Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/koiHpL-WsJ3WyxjGNwEdI1Qojas.roa
File: koiHpL-WsJ3WyxjGNwEdI1Qojas.roa (raw, json)
Hash identifier: BHRPtCnBtvNGrJg/AQXlC3yR5MhorgaQm2BuDgiCMdM=
Subject key identifier: 92:88:87:A4:BF:96:B0:9D:D6:CB:18:C6:37:01:1D:23:54:28:8D:AB
Certificate issuer: /CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Certificate serial: 018E844DF40D244359F303700BB5E8E4CB46
Authority key identifier: F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/koiHpL-WsJ3WyxjGNwEdI1Qojas.roa
Signing time: Thu 28 Mar 2024 09:04:44 +0000
ROA not before: Thu 28 Mar 2024 09:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49798
IP address blocks: 91.219.132.0/22 maxlen: 22
91.221.4.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:4d:f4:0d:24:43:59:f3:03:70:0b:b5:e8:e4:cb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Validity
Not Before: Mar 28 09:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=928887a4bf96b09dd6cb18c637011d2354288dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:c4:4f:d6:96:30:23:ae:9f:08:3f:c9:d5:
d5:ac:13:a4:28:af:c7:90:26:35:0d:28:21:d5:d1:
f1:cd:77:fd:d2:72:38:66:f9:d5:80:8a:1d:44:e0:
d5:7a:97:5a:a0:7d:55:48:b1:d3:da:b6:82:98:bf:
50:8d:15:c8:e9:5b:78:aa:54:dd:6c:4a:ff:5c:9c:
44:70:6a:38:d6:ed:3f:ef:1f:09:24:4d:88:d2:2c:
d5:d8:d0:bb:bf:16:a0:5f:ea:7b:6a:4c:4f:70:46:
b6:55:56:03:2f:3a:bb:ac:b9:bd:bc:95:b9:78:df:
75:e6:7f:49:ad:8c:da:51:2d:6b:b9:c9:5a:a2:c9:
34:25:09:b6:72:9b:e1:26:d2:23:9a:61:fa:17:e1:
19:8c:5a:80:13:f4:9d:5c:8c:72:0f:25:18:7f:cc:
d1:94:93:3f:e0:97:04:62:75:79:88:e6:d6:4d:b9:
09:4e:7d:a8:86:7e:eb:c5:1f:38:42:5e:53:c3:fb:
f7:c7:5a:2c:2a:29:f9:8b:d3:35:f7:b3:29:cf:74:
a3:52:1e:1d:46:da:23:9f:03:2f:2f:75:f2:c6:e2:
00:83:98:96:6e:d6:42:7d:5f:99:58:d0:de:0b:bc:
82:10:1d:73:5e:16:2c:88:96:f5:d2:ef:20:56:da:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:87:A4:BF:96:B0:9D:D6:CB:18:C6:37:01:1D:23:54:28:8D:AB
X509v3 Authority Key Identifier:
keyid:F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/koiHpL-WsJ3WyxjGNwEdI1Qojas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.132.0/22
91.221.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:c9:96:5a:f1:10:4f:0d:ff:55:1c:89:ad:f2:06:b0:39:33:
8e:03:dd:ec:c1:36:52:62:fd:f7:0a:12:75:0b:d8:95:a3:fe:
67:63:46:bd:e4:81:17:74:61:b1:46:0d:a3:47:a2:28:94:81:
e7:e5:6c:c3:ba:55:78:80:d5:ff:97:8d:ac:14:ab:60:7f:0a:
0a:d6:88:e4:1d:81:2e:40:d0:ec:fb:ec:ff:43:ac:ba:96:45:
3b:5d:36:6f:3a:d6:2d:c6:11:8e:68:f8:c7:4e:0d:61:9d:3a:
3d:e6:01:c0:2a:78:0c:7d:c5:84:85:d3:69:0e:37:39:c7:1d:
17:fc:64:4b:ff:c5:b1:dd:80:30:f6:52:40:44:0a:1a:be:25:
ad:b2:64:17:e2:e5:f2:37:bf:12:67:f4:05:80:cc:ed:19:64:
38:f9:d4:f7:d4:5b:53:f0:6e:ec:2f:f0:37:53:d2:6c:74:3e:
c0:ed:db:b9:51:b7:df:66:50:19:d3:ef:93:e8:c2:f9:ca:ab:
16:e9:e2:97:66:b3:a8:57:91:85:dd:b7:f5:bc:47:bc:10:e8:
3e:bf:9a:e5:cb:22:53:6c:db:c3:09:99:c9:8c:11:01:38:b0:
66:34:fa:55:75:bd:54:43:6a:5e:64:9a:ea:5a:cf:f2:c3:6b:
a9:2c:f4:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6ETfQNJENZ8wNwC7Xo5MtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjRhNmMwYjNjMmIwYzAzMmRlZGRjZDIzZDQyMWZmYjk2
MjAwZmMwHhcNMjQwMzI4MDkwNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mjg4ODdhNGJmOTZiMDlkZDZjYjE4YzYzNzAxMWQyMzU0Mjg4ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHfET9aWMCOunwg/ydXVrBOkKK/H
kCY1DSgh1dHxzXf90nI4ZvnVgIodRODVepdaoH1VSLHT2raCmL9QjRXI6Vt4qlTd
bEr/XJxEcGo41u0/7x8JJE2I0izV2NC7vxagX+p7akxPcEa2VVYDLzq7rLm9vJW5
eN915n9JrYzaUS1ruclaosk0JQm2cpvhJtIjmmH6F+EZjFqAE/SdXIxyDyUYf8zR
lJM/4JcEYnV5iObWTbkJTn2ohn7rxR84Ql5Tw/v3x1osKin5i9M197Mpz3SjUh4d
RtojnwMvL3XyxuIAg5iWbtZCfV+ZWNDeC7yCEB1zXhYsiJb10u8gVtrz4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJKIh6S/lrCd1ssYxjcBHSNUKI2rMB8GA1UdIwQY
MBaAFPL0psCzwrDAMt7dzSPUIf+5YgD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jYmU5OTctMWM4Yi00MjQyLWE3MDEt
MzA5ODY0YjRkNDkxLzEva29pSHBMLVdzSjNXeXhqR053RWRJMVFvamFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jYmU5OTctMWM4Yi00MjQyLWE3MDEtMzA5ODY0YjRkNDkx
LzEvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9uEAwQB
W90EMA0GCSqGSIb3DQEBCwUAA4IBAQAcyZZa8RBPDf9VHImt8gawOTOOA93swTZS
Yv33ChJ1C9iVo/5nY0a95IEXdGGxRg2jR6IolIHn5WzDulV4gNX/l42sFKtgfwoK
1ojkHYEuQNDs++z/Q6y6lkU7XTZvOtYtxhGOaPjHTg1hnTo95gHAKngMfcWEhdNp
Djc5xx0X/GRL/8Wx3YAw9lJARAoaviWtsmQX4uXyN78SZ/QFgMztGWQ4+dT31FtT
8G7sL/A3U9JsdD7A7du5UbffZlAZ0++T6ML5yqsW6eKXZrOoV5GF3bf1vEe8EOg+
v5rlyyJTbNvDCZnJjBEBOLBmNPpVdb1UQ2peZJrqWs/yw2upLPRF
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:38:35 2025 by rpki-client