Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/HmSrdyHHZ4bvGX9deGL_RuOTilI.roa
File: HmSrdyHHZ4bvGX9deGL_RuOTilI.roa (raw, json)
Hash identifier: INnrB2TA5ztdv7KgSCYaeYkbCzgGCNEmGciaCne092Q=
Subject key identifier: 1E:64:AB:77:21:C7:67:86:EF:19:7F:5D:78:62:FF:46:E3:93:8A:52
Certificate issuer: /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial: 0186B5F129F856CC9961809A49A2B30C1391
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/HmSrdyHHZ4bvGX9deGL_RuOTilI.roa
Signing time: Mon 06 Mar 2023 08:02:06 +0000
ROA not before: Mon 06 Mar 2023 08:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58031
IP address blocks: 91.238.2.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:f1:29:f8:56:cc:99:61:80:9a:49:a2:b3:0c:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Validity
Not Before: Mar 6 08:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e64ab7721c76786ef197f5d7862ff46e3938a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:e1:d5:45:9d:bb:e2:da:07:d5:07:f2:73:
16:57:d8:9b:10:5a:c6:ce:4c:52:09:ee:a9:2e:28:
8a:ac:07:0c:1b:52:95:d4:38:a3:09:c1:6c:ce:f7:
48:b2:f2:f0:56:a9:37:26:1d:fd:b1:40:0f:c0:09:
15:9f:4f:e1:c0:42:f7:2a:37:85:ce:d0:82:bc:64:
90:cc:8a:5f:87:38:fe:08:a9:61:65:87:8d:49:49:
3b:bc:dc:fd:ad:17:e3:64:85:32:1c:db:e2:40:b5:
32:1b:cb:95:ff:b3:0c:6e:1d:60:b6:09:7f:73:ff:
13:be:47:56:6f:43:87:12:b7:45:2a:a3:61:34:e5:
9b:9f:e4:ff:e6:a7:07:ad:c7:5a:c1:7a:ed:61:20:
65:fd:05:25:e2:ce:80:2f:22:38:9b:98:04:0e:0d:
29:39:a3:c0:ca:a5:86:26:43:db:8a:79:08:9c:4b:
16:47:6f:bb:8c:da:bc:0e:f4:54:61:b7:26:05:bf:
eb:6d:76:70:0f:7f:90:fe:9c:94:5e:2c:bf:bc:02:
1a:86:89:b6:eb:a3:77:40:c9:76:3d:a4:08:a3:d9:
c8:c4:54:3e:bd:b8:76:64:91:ef:32:77:2a:78:0c:
34:b1:8e:52:f3:24:e3:33:65:df:db:61:f5:c8:6c:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:AB:77:21:C7:67:86:EF:19:7F:5D:78:62:FF:46:E3:93:8A:52
X509v3 Authority Key Identifier:
keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/HmSrdyHHZ4bvGX9deGL_RuOTilI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.2.0/23
Signature Algorithm: sha256WithRSAEncryption
01:cc:52:37:e8:77:06:a9:65:4d:ac:fa:0a:a3:be:6b:97:d8:
3a:5f:2d:3a:bf:6c:29:3a:3f:b4:fc:ed:98:a7:6e:b1:77:a1:
3c:9b:b4:22:1c:09:e1:eb:56:ef:1a:e9:01:20:dc:98:ea:21:
7b:b8:8e:af:7e:1f:a9:bc:1c:a4:2b:46:36:17:16:10:7d:41:
36:78:ab:f8:e5:80:0d:bd:ce:8a:f9:ac:df:69:ea:e1:93:9e:
c0:0b:7a:08:8a:3a:5f:72:5c:e9:3f:5e:f1:44:09:07:2c:20:
28:c0:0c:84:da:e1:53:20:5d:e1:4e:21:8f:60:e6:55:e1:e8:
f3:b8:99:fe:fa:ec:1f:fe:d9:b0:07:95:91:b2:24:11:80:d5:
86:eb:dc:6e:c3:a7:43:87:4c:9c:f2:8a:dc:c1:a6:0b:c4:84:
ad:3e:ed:b1:04:3d:11:f1:93:c9:de:0c:a9:0a:f4:68:c6:88:
a9:68:89:84:93:fa:a4:36:69:21:48:b1:80:97:b5:b1:5c:1d:
6f:18:16:de:5f:33:d6:ac:44:f8:39:2e:8d:d4:55:e9:88:48:
b4:0c:77:26:d0:06:fd:8c:c7:5e:81:bf:cc:2b:1c:f8:a4:72:
da:61:30:ae:d0:dd:c7:7f:70:c3:e7:1d:e4:d6:08:dd:7b:ff:
0b:fc:c6:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa18Sn4VsyZYYCaSaKzDBORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JkNGMyMzA2MmQ2OTUzN2ZiMmU4YThhY2NiZmIwMjdm
MmI1MjUwHhcNMjMwMzA2MDgwMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTY0YWI3NzIxYzc2Nzg2ZWYxOTdmNWQ3ODYyZmY0NmUzOTM4YTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwljh1UWdu+LaB9UH8nMWV9ibEFrG
zkxSCe6pLiiKrAcMG1KV1DijCcFszvdIsvLwVqk3Jh39sUAPwAkVn0/hwEL3KjeF
ztCCvGSQzIpfhzj+CKlhZYeNSUk7vNz9rRfjZIUyHNviQLUyG8uV/7MMbh1gtgl/
c/8TvkdWb0OHErdFKqNhNOWbn+T/5qcHrcdawXrtYSBl/QUl4s6ALyI4m5gEDg0p
OaPAyqWGJkPbinkInEsWR2+7jNq8DvRUYbcmBb/rbXZwD3+Q/pyUXiy/vAIahom2
66N3QMl2PaQIo9nIxFQ+vbh2ZJHvMncqeAw0sY5S8yTjM2Xf22H1yGzCQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5kq3chx2eG7xl/XXhi/0bjk4pSMB8GA1UdIwQY
MBaAFOjL1MIwYtaVN/suiorMv7An8rUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYt
NzgyM2JjY2E1OTcwLzEvSG1TcmR5SEhaNGJ2R1g5ZGVHTF9SdU9UaWxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYtNzgyM2JjY2E1OTcw
LzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+4CMA0G
CSqGSIb3DQEBCwUAA4IBAQABzFI36HcGqWVNrPoKo75rl9g6Xy06v2wpOj+0/O2Y
p26xd6E8m7QiHAnh61bvGukBINyY6iF7uI6vfh+pvBykK0Y2FxYQfUE2eKv45YAN
vc6K+azfaerhk57AC3oIijpfclzpP17xRAkHLCAowAyE2uFTIF3hTiGPYOZV4ejz
uJn++uwf/tmwB5WRsiQRgNWG69xuw6dDh0yc8orcwaYLxIStPu2xBD0R8ZPJ3gyp
CvRoxoipaImEk/qkNmkhSLGAl7WxXB1vGBbeXzPWrET4OS6N1FXpiEi0DHcm0Ab9
jMdegb/MKxz4pHLaYTCu0N3Hf3DD5x3k1gjde/8L/MY0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:52 2023 by rpki-client on console-ams.rpki-client.org