Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/FBlJisNHNHn30OXdZejNRAlMjQ0.roa
File: FBlJisNHNHn30OXdZejNRAlMjQ0.roa (raw, json)
Hash identifier: LSa+D81CwPsonK5LCijy2pohmNEoW6iH7gw57MUQTEY=
Subject key identifier: 14:19:49:8A:C3:47:34:79:F7:D0:E5:DD:65:E8:CD:44:09:4C:8D:0D
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01856E2F8DBE3063407FB325CE4C9E356EA5
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/FBlJisNHNHn30OXdZejNRAlMjQ0.roa
Signing time: Sun 01 Jan 2023 16:34:48 +0000
ROA not before: Sun 01 Jan 2023 16:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.134.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8d:be:30:63:40:7f:b3:25:ce:4c:9e:35:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Jan 1 16:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1419498ac3473479f7d0e5dd65e8cd44094c8d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:8a:6e:b1:5b:7b:4f:8a:d9:61:93:a3:8a:
e8:22:88:79:15:e4:f7:f8:9a:b7:d2:b6:6f:92:e6:
8c:b9:ec:f6:ad:04:03:71:6b:dd:c3:e4:97:a5:e2:
b6:92:74:c1:6f:70:d7:f0:da:83:70:6a:13:0e:dc:
ce:d6:27:9a:f3:a3:79:c9:51:23:4e:57:a9:02:e5:
71:f0:da:7a:53:ce:6a:c9:ff:1b:f5:42:b6:56:f8:
de:33:f3:e6:1a:a7:3a:c6:e3:c9:de:4f:eb:36:45:
4c:76:26:a6:b9:91:5d:a3:06:a9:7b:1e:41:53:1b:
ba:2a:a7:74:80:75:23:52:d1:53:51:9c:b1:ee:20:
14:20:38:f0:22:5d:b4:d7:86:5e:49:52:f0:7a:e4:
5d:79:72:f0:2d:91:e7:c7:72:b4:96:57:68:55:8c:
c0:57:0a:48:a2:b6:bd:85:6e:02:f3:cc:5d:e3:b3:
d7:72:b0:ae:1f:8f:ee:56:7e:90:96:9b:d1:c8:2d:
d0:92:a0:ab:3f:6a:a9:99:75:d9:8d:e4:ed:11:c3:
8b:90:60:33:bb:c7:59:33:50:82:12:db:6a:12:9a:
ac:e1:ae:ee:50:26:5e:f4:f2:66:3d:c6:7c:87:34:
f2:e9:60:e9:b5:1a:04:24:3b:25:99:5a:c7:5f:9b:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:49:8A:C3:47:34:79:F7:D0:E5:DD:65:E8:CD:44:09:4C:8D:0D
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/FBlJisNHNHn30OXdZejNRAlMjQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.200.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:c9:f6:10:8d:6e:31:4f:3f:70:4b:c9:a9:25:7f:a7:40:5d:
d7:9b:b2:91:c4:59:4d:12:5c:34:8a:5b:eb:44:95:06:5e:d6:
d7:f1:d5:c2:d2:6b:c6:f2:ca:a0:45:ad:59:17:31:a2:e2:70:
78:1e:68:32:fd:da:4b:1b:55:d0:0d:3b:d0:82:e9:9c:23:b7:
a5:80:7f:c6:11:58:bc:74:37:52:61:66:66:65:9c:41:c1:89:
74:52:1e:74:31:bd:10:62:9f:e5:00:ea:76:9b:36:e4:38:d0:
f4:65:6c:cf:94:4a:52:d1:ad:b4:ee:d1:d6:ac:a6:5d:d3:c9:
9a:d5:8d:98:26:cf:29:43:b0:f5:b8:40:0f:f7:1c:af:a7:47:
72:3e:d7:ea:30:7a:75:ee:df:86:d3:67:fd:0a:b0:f3:5a:4b:
91:9c:3d:ad:45:ac:b3:83:c3:15:71:26:69:a1:34:9a:72:10:
c0:79:06:20:eb:67:2b:d7:0c:b7:d7:45:7b:e2:c7:73:a5:74:
18:a7:ff:54:7b:81:f7:1c:8f:8c:b4:91:3f:ba:6f:35:80:6f:
c5:c6:c6:5e:d2:23:48:23:ee:ce:33:0b:0a:ae:d8:d5:57:d7:
9b:6c:0d:96:0a:4d:95:eb:3a:f8:c1:95:e7:ef:ff:24:99:a1:
1c:c6:f0:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL42+MGNAf7MlzkyeNW6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjMwMTAxMTYzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE5NDk4YWMzNDczNDc5ZjdkMGU1ZGQ2NWU4Y2Q0NDA5NGM4ZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3eKbrFbe0+K2WGTo4roIoh5FeT3
+Jq30rZvkuaMuez2rQQDcWvdw+SXpeK2knTBb3DX8NqDcGoTDtzO1iea86N5yVEj
TlepAuVx8Np6U85qyf8b9UK2VvjeM/PmGqc6xuPJ3k/rNkVMdiamuZFdowapex5B
Uxu6Kqd0gHUjUtFTUZyx7iAUIDjwIl2014ZeSVLweuRdeXLwLZHnx3K0lldoVYzA
VwpIora9hW4C88xd47PXcrCuH4/uVn6QlpvRyC3QkqCrP2qpmXXZjeTtEcOLkGAz
u8dZM1CCEttqEpqs4a7uUCZe9PJmPcZ8hzTy6WDptRoEJDslmVrHX5tR6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQZSYrDRzR599Dl3WXozUQJTI0NMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvRkJsSmlzTkhOSG4zME9YZFplak5SQWxNalEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYbIMA0G
CSqGSIb3DQEBCwUAA4IBAQALyfYQjW4xTz9wS8mpJX+nQF3Xm7KRxFlNElw0ilvr
RJUGXtbX8dXC0mvG8sqgRa1ZFzGi4nB4Hmgy/dpLG1XQDTvQgumcI7elgH/GEVi8
dDdSYWZmZZxBwYl0Uh50Mb0QYp/lAOp2mzbkOND0ZWzPlEpS0a207tHWrKZd08ma
1Y2YJs8pQ7D1uEAP9xyvp0dyPtfqMHp17t+G02f9CrDzWkuRnD2tRayzg8MVcSZp
oTSachDAeQYg62cr1wy310V74sdzpXQYp/9Ue4H3HI+MtJE/um81gG/FxsZe0iNI
I+7OMwsKrtjVV9ebbA2WCk2V6zr4wZXn7/8kmaEcxvDd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:05 2024 by rpki-client on console-ams.rpki-client.org