Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/f7vAAswLo-CLgGSEfm2Era8j_Ec.roa
File: f7vAAswLo-CLgGSEfm2Era8j_Ec.roa (raw, json)
Hash identifier: WHoPq1dOjj72WwAmQdgDQpjLeKEtdeF+2H+foVANZWc=
Subject key identifier: 7F:BB:C0:02:CC:0B:A3:E0:8B:80:64:84:7E:6D:84:AD:AF:23:FC:47
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01856E2FCDCB38AECC9BBD903FECC8ADB2CB
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/f7vAAswLo-CLgGSEfm2Era8j_Ec.roa
Signing time: Sun 01 Jan 2023 16:35:04 +0000
ROA not before: Sun 01 Jan 2023 16:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199313
IP address blocks: 195.64.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:cd:cb:38:ae:cc:9b:bd:90:3f:ec:c8:ad:b2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 16:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fbbc002cc0ba3e08b8064847e6d84adaf23fc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:eb:d0:79:90:66:79:8f:ae:cc:22:2c:f9:
91:f5:86:68:11:6c:2b:01:e0:1a:08:f1:51:f7:70:
6b:b1:47:03:75:ac:05:bf:98:fb:8d:11:4d:7e:f1:
77:4e:36:dd:2e:91:5f:6d:43:96:b0:5d:bf:36:d0:
93:c6:32:b6:48:80:5a:8c:9e:fe:80:de:b4:4d:3c:
9c:49:89:72:b6:38:58:1d:6f:ce:a1:eb:dd:e6:b3:
af:ea:e9:74:e9:51:15:7e:68:53:0c:c5:21:c8:6b:
f1:1b:bf:bd:b0:49:ec:02:ac:7e:cb:2c:d5:dc:91:
60:90:7e:55:bb:38:28:63:aa:1f:44:c6:9f:ae:0e:
1c:f0:17:24:42:7d:60:71:19:9d:56:0f:69:42:d9:
f6:86:a8:d4:d9:52:6a:c0:3e:07:04:19:23:ab:3c:
9d:51:b0:a5:0f:86:61:8d:97:bd:ed:c8:0c:de:39:
ac:77:42:95:10:26:9c:3e:b2:78:e3:17:38:ae:00:
cd:9a:a9:11:58:05:88:a9:ed:d7:33:66:6e:8c:f2:
58:4d:ed:e9:ea:1a:1f:f2:84:6f:7c:2c:f3:d6:e6:
58:be:ee:29:e7:0d:19:ed:76:a6:7e:9e:d0:4b:08:
08:4d:f5:68:ee:2f:85:f6:7b:a6:4f:1a:d4:67:25:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:C0:02:CC:0B:A3:E0:8B:80:64:84:7E:6D:84:AD:AF:23:FC:47
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/f7vAAswLo-CLgGSEfm2Era8j_Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.236.0/23
Signature Algorithm: sha256WithRSAEncryption
46:c2:ef:b1:17:09:b0:f2:19:b2:f8:a7:5a:9b:3a:73:93:8b:
2f:55:17:d5:f5:4d:b8:75:8c:ff:fb:96:e9:e8:51:92:c9:3d:
56:f6:06:ed:44:c1:3e:a5:ae:5d:51:25:8c:36:8b:bf:03:76:
ab:14:09:52:79:af:18:b9:54:5e:95:12:f1:2e:f3:49:1e:49:
7e:4d:13:ad:e2:f2:42:a7:51:6c:d8:82:f5:52:66:10:65:e6:
59:77:e5:3d:29:7b:f3:cc:54:42:12:25:5a:04:f6:7a:3d:ec:
7c:52:60:55:c8:82:c9:e9:21:2e:0d:57:9f:fc:38:e2:77:f5:
91:78:74:a2:c6:4a:94:7f:1f:76:10:b3:9b:75:66:cc:7a:74:
5d:40:3f:b9:f6:d4:45:f8:a1:29:76:9d:a9:29:d0:ae:08:94:
1a:e9:6a:5e:79:f6:b6:43:f1:65:47:26:4b:c0:cf:4d:25:39:
5d:23:97:b3:b2:7d:d7:78:2e:6d:1b:cc:bd:6d:3c:5f:38:17:
0d:a7:d4:a3:d2:77:d9:2d:cd:8e:98:60:af:e6:86:e9:a2:f1:
11:da:b1:10:6a:fb:a7:f6:c3:4e:89:db:70:7b:bc:a9:80:02:
a7:c1:a6:ba:d1:61:0f:d8:72:55:42:f4:bf:fc:0c:bf:5f:cd:
7a:09:12:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL83LOK7Mm72QP+zIrbLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx
ODRmNGQwHhcNMjMwMTAxMTYzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmJiYzAwMmNjMGJhM2UwOGI4MDY0ODQ3ZTZkODRhZGFmMjNmYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNrr0HmQZnmPrswiLPmR9YZoEWwr
AeAaCPFR93BrsUcDdawFv5j7jRFNfvF3TjbdLpFfbUOWsF2/NtCTxjK2SIBajJ7+
gN60TTycSYlytjhYHW/Ooevd5rOv6ul06VEVfmhTDMUhyGvxG7+9sEnsAqx+yyzV
3JFgkH5VuzgoY6ofRMafrg4c8BckQn1gcRmdVg9pQtn2hqjU2VJqwD4HBBkjqzyd
UbClD4ZhjZe97cgM3jmsd0KVECacPrJ44xc4rgDNmqkRWAWIqe3XM2ZujPJYTe3p
6hof8oRvfCzz1uZYvu4p5w0Z7Xamfp7QSwgITfVo7i+F9numTxrUZyUKdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+7wALMC6Pgi4BkhH5thK2vI/xHMB8GA1UdIwQY
MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt
OGU5M2NiNWM1MzU1LzEvZjd2QUFzd0xvLUNMZ0dTRWZtMkVyYThqX0VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1
LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0DsMA0G
CSqGSIb3DQEBCwUAA4IBAQBGwu+xFwmw8hmy+Kdamzpzk4svVRfV9U24dYz/+5bp
6FGSyT1W9gbtRME+pa5dUSWMNou/A3arFAlSea8YuVRelRLxLvNJHkl+TROt4vJC
p1Fs2IL1UmYQZeZZd+U9KXvzzFRCEiVaBPZ6Pex8UmBVyILJ6SEuDVef/Djid/WR
eHSixkqUfx92ELObdWbMenRdQD+59tRF+KEpdp2pKdCuCJQa6Wpeefa2Q/FlRyZL
wM9NJTldI5ezsn3XeC5tG8y9bTxfOBcNp9Sj0nfZLc2OmGCv5obpovER2rEQavun
9sNOidtwe7ypgAKnwaa60WEP2HJVQvS//Ay/X816CRKf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:52 2024 by rpki-client on console-ams.rpki-client.org