Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/8FhpOXgepAgQua-5QVk_6gIEG_k.roa
File: 8FhpOXgepAgQua-5QVk_6gIEG_k.roa (raw, json)
Hash identifier: Lw1gDCViP7p9V6oxmakWnxMAZ0if19dpj+LasjT9tAI=
Subject key identifier: F0:58:69:39:78:1E:A4:08:10:B9:AF:B9:41:59:3F:EA:02:04:1B:F9
Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial: 01886728E0661059899996CCE86F17ED6AB5
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/8FhpOXgepAgQua-5QVk_6gIEG_k.roa
Signing time: Mon 29 May 2023 10:58:32 +0000
ROA not before: Mon 29 May 2023 10:58:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197134
IP address blocks: 91.217.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:28:e0:66:10:59:89:99:96:cc:e8:6f:17:ed:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Validity
Not Before: May 29 10:58:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0586939781ea40810b9afb941593fea02041bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:17:6d:87:87:c0:37:c1:b4:4e:24:65:f8:
d7:3a:02:6a:11:9f:23:b4:25:57:4a:bf:2c:f2:4f:
c8:03:34:b9:bb:f8:ed:9e:04:af:bf:67:0f:70:d9:
77:d8:88:fd:25:a3:da:b4:cc:06:39:24:87:3b:5a:
40:43:e8:dc:77:07:78:0e:c9:b5:b3:25:9f:65:ac:
1c:60:88:1e:f2:cc:2e:36:cb:e5:25:ad:a8:5d:cd:
7d:5d:32:42:c3:45:a9:d0:df:a6:7f:26:95:2c:c6:
68:09:0d:34:fe:93:00:4d:06:39:f8:09:07:d5:22:
9c:03:c4:fb:dd:bf:c3:a7:ef:2f:08:69:e6:37:d9:
fe:ed:74:2a:68:e3:2a:43:d0:c0:66:90:89:7c:bf:
2c:a3:95:44:5e:b1:33:c9:b1:11:47:98:9f:38:05:
be:3b:24:4d:e9:19:18:c1:b3:d7:f4:55:85:d8:d6:
5c:4c:d3:98:a2:95:4d:46:98:02:a8:ff:70:3c:2f:
db:db:6a:c5:61:bb:c8:39:cc:ca:cb:70:a8:cd:6b:
6c:ca:23:f2:b4:63:14:d3:62:47:92:ee:a4:c6:f0:
17:57:0c:6f:ca:13:a8:86:02:98:9b:b2:bb:9e:53:
76:9c:1f:89:b9:e4:9e:ac:5b:26:f6:3b:db:cf:de:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:69:39:78:1E:A4:08:10:B9:AF:B9:41:59:3F:EA:02:04:1B:F9
X509v3 Authority Key Identifier:
keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/8FhpOXgepAgQua-5QVk_6gIEG_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.28.0/24
Signature Algorithm: sha256WithRSAEncryption
55:46:ea:8b:fb:90:3e:00:ce:6e:20:3f:b0:d2:e2:d0:e9:2a:
43:60:72:64:ae:02:77:7c:50:56:27:1f:7a:eb:e1:e9:a3:dd:
13:be:5d:cd:a6:0f:1c:2c:82:42:90:26:a5:d9:09:89:a0:eb:
ff:7c:41:68:27:a4:7e:57:a6:c9:e5:7f:9f:22:d6:a1:68:d0:
2a:4f:79:5f:a2:0c:85:43:41:96:8e:0f:dc:39:c5:2e:38:17:
a6:da:e1:6d:61:27:a7:e3:f5:53:99:67:19:ae:5b:ee:c7:db:
47:3a:3e:67:a3:89:0e:ab:0f:1f:7b:fe:ae:69:dd:ba:c7:8d:
cd:14:30:3c:ce:07:10:8e:f6:84:6b:6b:90:a6:c7:51:90:97:
91:5d:07:c5:9a:47:bf:90:69:36:fa:38:17:f9:03:9f:be:7d:
57:ee:42:d0:a7:d8:18:8c:42:46:dd:3f:23:53:36:d8:0e:4c:
84:33:fb:cd:c4:2a:89:97:7d:68:ee:f1:dc:4a:db:94:ff:70:
c1:d5:2d:15:dd:22:33:b1:e1:47:ce:91:40:18:c2:93:bb:4d:
18:5b:69:f9:d5:e8:aa:09:c6:f7:b2:9e:f1:b3:69:11:08:75:
f1:ea:aa:8e:ba:5b:8d:98:f5:45:62:cb:89:58:b8:a2:67:84:
2e:5b:95:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhnKOBmEFmJmZbM6G8X7Wq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODNlZmM1MmRkNWQyZDRmN2UwYzQ1ZDIyYzljMjlmMWRj
ZThlNTkwHhcNMjMwNTI5MTA1ODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDU4NjkzOTc4MWVhNDA4MTBiOWFmYjk0MTU5M2ZlYTAyMDQxYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEQXbYeHwDfBtE4kZfjXOgJqEZ8j
tCVXSr8s8k/IAzS5u/jtngSvv2cPcNl32Ij9JaPatMwGOSSHO1pAQ+jcdwd4Dsm1
syWfZawcYIge8swuNsvlJa2oXc19XTJCw0Wp0N+mfyaVLMZoCQ00/pMATQY5+AkH
1SKcA8T73b/Dp+8vCGnmN9n+7XQqaOMqQ9DAZpCJfL8so5VEXrEzybERR5ifOAW+
OyRN6RkYwbPX9FWF2NZcTNOYopVNRpgCqP9wPC/b22rFYbvIOczKy3CozWtsyiPy
tGMU02JHku6kxvAXVwxvyhOohgKYm7K7nlN2nB+JueSerFsm9jvbz95cKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBYaTl4HqQIELmvuUFZP+oCBBv5MB8GA1UdIwQY
MBaAFDGD78Ut1dLU9+DEXSLJwp8dzo5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUt
ZjhmM2YwNDAxY2MzLzEvOEZocE9YZ2VwQWdRdWEtNVFWa182Z0lFR19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUtZjhmM2YwNDAxY2Mz
LzEvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9kcMA0G
CSqGSIb3DQEBCwUAA4IBAQBVRuqL+5A+AM5uID+w0uLQ6SpDYHJkrgJ3fFBWJx96
6+Hpo90Tvl3Npg8cLIJCkCal2QmJoOv/fEFoJ6R+V6bJ5X+fItahaNAqT3lfogyF
Q0GWjg/cOcUuOBem2uFtYSen4/VTmWcZrlvux9tHOj5no4kOqw8fe/6uad26x43N
FDA8zgcQjvaEa2uQpsdRkJeRXQfFmke/kGk2+jgX+QOfvn1X7kLQp9gYjEJG3T8j
UzbYDkyEM/vNxCqJl31o7vHcStuU/3DB1S0V3SIzseFHzpFAGMKTu00YW2n51eiq
Ccb3sp7xs2kRCHXx6qqOuluNmPVFYsuJWLiiZ4QuW5Xp
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net