Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/jfVDcGwqGfG2FieGHc5_jsewrjc.roa
File: jfVDcGwqGfG2FieGHc5_jsewrjc.roa (raw, json)
Hash identifier: e8f2LJbitr6mUYn/wEGtLSINvGnx/VI7J69OKF3Qk+E=
Subject key identifier: 8D:F5:43:70:6C:2A:19:F1:B6:16:27:86:1D:CE:7F:8E:C7:B0:AE:37
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E6674CB32414069A9DCF3BA0BE720AB
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/jfVDcGwqGfG2FieGHc5_jsewrjc.roa
Signing time: Sun 01 Jan 2023 17:34:46 +0000
ROA not before: Sun 01 Jan 2023 17:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197648
IP address blocks: 213.169.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:74:cb:32:41:40:69:a9:dc:f3:ba:0b:e7:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8df543706c2a19f1b61627861dce7f8ec7b0ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:1f:04:76:54:a1:a4:09:8e:77:59:e7:fd:
a1:15:8e:ea:f5:e5:a9:f6:08:6c:82:f9:52:d0:4a:
83:af:14:f7:6c:e6:89:74:6b:67:d0:70:ce:76:48:
04:24:bf:85:68:2a:97:37:34:2a:3d:22:51:1d:95:
d7:7c:98:e6:38:8c:40:97:30:24:77:dc:ad:f7:87:
4c:b4:3b:51:2f:2f:dc:c9:cd:3d:39:8e:2f:b7:77:
24:b6:8e:a9:50:52:54:78:84:58:f8:f8:ec:b0:77:
85:dc:3d:b5:90:20:a9:dc:cb:1e:57:57:df:3a:bb:
a5:c2:1f:8c:8e:41:ac:d9:ab:4e:ed:46:b6:f1:bb:
39:d6:91:e2:bf:f9:06:4a:07:4e:90:12:a3:d4:24:
3a:45:2f:96:47:5e:5f:b1:a0:1e:0e:e2:8b:6e:16:
0b:3d:34:fe:27:e2:f3:ae:a1:f7:12:f9:56:ff:d6:
45:45:38:a8:25:6c:8b:06:f2:b3:c5:23:b8:96:6b:
cc:95:ef:63:80:f3:07:64:bf:72:ef:97:8d:9d:1c:
fe:f2:74:f4:9b:3e:c1:18:9a:b2:d0:5b:b5:9c:9a:
b0:06:c0:2a:9d:7f:d8:08:8c:b3:22:b5:6e:57:d1:
9a:46:25:f5:47:2a:5f:cf:5f:63:46:1c:b7:1d:ff:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:43:70:6C:2A:19:F1:B6:16:27:86:1D:CE:7F:8E:C7:B0:AE:37
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/jfVDcGwqGfG2FieGHc5_jsewrjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.148.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3a:af:19:f4:de:64:25:6b:12:79:84:21:cd:32:5b:af:ff:
27:67:cc:ab:ab:a6:1c:02:6c:f1:3f:48:f2:cd:52:43:4b:f8:
ab:76:74:02:ba:6b:79:f9:6b:dc:fc:c3:1f:c2:25:ed:e6:17:
d9:d8:00:c5:8f:40:fd:91:ac:f9:7c:5e:9b:7f:12:c5:4a:81:
2f:0a:29:98:c4:9b:80:41:e6:9a:7c:7c:cf:20:1c:b4:0c:71:
c1:89:64:a0:41:e4:f0:94:34:12:46:df:9c:f3:58:51:c2:af:
f8:28:29:e1:d4:f8:85:23:98:8a:39:c9:23:2a:7c:c5:4b:86:
fe:38:80:fc:39:61:65:84:ca:c5:6c:1e:9e:9a:d2:64:68:87:
a3:28:67:33:5e:d5:ac:27:34:a2:7d:e4:e2:58:63:59:62:ad:
53:de:2d:0c:74:8f:4a:f7:c4:dc:a3:df:28:66:96:58:6a:e9:
eb:b6:e7:d1:0e:a1:4b:77:06:66:d6:4b:6c:e8:64:9d:77:50:
df:8e:7b:19:ec:56:84:52:63:6e:84:77:84:20:b2:8d:58:3d:
99:d0:6b:30:27:6f:d3:90:67:bb:98:87:76:85:8f:c1:f8:52:
5e:9e:47:10:4d:80:98:63:ec:3d:d8:18:20:4e:8a:67:ed:94:
9d:e2:f8:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuZnTLMkFAaanc87oL5yCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjMwMTAxMTczNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGY1NDM3MDZjMmExOWYxYjYxNjI3ODYxZGNlN2Y4ZWM3YjBhZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXMfBHZUoaQJjndZ5/2hFY7q9eWp
9ghsgvlS0EqDrxT3bOaJdGtn0HDOdkgEJL+FaCqXNzQqPSJRHZXXfJjmOIxAlzAk
d9yt94dMtDtRLy/cyc09OY4vt3ckto6pUFJUeIRY+PjssHeF3D21kCCp3MseV1ff
Orulwh+MjkGs2atO7Ua28bs51pHiv/kGSgdOkBKj1CQ6RS+WR15fsaAeDuKLbhYL
PTT+J+LzrqH3EvlW/9ZFRTioJWyLBvKzxSO4lmvMle9jgPMHZL9y75eNnRz+8nT0
mz7BGJqy0Fu1nJqwBsAqnX/YCIyzIrVuV9GaRiX1Rypfz19jRhy3Hf9v8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI31Q3BsKhnxthYnhh3Of47HsK43MB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvamZWRGNHd3FHZkcyRmllR0hjNV9qc2V3cmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1amUMA0G
CSqGSIb3DQEBCwUAA4IBAQCROq8Z9N5kJWsSeYQhzTJbr/8nZ8yrq6YcAmzxP0jy
zVJDS/irdnQCumt5+Wvc/MMfwiXt5hfZ2ADFj0D9kaz5fF6bfxLFSoEvCimYxJuA
QeaafHzPIBy0DHHBiWSgQeTwlDQSRt+c81hRwq/4KCnh1PiFI5iKOckjKnzFS4b+
OID8OWFlhMrFbB6emtJkaIejKGczXtWsJzSifeTiWGNZYq1T3i0MdI9K98Tco98o
ZpZYaunrtufRDqFLdwZm1kts6GSdd1DfjnsZ7FaEUmNuhHeEILKNWD2Z0GswJ2/T
kGe7mId2hY/B+FJenkcQTYCYY+w92BggTopn7ZSd4vgO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org