Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/4YOUBo7XHje-6EoujFR3gwQngkM.roa
File: 4YOUBo7XHje-6EoujFR3gwQngkM.roa (raw, json)
Hash identifier: xiMsgpB6SR4yf7UUSGr70cWjiYKkM8LbCAbtIV+odPs=
Subject key identifier: E1:83:94:06:8E:D7:1E:37:BE:E8:4A:2E:8C:54:77:83:04:27:82:43
Certificate issuer: /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial: 0185707981E5F5CE04E0568AF211A594D009
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/4YOUBo7XHje-6EoujFR3gwQngkM.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49616
IP address blocks: 91.212.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:81:e5:f5:ce:04:e0:56:8a:f2:11:a5:94:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e18394068ed71e37bee84a2e8c54778304278243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:2b:89:0c:12:65:62:2d:19:8f:92:fe:d3:
d9:b3:00:75:a2:ea:41:73:70:ef:f8:b8:d2:2f:a2:
1c:65:1d:22:13:86:ff:d5:fa:fb:30:f5:87:df:d3:
e4:21:d8:e9:7c:19:be:80:56:9c:74:e2:87:4d:b3:
07:2f:49:cf:f0:68:06:10:ca:4f:69:cd:29:ba:c3:
3f:a7:da:08:66:a1:7a:6c:98:05:12:da:ef:9f:cf:
05:f3:8e:56:b1:59:ec:ff:83:a6:7b:ef:ff:54:d1:
1a:25:2f:a3:fd:c9:7d:77:e0:6e:5d:86:93:bc:c2:
66:06:a5:54:cc:d4:29:ee:6a:bd:11:b3:2f:4b:44:
63:b4:51:29:ea:2f:31:fd:f2:21:bd:a5:cc:65:66:
11:d3:10:d0:a9:7b:d1:6a:6b:b2:a3:60:3e:84:9c:
f5:f8:bf:85:00:a5:05:16:ef:58:41:93:9e:64:8d:
05:86:e2:fd:ed:f7:ca:ea:16:5e:fb:f7:d6:8b:4a:
34:30:ff:b2:a9:04:dc:21:e1:9c:4d:bd:78:07:c9:
85:0c:d2:e8:5b:ed:20:c2:d3:ae:1f:57:e7:e2:ea:
d9:88:0b:25:54:2f:1d:ea:58:2a:4e:83:b0:1d:12:
35:9f:bd:d6:a7:01:2c:4f:da:fc:bb:cd:93:a2:e7:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:94:06:8E:D7:1E:37:BE:E8:4A:2E:8C:54:77:83:04:27:82:43
X509v3 Authority Key Identifier:
keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/4YOUBo7XHje-6EoujFR3gwQngkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.170.0/24
Signature Algorithm: sha256WithRSAEncryption
62:03:05:12:4b:1c:64:a9:14:9f:8e:cd:2f:a9:41:5d:44:06:
c6:fd:eb:00:fa:44:5f:91:de:6c:9e:3d:ef:e7:67:b3:27:f1:
fa:fe:bb:f2:f6:7c:9e:25:e1:25:e5:ae:79:9d:dc:bd:99:35:
82:8a:12:a7:d5:54:1e:ca:00:70:15:a4:a8:e3:87:a0:dd:ca:
0d:d7:3c:d7:9a:13:48:27:7e:f2:a7:0f:ad:e9:67:f7:ac:64:
ce:9e:ec:7b:37:64:08:ba:09:6b:48:35:12:ae:98:4e:49:05:
e2:f7:9b:3c:c4:7f:0d:15:a8:78:6e:d6:8d:91:c8:9e:5f:e6:
ed:c2:54:a4:2f:14:88:24:df:8a:6b:91:66:0a:f1:c3:80:31:
06:25:d9:d3:b1:ff:b1:3c:2a:cb:ca:e7:bd:2a:57:99:b8:01:
74:e0:d5:d5:ca:a5:31:37:4d:37:c2:40:81:5b:9e:f4:e8:e3:
70:6d:f9:02:94:f8:0e:ed:cd:75:68:05:8c:7e:20:59:ec:24:
ef:34:95:c4:f5:9e:ae:b2:e7:21:a4:12:dd:02:ad:4c:e2:0c:
25:67:ae:82:4a:f4:ff:39:61:75:81:ab:70:41:78:51:1b:11:
e3:9a:79:c9:d7:2d:87:ad:94:92:66:84:cf:8c:7d:47:fc:41:
bc:7c:b8:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVweYHl9c4E4FaK8hGllNAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNGUzOThmNzkwNDlmNmJiYjgzMzM4MTBhODE2MWM5Nzg5
NjJhMjYwHhcNMjMwMTAyMDMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTgzOTQwNjhlZDcxZTM3YmVlODRhMmU4YzU0Nzc4MzA0Mjc4MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGoriQwSZWItGY+S/tPZswB1oupB
c3Dv+LjSL6IcZR0iE4b/1fr7MPWH39PkIdjpfBm+gFacdOKHTbMHL0nP8GgGEMpP
ac0pusM/p9oIZqF6bJgFEtrvn88F845WsVns/4Ome+//VNEaJS+j/cl9d+BuXYaT
vMJmBqVUzNQp7mq9EbMvS0RjtFEp6i8x/fIhvaXMZWYR0xDQqXvRamuyo2A+hJz1
+L+FAKUFFu9YQZOeZI0FhuL97ffK6hZe+/fWi0o0MP+yqQTcIeGcTb14B8mFDNLo
W+0gwtOuH1fn4urZiAslVC8d6lgqToOwHRI1n73WpwEsT9r8u82ToucLWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGDlAaO1x43vuhKLoxUd4MEJ4JDMB8GA1UdIwQY
MBaAFNBOOY95BJ9ru4MzgQqBYcl4liomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xOTkwYjEtZGQwOC00NjkxLWFjNmIt
NmFjNGRkNDZkNGY3LzEvNFlPVUJvN1hIamUtNkVvdWpGUjNnd1FuZ2tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xOTkwYjEtZGQwOC00NjkxLWFjNmItNmFjNGRkNDZkNGY3
LzEvMEU0NWoza0VuMnU3Z3pPQkNvRmh5WGlXS2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SqMA0G
CSqGSIb3DQEBCwUAA4IBAQBiAwUSSxxkqRSfjs0vqUFdRAbG/esA+kRfkd5snj3v
52ezJ/H6/rvy9nyeJeEl5a55ndy9mTWCihKn1VQeygBwFaSo44eg3coN1zzXmhNI
J37ypw+t6Wf3rGTOnux7N2QIuglrSDUSrphOSQXi95s8xH8NFah4btaNkcieX+bt
wlSkLxSIJN+Ka5FmCvHDgDEGJdnTsf+xPCrLyue9KleZuAF04NXVyqUxN003wkCB
W5706ONwbfkClPgO7c11aAWMfiBZ7CTvNJXE9Z6usuchpBLdAq1M4gwlZ66CSvT/
OWF1gatwQXhRGxHjmnnJ1y2HrZSSZoTPjH1H/EG8fLh8
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net