Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/FwIP6G7kDF1lcJRua-T-POBIcD0.roa
File: FwIP6G7kDF1lcJRua-T-POBIcD0.roa (raw, json)
Hash identifier: M8NIIbcTi41WnrBHL/aE9rNbkBci9P9nN3DkBm5PHAc=
Subject key identifier: 17:02:0F:E8:6E:E4:0C:5D:65:70:94:6E:6B:E4:FE:3C:E0:48:70:3D
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 0187E5336336135121EA2C2B148B33B2384C
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/FwIP6G7kDF1lcJRua-T-POBIcD0.roa
Signing time: Thu 04 May 2023 05:19:22 +0000
ROA not before: Thu 04 May 2023 05:19:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201633
IP address blocks: 206.225.17.0/24 maxlen: 24
193.33.156.0/24 maxlen: 24
2a12:d4c0:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:33:63:36:13:51:21:ea:2c:2b:14:8b:33:b2:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: May 4 05:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17020fe86ee40c5d6570946e6be4fe3ce048703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:fc:11:0b:16:aa:7e:aa:c6:a4:15:de:98:
34:7e:2f:ff:7b:62:cc:27:78:77:44:9b:e5:55:7b:
f6:e3:64:be:18:8c:12:ce:5d:90:9b:de:a4:74:b9:
87:7f:d1:ab:5e:34:44:16:78:3d:14:de:ec:78:a7:
1a:4d:3f:40:14:64:91:b9:c9:40:7d:29:90:9f:0a:
78:59:20:e8:00:cc:95:4d:f7:3d:6c:fe:4e:9b:a2:
f0:c6:ad:ea:90:b8:75:49:2c:d8:e3:4b:5f:c6:be:
d8:8e:6d:7b:51:56:23:c3:28:73:3f:46:cf:7a:a6:
82:05:f0:43:49:d2:0c:0d:58:3f:20:97:a1:83:e5:
63:0f:8d:2c:9e:59:15:2e:4c:2b:0c:1f:94:92:3b:
fe:a5:48:4f:50:cd:1c:66:8e:c0:62:79:3c:d6:15:
a3:13:1d:3b:fe:72:67:ed:a4:4f:36:38:4e:f5:ca:
d9:d4:2d:f3:a1:d0:9b:bd:34:15:f1:51:3d:af:fd:
59:a1:76:c9:4b:98:57:0b:7c:35:e0:cb:e3:c1:d8:
a2:9c:48:89:36:4d:c0:5a:dd:81:09:03:d7:22:4a:
67:e7:85:ea:ed:1a:0a:f3:0b:a2:9f:d7:2e:90:7c:
bc:ec:d2:65:ae:0c:4f:5b:94:3c:f0:ea:ad:4f:7f:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:0F:E8:6E:E4:0C:5D:65:70:94:6E:6B:E4:FE:3C:E0:48:70:3D
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/FwIP6G7kDF1lcJRua-T-POBIcD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.156.0/24
206.225.17.0/24
IPv6:
2a12:d4c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:85:92:da:73:35:75:0d:ab:4e:b8:3b:2f:12:7d:2f:43:d0:
d6:f6:36:55:39:f1:30:01:62:2b:b5:f9:87:47:ee:2f:d3:b1:
32:2c:a4:50:e5:d1:dc:db:fd:42:e8:29:00:62:dd:8b:82:43:
3b:b6:3b:43:e5:1c:61:c2:a3:fd:7f:92:9c:99:2c:3f:39:00:
44:24:5b:59:b0:72:e5:da:7a:5e:bc:e2:0f:9e:76:16:7f:ff:
39:ca:55:40:c0:e3:74:57:1d:ae:2d:af:08:f3:29:57:db:a5:
d7:58:c1:3e:01:4e:c8:d1:a0:bc:0f:d5:77:97:47:0b:9e:ef:
c5:09:a6:4d:41:85:5f:ac:17:25:9c:3e:0d:f7:28:75:94:e9:
85:d9:78:51:35:82:24:89:cb:b0:86:e4:5a:5f:2f:27:c1:47:
24:40:4a:43:3d:54:55:51:52:05:30:88:80:da:98:33:0f:0f:
da:b4:5d:5b:57:cb:00:d4:f2:2b:32:9d:97:ae:f3:84:cd:52:
c6:72:d2:b4:93:ee:2f:1d:66:c8:89:f2:4e:60:bc:72:63:a3:
ac:74:dc:dc:87:e6:44:1a:73:10:77:10:e9:b6:d3:92:81:77:
c4:3a:13:a1:bd:4a:bd:85:7e:7a:e9:d6:2f:87:21:a0:b9:0a:
cb:02:17:83
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYflM2M2E1Eh6iwrFIszsjhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZGEwOTZkYmM4ZDU5YTQ0MjcyMWNjMTY5ZDZhZWI2NDlm
NWZkM2YwHhcNMjMwNTA0MDUxOTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzAyMGZlODZlZTQwYzVkNjU3MDk0NmU2YmU0ZmUzY2UwNDg3MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MX8EQsWqn6qxqQV3pg0fi//e2LM
J3h3RJvlVXv242S+GIwSzl2Qm96kdLmHf9GrXjREFng9FN7seKcaTT9AFGSRuclA
fSmQnwp4WSDoAMyVTfc9bP5Om6Lwxq3qkLh1SSzY40tfxr7Yjm17UVYjwyhzP0bP
eqaCBfBDSdIMDVg/IJehg+VjD40snlkVLkwrDB+Ukjv+pUhPUM0cZo7AYnk81hWj
Ex07/nJn7aRPNjhO9crZ1C3zodCbvTQV8VE9r/1ZoXbJS5hXC3w14MvjwdiinEiJ
Nk3AWt2BCQPXIkpn54Xq7RoK8wuin9cukHy87NJlrgxPW5Q88OqtT3/IuwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBcCD+hu5AxdZXCUbmvk/jzgSHA9MB8GA1UdIwQY
MBaAFJ7aCW28jVmkQnIcwWnWrrZJ9f0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ODFiNTAtMDNhYi00MTRiLWEzMTAt
YmRjNWQ2Y2IyMTQxLzEvRndJUDZHN2tERjFsY0pSdWEtVC1QT0JJY0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85ODFiNTAtMDNhYi00MTRiLWEzMTAtYmRjNWQ2Y2IyMTQx
LzEvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwSGcAwQA
zuERMA8EAgACMAkDBwAqEtTAsAswDQYJKoZIhvcNAQELBQADggEBADyFktpzNXUN
q064Oy8SfS9D0Nb2NlU58TABYiu1+YdH7i/TsTIspFDl0dzb/ULoKQBi3YuCQzu2
O0PlHGHCo/1/kpyZLD85AEQkW1mwcuXael684g+edhZ//znKVUDA43RXHa4trwjz
KVfbpddYwT4BTsjRoLwP1XeXRwue78UJpk1BhV+sFyWcPg33KHWU6YXZeFE1giSJ
y7CG5FpfLyfBRyRASkM9VFVRUgUwiIDamDMPD9q0XVtXywDU8isynZeu84TNUsZy
0rST7i8dZsiJ8k5gvHJjo6x03NyH5kQacxB3EOm205KBd8Q6E6G9Sr2Ffnrp1i+H
IaC5CssCF4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:04 2024 by rpki-client on console-ams.rpki-client.org