Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fsaXLdVQHm6PrGxO6oiI16i2L7M.roa
File: fsaXLdVQHm6PrGxO6oiI16i2L7M.roa (raw, json)
Hash identifier: Wxxh35w7ADY0juHKB3fcIeWXaW6dOcydGKASUCahwjc=
Subject key identifier: 7E:C6:97:2D:D5:50:1E:6E:8F:AC:6C:4E:EA:88:88:D7:A8:B6:2F:B3
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CAACB9826E3577CCE6D460DC90F8A8236
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fsaXLdVQHm6PrGxO6oiI16i2L7M.roa
Signing time: Wed 27 Dec 2023 10:21:58 +0000
ROA not before: Wed 27 Dec 2023 10:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:cb:98:26:e3:57:7c:ce:6d:46:0d:c9:0f:8a:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 27 10:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ec6972dd5501e6e8fac6c4eea8888d7a8b62fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:11:4e:60:23:14:bf:ae:34:1e:13:94:5c:
65:0b:aa:cb:03:09:44:2c:52:39:be:91:d5:b0:cd:
74:15:14:79:ed:f1:de:6c:12:8a:b4:08:fe:c6:5c:
9e:64:d6:b8:0d:b1:3c:64:37:4e:fe:7d:68:86:e7:
93:be:dc:e2:59:98:be:0f:79:e8:89:cc:ed:22:ab:
15:04:7b:50:cb:6c:83:4b:c3:b9:28:48:61:fe:28:
8d:b6:d2:31:d8:8d:bc:94:da:ff:e8:3c:72:7c:61:
c4:b7:ec:da:da:7f:85:1e:94:df:2f:3a:dd:78:b0:
4e:d8:07:30:fb:a0:e2:40:d0:41:ef:ee:52:cc:20:
f3:47:60:7f:9f:5f:14:e4:5c:23:b0:1c:2e:90:68:
2b:b8:17:3b:27:60:31:65:24:ad:3f:05:29:dc:be:
51:1c:01:0b:52:c6:4b:6c:d3:6a:94:85:bf:cb:0f:
fb:96:c5:7b:da:8c:61:ee:b1:81:08:c1:76:c8:e5:
99:55:73:57:ee:01:5f:9e:ea:16:62:67:df:19:ad:
95:8f:e2:7f:c2:d9:e9:8c:56:76:c7:7f:8f:ec:b6:
c7:f9:e8:1b:d2:ee:df:6f:05:ce:27:b9:60:7a:ca:
3b:d6:f2:6f:5d:8a:96:89:11:37:bd:88:ac:12:d5:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:97:2D:D5:50:1E:6E:8F:AC:6C:4E:EA:88:88:D7:A8:B6:2F:B3
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fsaXLdVQHm6PrGxO6oiI16i2L7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
63:21:2d:0e:29:93:28:57:f1:05:e3:8a:ee:8f:3b:52:b1:2d:
c0:ba:d6:81:68:b5:4e:f4:5b:9a:db:2e:57:12:bb:eb:70:68:
31:40:98:34:eb:03:24:aa:5c:c2:6b:bf:e2:22:e6:76:ce:22:
9e:f4:4e:dd:97:69:45:94:8f:53:5b:aa:5a:a2:0f:6d:0f:72:
f0:cb:97:8f:ee:4d:52:e9:7c:b7:43:80:15:b1:a1:0f:55:27:
50:54:b3:30:fb:f8:6c:3f:34:7e:30:ae:cb:79:68:4b:92:70:
01:20:1a:ff:a4:34:56:e0:73:9f:cc:24:aa:c8:8f:39:c2:63:
9a:75:55:3e:6f:c0:93:12:a1:99:ce:32:23:24:9c:c8:90:3c:
9b:0a:e4:93:f4:25:7f:d2:8f:46:9d:f9:bb:62:88:c7:74:0c:
0c:c8:8c:bf:cc:40:f8:dc:40:f4:9a:d5:f2:53:3e:4f:ec:e6:
6a:b2:16:4a:11:e0:11:bf:b1:b8:0a:89:4d:6b:d0:80:75:63:
90:86:9a:a2:f3:1e:ee:e6:f2:ba:1b:df:bd:0d:09:30:61:41:
61:5f:97:5a:4d:cd:36:12:2a:f9:c5:84:d8:98:b2:62:84:45:
b9:09:67:db:a2:b5:f1:32:4a:67:82:db:af:2f:b2:12:de:bc:
9e:94:cb:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyqy5gm41d8zm1GDckPioI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMxMjI3MTAyMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWM2OTcyZGQ1NTAxZTZlOGZhYzZjNGVlYTg4ODhkN2E4YjYyZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnywRTmAjFL+uNB4TlFxlC6rLAwlE
LFI5vpHVsM10FRR57fHebBKKtAj+xlyeZNa4DbE8ZDdO/n1ohueTvtziWZi+D3no
icztIqsVBHtQy2yDS8O5KEhh/iiNttIx2I28lNr/6DxyfGHEt+za2n+FHpTfLzrd
eLBO2Acw+6DiQNBB7+5SzCDzR2B/n18U5FwjsBwukGgruBc7J2AxZSStPwUp3L5R
HAELUsZLbNNqlIW/yw/7lsV72oxh7rGBCMF2yOWZVXNX7gFfnuoWYmffGa2Vj+J/
wtnpjFZ2x3+P7LbH+egb0u7fbwXOJ7lgeso71vJvXYqWiRE3vYisEtVuoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7Gly3VUB5uj6xsTuqIiNeoti+zMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvZnNhWExkVlFIbTZQckd4TzZvaUkxNmkyTDdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHbMMA0G
CSqGSIb3DQEBCwUAA4IBAQBjIS0OKZMoV/EF44rujztSsS3AutaBaLVO9Fua2y5X
ErvrcGgxQJg06wMkqlzCa7/iIuZ2ziKe9E7dl2lFlI9TW6paog9tD3Lwy5eP7k1S
6Xy3Q4AVsaEPVSdQVLMw+/hsPzR+MK7LeWhLknABIBr/pDRW4HOfzCSqyI85wmOa
dVU+b8CTEqGZzjIjJJzIkDybCuST9CV/0o9Gnfm7YojHdAwMyIy/zED43ED0mtXy
Uz5P7OZqshZKEeARv7G4ColNa9CAdWOQhpqi8x7u5vK6G9+9DQkwYUFhX5daTc02
Eir5xYTYmLJihEW5CWfborXxMkpngtuvL7IS3ryelMv/
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org