73:b2:eb:1d:10:4f:51:dd:0e:c6:84:eb:7b:06:
c0:e8:7e:9e:70:1a:af:bb:f1:07:6b:60:e5:57:db:
e7:7c:67:2c:bc:5d:01:46:c0:f0:64:2b:fd:a2:c1:
79:88:29:7b:12:10:df:f5:57:5c:91:31:a4:84:39:
19:8c:ea:20:af:62:7a:5b:0f:51:64:62:97:32:90:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:BF:DC:31:12:DF:55:FB:07:33:0F:4D:BB:CD:1D:31:D5:C5:F8
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/D9y_3DES31X7BzMPTbvNHTHVxfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.64.0/19
91.237.6.0/23
91.237.12.0/22
176.111.176.0/20
195.42.126.0/23
Signature Algorithm: sha256WithRSAEncryption
92:d1:5c:7d:9e:c6:3d:a5:19:6b:8a:f4:3c:86:a5:c3:f0:05:
08:30:bc:f7:da:fb:66:d6:44:24:53:b2:5f:44:08:e5:78:ce:
23:34:49:81:73:66:de:d0:8e:95:4d:a9:8b:92:07:64:41:be:
82:2f:3f:74:0a:b1:94:29:66:13:3b:18:78:55:3b:a4:85:26:
3d:84:f1:78:48:af:ff:ea:ea:55:ab:e3:e9:68:a7:17:58:5b:
24:2c:68:89:17:43:29:8e:86:fe:2c:20:81:df:53:01:0c:2d:
2d:52:01:ba:2d:2a:83:b9:d7:43:dd:d2:97:30:d1:59:53:b7:
2b:3b:bf:e1:3d:20:cc:56:91:0a:91:7f:b2:fd:ef:17:fc:ef:
16:43:0d:9b:fc:4b:12:4c:7e:f6:4a:3d:5a:5b:ad:7d:16:a5:
78:83:45:77:fc:19:02:d5:4b:aa:58:0d:2d:3f:d1:c8:b5:ac:
f8:cc:a3:7e:97:a9:f8:71:8e:09:ce:15:76:14:f6:b9:c7:50:
d8:66:2e:a2:3e:ba:11:b2:1c:5b:21:df:07:b6:b0:9d:ea:ec:
55:b0:1a:39:2d:8d:57:cb:8b:e7:e5:99:d3:f2:39:9e:c8:dc:
73:ef:8c:b2:2f:88:7e:e2:54:61:4d:0c:6a:d6:59:d1:83:d1:
2b:de:98:65
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVxgxyHrDfiPykY4QDw3ycxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj
YWJkNjYwHhcNMjMwMTAyMDgwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmRjYmZkYzMxMTJkZjU1ZmIwNzMzMGY0ZGJiY2QxZDMxZDVjNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBwHxl+xnZ/ZlguERlbIgJ98tVSm
VP3TlmDti9hENcOSADrEn9lDQ/dBgDKFKC7G3shQxNpxT0D7ocfr534gR6rthMGc
lcmPnP4nB/aUkYOfvVcrvU2IEefKQd/ndb7JzgeA6S7YG6et7BGiedoMU70m40aW
DT9qu/OhEn6VwJI+mrUlVGqMVupXp/eltGf0qTd0AA86p6aIKRxktqSuz6Vi5EZ8
NGTRArrcbNr1WfWvRgM8c7LrHRBPUd0OxoTrewbA6H6ecBqvu/EHa2DlV9vnfGcs
vF0BRsDwZCv9osF5iCl7EhDf9VdckTGkhDkZjOogr2J6Ww9RZGKXMpCcawIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFA/cv9wxEt9V+wczD027zR0x1cX4MB8GA1UdIwQY
MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt
NDA1YjBiZGEyYzI2LzEvRDl5XzNERVMzMVg3QnpNUFRidk5IVEhWeGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2
LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFLpZAAwQB
W+0GAwQCW+0MAwQEsG+wAwQBwyp+MA0GCSqGSIb3DQEBCwUAA4IBAQCS0Vx9nsY9
pRlrivQ8hqXD8AUIMLz32vtm1kQkU7JfRAjleM4jNEmBc2be0I6VTamLkgdkQb6C
Lz90CrGUKWYTOxh4VTukhSY9hPF4SK//6upVq+PpaKcXWFskLGiJF0Mpjob+LCCB
31MBDC0tUgG6LSqDuddD3dKXMNFZU7crO7/hPSDMVpEKkX+y/e8X/O8WQw2b/EsS
TH72Sj1aW619FqV4g0V3/BkC1UuqWA0tP9HItaz4zKN+l6n4cY4JzhV2FPa5x1DY
Zi6iProRshxbId8HtrCd6uxVsBo5LY1Xy4vn5ZnT8jmeyNxz74yyL4h+4lRhTQxq
1lnRg9Er3phl
-----END CERTIFICATE-----
Generated at Tue Oct 24 11:39:52 2023 by rpki-client on console-fra.rpki-client.org