Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q0T9y7Vzh9N_WI3_XTcvlQSutoQ.roa
File: q0T9y7Vzh9N_WI3_XTcvlQSutoQ.roa (raw, json)
Hash identifier: Njvvxd3unnfgavMqkU8ZHf0psgKaECbw/HGmi0rkBJY=
Subject key identifier: AB:44:FD:CB:B5:73:87:D3:7F:58:8D:FF:5D:37:2F:95:04:AE:B6:84
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0189CC5D11269ED6786256B1660D18B455EF
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q0T9y7Vzh9N_WI3_XTcvlQSutoQ.roa
Signing time: Sun 06 Aug 2023 19:39:58 +0000
ROA not before: Sun 06 Aug 2023 19:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204941
IP address blocks: 91.108.34.0/24 maxlen: 24
91.108.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:5d:11:26:9e:d6:78:62:56:b1:66:0d:18:b4:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 6 19:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab44fdcbb57387d37f588dff5d372f9504aeb684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:9c:69:a4:50:77:65:b4:7d:68:f8:dd:37:
02:19:8d:6d:2c:4d:d6:71:73:ee:ce:da:81:38:c9:
4c:c5:70:b9:6f:f0:d8:9d:0f:c7:46:ae:25:df:74:
22:d7:26:49:cf:f0:41:8f:25:7b:24:f4:ef:d6:17:
f2:94:f4:b7:76:65:d8:45:3a:09:98:82:f6:43:5c:
b0:a9:15:4e:66:18:2f:dc:b6:67:3e:58:1d:44:a0:
c3:8d:94:d8:07:7b:cc:11:08:a2:4b:6a:c2:3f:6c:
99:d2:77:8a:47:bb:82:46:7b:61:d0:6e:06:a0:e0:
b5:d5:8e:a1:b9:8d:b2:31:ec:ed:d0:51:a8:49:a5:
3b:c9:7b:b8:c2:95:4f:7c:75:4d:23:1e:e3:36:47:
04:7b:4a:4e:e8:ab:ef:2f:1d:c2:fc:85:80:e2:fa:
05:32:d4:20:a5:d6:21:c1:61:a2:22:6b:20:9f:3f:
81:87:a4:d4:33:98:96:db:b7:58:b2:16:d4:0f:55:
90:d2:e2:78:c9:5c:f7:dc:41:3d:62:37:55:c7:35:
e2:a7:87:19:8e:87:99:33:93:3c:dd:2a:b7:44:5a:
9d:c9:b0:78:73:28:58:24:d7:5a:54:6c:03:6e:c6:
ab:f2:32:e7:d0:2d:f0:2b:10:bc:5a:da:4d:f7:22:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:FD:CB:B5:73:87:D3:7F:58:8D:FF:5D:37:2F:95:04:AE:B6:84
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q0T9y7Vzh9N_WI3_XTcvlQSutoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.34.0/24
91.108.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:62:d6:70:d4:50:2a:83:a8:04:c3:52:ae:40:db:65:ef:a3:
9b:ef:de:40:9d:9f:0a:40:b7:0f:60:c4:0e:09:9d:d3:cf:fb:
fb:cd:95:5e:16:75:d7:3d:a1:12:9b:8f:67:6d:81:db:be:20:
4c:91:d7:c4:0e:80:f0:d0:27:ae:d7:83:e5:9f:db:d0:7c:b6:
49:68:24:a0:0b:e3:27:3e:b7:de:85:b2:6c:91:90:fc:d5:c1:
9d:9a:e9:64:0d:5b:13:65:57:0a:1d:05:8b:ff:74:35:77:a4:
3d:cd:8e:5b:e9:86:02:f4:5d:bc:13:8a:4f:b2:d6:08:c4:ae:
b6:4f:01:bc:cd:d1:36:90:03:cc:56:8d:d8:c9:d4:9b:e6:b7:
f9:43:f7:cf:28:a4:7e:54:e9:77:ba:e6:7a:d0:36:c9:70:be:
c8:46:a1:a2:ec:94:68:ea:15:ac:5e:61:02:94:b0:b7:6a:d4:
da:f5:02:fc:68:33:b3:88:c2:55:81:df:76:d2:12:47:fb:ff:
c7:7b:78:ca:1a:cd:29:08:e4:56:59:f1:1b:a2:58:da:2b:3d:
ca:46:67:b9:03:4c:d1:72:aa:9f:66:95:a2:1b:71:dd:d7:3a:
dc:2d:f1:c2:07:36:83:c5:72:d9:a2:86:db:7e:92:8f:dd:88:
47:16:69:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnMXREmntZ4YlaxZg0YtFXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjMwODA2MTkzOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjQ0ZmRjYmI1NzM4N2QzN2Y1ODhkZmY1ZDM3MmY5NTA0YWViNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1ucaaRQd2W0fWj43TcCGY1tLE3W
cXPuztqBOMlMxXC5b/DYnQ/HRq4l33Qi1yZJz/BBjyV7JPTv1hfylPS3dmXYRToJ
mIL2Q1ywqRVOZhgv3LZnPlgdRKDDjZTYB3vMEQiiS2rCP2yZ0neKR7uCRnth0G4G
oOC11Y6huY2yMezt0FGoSaU7yXu4wpVPfHVNIx7jNkcEe0pO6KvvLx3C/IWA4voF
MtQgpdYhwWGiImsgnz+Bh6TUM5iW27dYshbUD1WQ0uJ4yVz33EE9YjdVxzXip4cZ
joeZM5M83Sq3RFqdybB4cyhYJNdaVGwDbsar8jLn0C3wKxC8WtpN9yI7OwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKtE/cu1c4fTf1iN/103L5UErraEMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvcTBUOXk3VnpoOU5fV0kzX1hUY3ZsUVN1dG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2wiAwQA
W2w1MA0GCSqGSIb3DQEBCwUAA4IBAQAaYtZw1FAqg6gEw1KuQNtl76Ob795AnZ8K
QLcPYMQOCZ3Tz/v7zZVeFnXXPaESm49nbYHbviBMkdfEDoDw0Ceu14Pln9vQfLZJ
aCSgC+MnPrfehbJskZD81cGdmulkDVsTZVcKHQWL/3Q1d6Q9zY5b6YYC9F28E4pP
stYIxK62TwG8zdE2kAPMVo3YydSb5rf5Q/fPKKR+VOl3uuZ60DbJcL7IRqGi7JRo
6hWsXmEClLC3atTa9QL8aDOziMJVgd920hJH+//He3jKGs0pCORWWfEboljaKz3K
Rme5A0zRcqqfZpWiG3Hd1zrcLfHCBzaDxXLZoobbfpKP3YhHFmn3
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:47 2024 by rpki-client on console.sobornost.net