Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/uu7CN9FVSp_VUfopLMUb0tUfGS4.roa
File: uu7CN9FVSp_VUfopLMUb0tUfGS4.roa (raw, json)
Hash identifier: oSv/ly6NBRfgzqsNx5jsq4qWwIG58gjEr4CYhvGMaNo=
Subject key identifier: BA:EE:C2:37:D1:55:4A:9F:D5:51:FA:29:2C:C5:1B:D2:D5:1F:19:2E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B7798F9EE06E4FB6B0034305E9129C83B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/uu7CN9FVSp_VUfopLMUb0tUfGS4.roa
Signing time: Sat 28 Oct 2023 18:43:15 +0000
ROA not before: Sat 28 Oct 2023 18:43:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59711
IP address blocks: 91.250.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:98:f9:ee:06:e4:fb:6b:00:34:30:5e:91:29:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 28 18:43:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baeec237d1554a9fd551fa292cc51bd2d51f192e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:9c:12:c3:36:e4:98:c3:8c:da:7a:2c:1e:
cd:d4:29:d8:3c:e7:fb:5c:14:92:39:4f:fc:64:c6:
f1:74:1c:cc:fd:ed:83:94:57:73:72:a8:b5:5e:26:
cc:49:de:31:6d:3e:fd:91:12:dc:93:ae:b8:6e:b4:
cb:dd:f0:61:dd:9a:a0:c9:7f:6f:a2:c4:bf:2b:16:
6c:bc:20:20:6c:4a:3c:f0:e1:c4:ca:ec:9b:0d:22:
f4:42:5b:9a:7c:ef:4b:a4:9c:cf:84:a2:fd:a9:f9:
9d:d5:bc:f1:3e:6c:74:da:e9:ab:62:92:6a:c5:4b:
f2:72:af:90:d5:e8:d2:0e:60:5e:72:81:82:6a:f0:
28:16:8f:d4:04:31:32:97:5f:d3:6a:ab:0c:44:f3:
5f:cb:b7:85:ea:30:fe:19:44:4d:d2:19:48:01:95:
53:63:cd:8b:43:b8:9a:db:63:7f:cb:7f:ac:e0:44:
50:ed:13:58:12:00:ac:03:5c:b8:54:57:c6:20:84:
73:c7:1b:a2:83:91:d6:42:8d:3c:74:c2:13:8b:80:
85:91:8d:75:f9:ee:1f:0f:78:3a:e1:1b:46:6e:58:
43:5d:9d:80:1f:b9:48:8d:e5:f0:1c:40:71:6e:0c:
5f:9e:9e:b5:b7:c9:f7:02:c0:d9:3d:95:07:b8:44:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:C2:37:D1:55:4A:9F:D5:51:FA:29:2C:C5:1B:D2:D5:1F:19:2E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/uu7CN9FVSp_VUfopLMUb0tUfGS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:40:38:e5:d6:f1:2b:8f:14:ca:1b:d8:b1:bc:8a:eb:5f:19:
c2:75:a9:b6:7c:be:17:37:30:25:6f:5c:ca:66:66:ab:7a:2e:
b3:01:bc:18:9f:bd:01:87:0c:37:d4:3f:2c:51:c8:13:c3:c9:
90:71:88:bb:10:da:85:b2:62:c4:c6:08:d3:64:9c:9a:04:5e:
85:ef:b3:df:f7:f3:52:e5:c5:cf:08:90:44:bc:45:74:27:19:
6d:bd:9e:45:0c:1c:b5:f6:af:e2:80:f8:62:22:40:90:59:29:
85:86:f1:03:62:f7:1b:67:dd:58:a4:1c:60:f5:a1:f9:90:96:
b2:2f:b4:eb:32:e2:91:ce:04:06:84:2d:24:ec:65:5a:21:9e:
5c:29:fa:0c:6e:e1:f2:77:4c:f3:34:9e:42:02:8b:11:0b:e3:
d4:c4:95:0d:ba:89:f7:ad:4c:de:ac:1c:2f:73:66:f8:3c:0e:
41:28:79:82:ef:a3:4a:04:7b:a3:f8:4a:9e:89:31:a7:61:b1:
7e:fd:df:72:fe:6d:39:50:cd:c4:24:89:ae:51:de:97:e7:4f:
f9:87:9e:3b:dc:cb:55:02:cb:de:b3:9c:c0:61:95:6f:f8:e2:
89:93:0e:79:74:a7:68:16:4e:22:01:87:29:5e:4f:c3:d8:43:
7f:c9:09:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYt3mPnuBuT7awA0MF6RKcg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMxMDI4MTg0MzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWVlYzIzN2QxNTU0YTlmZDU1MWZhMjkyY2M1MWJkMmQ1MWYxOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhmcEsM25JjDjNp6LB7N1CnYPOf7
XBSSOU/8ZMbxdBzM/e2DlFdzcqi1XibMSd4xbT79kRLck664brTL3fBh3ZqgyX9v
osS/KxZsvCAgbEo88OHEyuybDSL0QluafO9LpJzPhKL9qfmd1bzxPmx02umrYpJq
xUvycq+Q1ejSDmBecoGCavAoFo/UBDEyl1/TaqsMRPNfy7eF6jD+GURN0hlIAZVT
Y82LQ7ia22N/y3+s4ERQ7RNYEgCsA1y4VFfGIIRzxxuig5HWQo08dMITi4CFkY11
+e4fD3g64RtGblhDXZ2AH7lIjeXwHEBxbgxfnp61t8n3AsDZPZUHuETd4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLruwjfRVUqf1VH6KSzFG9LVHxkuMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvdXU3Q045RlZTcF9WVWZvcExNVWIwdFVmR1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/r0MA0G
CSqGSIb3DQEBCwUAA4IBAQA7QDjl1vErjxTKG9ixvIrrXxnCdam2fL4XNzAlb1zK
Zmarei6zAbwYn70Bhww31D8sUcgTw8mQcYi7ENqFsmLExgjTZJyaBF6F77Pf9/NS
5cXPCJBEvEV0JxltvZ5FDBy19q/igPhiIkCQWSmFhvEDYvcbZ91YpBxg9aH5kJay
L7TrMuKRzgQGhC0k7GVaIZ5cKfoMbuHyd0zzNJ5CAosRC+PUxJUNuon3rUzerBwv
c2b4PA5BKHmC76NKBHuj+EqeiTGnYbF+/d9y/m05UM3EJImuUd6X50/5h5473MtV
Asves5zAYZVv+OKJkw55dKdoFk4iAYcpXk/D2EN/yQm3
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:15:04 2024 by rpki-client on console-ams.rpki-client.org