Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/SPoE9vV8RuEUlux7CZqrDypWJO0.roa
File: SPoE9vV8RuEUlux7CZqrDypWJO0.roa (raw, json)
Hash identifier: HiEoVCtBOpZ+cglK9G9llVbWTe8quFvHGGkxOvuRGuU=
Subject key identifier: 48:FA:04:F6:F5:7C:46:E1:14:96:EC:7B:09:9A:AB:0F:2A:56:24:ED
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01856ECB75D71674C2C39026A454DDEAE36B
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/SPoE9vV8RuEUlux7CZqrDypWJO0.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48642
IP address blocks: 91.197.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:75:d7:16:74:c2:c3:90:26:a4:54:dd:ea:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48fa04f6f57c46e11496ec7b099aab0f2a5624ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:1a:46:07:7f:85:40:71:72:1d:c0:8d:4f:
28:e5:f5:b9:01:17:c9:6e:a3:99:e3:32:07:5c:60:
cd:d3:f0:7e:87:63:99:02:25:d6:ba:bc:a4:18:30:
ec:94:40:aa:a1:a1:d8:56:a1:6a:63:a6:b9:92:44:
7c:6c:81:05:39:dc:bb:94:bf:04:bb:28:f7:ec:57:
9f:c6:a8:8f:ba:ef:79:9e:5d:1d:d9:c0:fa:3c:21:
24:cd:35:e1:fa:34:74:eb:ad:41:eb:75:32:2d:57:
da:2d:59:53:99:9c:1f:54:7d:99:bc:c9:40:93:8d:
73:1e:75:a5:cb:f3:76:af:38:ec:23:a0:8e:f6:6e:
5e:cc:25:f8:f5:ae:a4:61:61:f1:9f:c3:37:57:05:
7c:df:a4:76:f0:8d:23:24:70:6b:a3:13:0a:25:60:
d5:d2:c8:65:14:a7:d3:58:ef:7f:ec:53:ef:2e:5f:
0a:d8:ed:0d:45:ab:f1:32:dc:07:3e:12:3f:34:e6:
1e:08:f8:f9:59:83:a5:f1:8a:35:35:31:ec:b8:21:
4d:5d:32:fa:f3:2b:74:77:4d:e0:44:a3:8b:6b:bb:
45:df:da:59:98:40:fd:b1:d7:95:bb:d8:e4:3c:94:
ab:9b:78:c9:b5:98:4b:15:26:3f:07:75:10:9c:c3:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:04:F6:F5:7C:46:E1:14:96:EC:7B:09:9A:AB:0F:2A:56:24:ED
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/SPoE9vV8RuEUlux7CZqrDypWJO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.204.0/22
Signature Algorithm: sha256WithRSAEncryption
05:f4:b5:02:50:9e:cf:a5:6e:37:fd:eb:aa:8a:70:f7:93:5e:
f5:1f:2d:02:c7:f1:67:80:55:30:75:ca:cc:9e:16:4b:7f:47:
9e:56:1f:ad:ea:12:27:59:e3:aa:84:c7:65:2b:ee:fe:59:c0:
e5:97:ea:87:71:47:dc:80:6e:27:82:b6:72:d7:76:ca:d3:68:
2d:a4:be:3a:56:01:e0:03:02:d2:e6:b3:cf:dd:c1:d7:16:0d:
1f:f5:3e:e5:48:81:2c:2c:50:7c:59:80:3b:ab:53:c7:42:4c:
e9:ca:74:65:2a:2f:71:78:e7:f2:e0:8a:8b:74:82:18:46:ff:
1d:b2:d3:28:16:22:d5:0d:8e:48:0f:6d:97:8d:6a:ef:7d:37:
07:e2:76:3b:a8:9e:b4:0a:b6:70:0d:74:8a:19:c5:26:23:7b:
01:c7:28:dc:83:b1:d3:dd:a1:3b:d6:6e:fe:68:2b:0b:ad:44:
44:f1:9f:95:d8:5e:fe:59:02:7c:4a:0c:ab:f6:bb:e6:ff:9a:
d5:d1:15:0b:98:4c:71:27:ec:a2:21:0e:75:df:f2:a7:bb:f9:
7d:05:53:35:3b:3b:3b:cf:5f:dc:52:6c:11:5b:50:99:c7:f9:
0c:dc:ea:70:97:3a:94:49:80:32:0b:1c:40:e3:ec:2e:78:8d:
87:87:5a:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy3XXFnTCw5AmpFTd6uNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjMwMTAxMTkyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGZhMDRmNmY1N2M0NmUxMTQ5NmVjN2IwOTlhYWIwZjJhNTYyNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn64aRgd/hUBxch3AjU8o5fW5ARfJ
bqOZ4zIHXGDN0/B+h2OZAiXWurykGDDslECqoaHYVqFqY6a5kkR8bIEFOdy7lL8E
uyj37FefxqiPuu95nl0d2cD6PCEkzTXh+jR0661B63UyLVfaLVlTmZwfVH2ZvMlA
k41zHnWly/N2rzjsI6CO9m5ezCX49a6kYWHxn8M3VwV836R28I0jJHBroxMKJWDV
0shlFKfTWO9/7FPvLl8K2O0NRavxMtwHPhI/NOYeCPj5WYOl8Yo1NTHsuCFNXTL6
8yt0d03gRKOLa7tF39pZmED9sdeVu9jkPJSrm3jJtZhLFSY/B3UQnMMF2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEj6BPb1fEbhFJbsewmaqw8qViTtMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvU1BvRTl2VjhSdUVVbHV4N0NacXJEeXBXSk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8XMMA0G
CSqGSIb3DQEBCwUAA4IBAQAF9LUCUJ7PpW43/euqinD3k171Hy0Cx/FngFUwdcrM
nhZLf0eeVh+t6hInWeOqhMdlK+7+WcDll+qHcUfcgG4ngrZy13bK02gtpL46VgHg
AwLS5rPP3cHXFg0f9T7lSIEsLFB8WYA7q1PHQkzpynRlKi9xeOfy4IqLdIIYRv8d
stMoFiLVDY5ID22XjWrvfTcH4nY7qJ60CrZwDXSKGcUmI3sBxyjcg7HT3aE71m7+
aCsLrURE8Z+V2F7+WQJ8Sgyr9rvm/5rV0RULmExxJ+yiIQ513/Knu/l9BVM1Ozs7
z1/cUmwRW1CZx/kM3OpwlzqUSYAyCxxA4+wueI2Hh1pG
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:15 2024 by rpki-client on console-fra.rpki-client.org