Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/3xTFPCiWZBg6lkDxreN3DbpxhcM.roa
File: 3xTFPCiWZBg6lkDxreN3DbpxhcM.roa (raw, json)
Hash identifier: /npbhQEnnKoPg9T74rJWf4n/j3G8/8rBuvbBlQt076g=
Subject key identifier: DF:14:C5:3C:28:96:64:18:3A:96:40:F1:AD:E3:77:0D:BA:71:85:C3
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 018571D796A92A60CED968A22FEE274733C8
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/3xTFPCiWZBg6lkDxreN3DbpxhcM.roa
Signing time: Mon 02 Jan 2023 09:37:12 +0000
ROA not before: Mon 02 Jan 2023 09:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 91.216.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:96:a9:2a:60:ce:d9:68:a2:2f:ee:27:47:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Jan 2 09:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df14c53c289664183a9640f1ade3770dba7185c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:a8:7b:32:15:ad:41:3c:ef:d6:eb:f2:53:
6b:04:05:94:8a:f1:43:b0:f0:33:be:3c:1d:e4:35:
6c:35:14:d6:10:ec:74:87:01:d6:93:c6:79:c4:04:
be:0d:c3:20:a7:cc:c8:52:9f:7f:04:be:18:17:b5:
b3:e5:72:57:04:b7:90:35:1a:b2:f1:31:6a:52:bb:
ec:04:51:b6:62:35:cf:37:f3:7c:24:b4:1e:c4:14:
e4:49:ff:41:c8:77:9f:51:cd:fb:86:02:1b:c0:43:
e4:5d:19:fc:67:0d:51:13:74:1d:ed:48:7c:7a:de:
98:99:d2:b2:8a:d2:9a:9e:f4:be:23:ac:a5:0d:01:
1b:d2:12:6c:f3:d3:be:40:c7:88:47:ff:fb:f0:5f:
1b:f8:80:46:17:16:8a:23:8c:d2:62:f4:cb:c1:7a:
91:44:d0:ff:5e:c9:34:f9:43:65:da:5a:ad:74:7f:
77:1b:1d:74:34:0e:e6:97:fd:cc:22:77:d2:4a:cd:
fe:5b:a3:b3:5e:2a:70:96:04:10:d2:69:62:56:a0:
e5:06:0c:62:11:d3:0f:79:e9:e3:7a:dc:16:24:df:
71:ae:ad:a7:70:9d:02:0d:be:81:28:ea:a7:e9:32:
c8:0c:a9:6f:49:3d:e6:93:93:9b:72:60:12:7a:4b:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:C5:3C:28:96:64:18:3A:96:40:F1:AD:E3:77:0D:BA:71:85:C3
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/3xTFPCiWZBg6lkDxreN3DbpxhcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:12:af:57:78:e4:a6:45:47:01:5d:dd:a5:42:7c:2a:84:9e:
cc:29:8f:b3:10:2f:b3:5c:4f:ee:53:8d:36:8d:7e:b5:13:13:
df:55:c2:ee:a8:44:f1:e9:6b:0e:37:47:4b:1a:4e:36:47:32:
6c:60:be:e1:28:ad:4a:6c:f0:51:06:8f:fc:49:29:1b:f6:c8:
94:76:2b:d6:95:17:dd:f8:c7:28:f9:13:26:8f:f1:6a:cf:df:
ce:41:aa:3e:49:45:33:32:1f:37:db:d4:e3:cd:b7:93:a7:c8:
88:13:8d:f6:fd:46:a2:32:fe:43:4a:9e:8d:04:34:57:c2:1f:
ab:bd:af:6a:ca:c8:3f:aa:14:14:da:a2:e8:57:80:ec:ac:f3:
7c:a3:80:0a:c2:bf:d0:43:8d:79:be:d7:e1:15:76:2e:49:8a:
14:1b:ea:9f:7a:1d:cd:f1:c1:ef:b2:6c:fa:57:bf:06:8c:ec:
5a:41:f2:dd:c0:ad:49:3c:3e:a1:53:7a:6d:5c:c3:e4:98:6e:
2a:ea:dc:9e:0a:5b:5a:ad:66:51:66:4d:3f:47:aa:f9:f2:f6:
2e:47:c7:7d:09:74:56:ef:2e:08:f8:4b:7b:16:5a:d9:46:a6:
06:a3:84:e5:6b:88:59:99:0a:2e:73:ff:26:65:1a:95:0a:bc:
af:f3:e0:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx15apKmDO2WiiL+4nRzPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjMwMTAyMDkzNzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjE0YzUzYzI4OTY2NDE4M2E5NjQwZjFhZGUzNzcwZGJhNzE4NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9GoezIVrUE879br8lNrBAWUivFD
sPAzvjwd5DVsNRTWEOx0hwHWk8Z5xAS+DcMgp8zIUp9/BL4YF7Wz5XJXBLeQNRqy
8TFqUrvsBFG2YjXPN/N8JLQexBTkSf9ByHefUc37hgIbwEPkXRn8Zw1RE3Qd7Uh8
et6YmdKyitKanvS+I6ylDQEb0hJs89O+QMeIR//78F8b+IBGFxaKI4zSYvTLwXqR
RND/Xsk0+UNl2lqtdH93Gx10NA7ml/3MInfSSs3+W6OzXipwlgQQ0mliVqDlBgxi
EdMPeenjetwWJN9xrq2ncJ0CDb6BKOqn6TLIDKlvST3mk5ObcmASekvJRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN8UxTwolmQYOpZA8a3jdw26cYXDMB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEvM3hURlBDaVdaQmc2bGtEeHJlTjNEYnB4aGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gEMA0G
CSqGSIb3DQEBCwUAA4IBAQCPEq9XeOSmRUcBXd2lQnwqhJ7MKY+zEC+zXE/uU402
jX61ExPfVcLuqETx6WsON0dLGk42RzJsYL7hKK1KbPBRBo/8SSkb9siUdivWlRfd
+Mco+RMmj/Fqz9/OQao+SUUzMh8329TjzbeTp8iIE432/UaiMv5DSp6NBDRXwh+r
va9qysg/qhQU2qLoV4DsrPN8o4AKwr/QQ415vtfhFXYuSYoUG+qfeh3N8cHvsmz6
V78GjOxaQfLdwK1JPD6hU3ptXMPkmG4q6tyeCltarWZRZk0/R6r58vYuR8d9CXRW
7y4I+Et7FlrZRqYGo4Tla4hZmQouc/8mZRqVCryv8+Ap
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:23 2024 by rpki-client on console-ams.rpki-client.org