Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/f4gzR_VegIDOyz6DMopBh-a3-zI.roa
File: f4gzR_VegIDOyz6DMopBh-a3-zI.roa (raw, json)
Hash identifier: aZEucjTw2BkunJJtnmI0Xz+Hf6zlXzRaMIcj1ftx+O4=
Subject key identifier: 7F:88:33:47:F5:5E:80:80:CE:CB:3E:83:32:8A:41:87:E6:B7:FB:32
Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial: 018A04D5A41EC0A05A129436DE23B733463E
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/f4gzR_VegIDOyz6DMopBh-a3-zI.roa
Signing time: Thu 17 Aug 2023 18:50:24 +0000
ROA not before: Thu 17 Aug 2023 18:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47913
IP address blocks: 185.117.28.0/23 maxlen: 23
109.68.210.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:d5:a4:1e:c0:a0:5a:12:94:36:de:23:b7:33:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Validity
Not Before: Aug 17 18:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f883347f55e8080cecb3e83328a4187e6b7fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:5b:ed:da:80:f8:22:e1:91:88:93:2a:fa:
d4:76:32:6a:2b:77:8b:48:aa:75:65:28:0b:08:d8:
f0:21:b1:c6:3a:df:8b:60:84:9c:0c:25:05:2f:48:
0c:df:11:8b:22:39:46:75:20:93:36:11:3f:ff:34:
6f:ef:6c:e9:da:5f:33:dc:bb:3c:ec:ee:01:29:79:
26:85:02:d0:88:c0:6f:cb:50:89:4b:94:bd:bc:4f:
95:e3:0b:f4:c6:89:28:a0:01:66:aa:50:f5:2c:b9:
af:67:dc:bc:1a:cd:72:7d:75:f3:9e:b0:ac:4f:eb:
a3:a6:2b:6a:3e:fc:31:d1:83:e3:5a:b7:ce:21:76:
84:33:16:b5:2d:b2:8f:2b:c3:d0:2d:48:5e:0a:2d:
88:cf:e8:8b:c0:86:8a:e5:a1:b1:63:0c:0e:a4:30:
47:af:ba:8c:cc:96:9c:8a:4a:14:a5:90:3c:82:6a:
e5:49:76:68:5a:cf:b3:30:8a:49:31:2e:50:8f:1a:
a4:c5:29:66:3a:c3:b8:f5:5c:55:86:80:a7:89:be:
09:39:ea:04:a0:94:4d:36:be:8a:57:18:54:e3:fb:
7d:30:81:f7:36:70:a9:a0:75:10:dc:8f:b8:cc:9a:
39:69:92:f5:12:7d:bd:9a:d7:b1:32:5e:0e:57:58:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:88:33:47:F5:5E:80:80:CE:CB:3E:83:32:8A:41:87:E6:B7:FB:32
X509v3 Authority Key Identifier:
keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/f4gzR_VegIDOyz6DMopBh-a3-zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.210.0/23
185.117.28.0/23
Signature Algorithm: sha256WithRSAEncryption
85:5d:b2:4f:58:33:8c:ba:c5:8c:74:49:11:90:5f:ab:62:4d:
89:ec:48:27:87:00:d0:f1:3c:65:97:8c:4c:11:9d:1f:ca:8e:
f0:81:aa:0e:55:9f:d6:56:1f:05:6d:51:b8:d7:95:65:a6:7a:
be:74:e2:e1:44:a6:07:92:60:a6:12:73:f4:89:fe:7f:35:1e:
43:42:fd:2d:e2:64:7c:dd:10:33:e7:f8:cd:1c:78:23:49:87:
ad:fe:12:eb:46:8a:e0:b9:54:5c:5e:7f:25:7f:0d:9e:6c:ee:
3a:53:61:87:ad:f2:35:21:ce:b0:05:d3:70:c8:95:eb:68:ee:
15:f3:8e:09:e0:1b:a0:8e:6d:19:73:c2:ae:99:dd:2e:41:08:
b2:36:d6:f2:1d:c2:fd:66:31:3f:cf:b2:17:4f:42:d2:a1:55:
d9:90:6c:06:67:a5:03:54:a1:94:3f:31:97:c2:12:e4:80:30:
8a:ae:e1:4b:93:bf:a8:3c:2a:32:46:03:11:0d:09:cd:c7:61:
c4:9c:99:41:dd:6f:15:66:01:f8:70:82:48:58:d2:71:0d:1a:
51:a1:36:bd:ff:fe:2c:06:26:86:ec:4f:ce:c9:ee:cc:8d:0f:
d5:26:bb:78:15:0b:5f:90:1e:f7:21:cc:0e:84:4f:e0:10:f8:
75:7d:51:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYoE1aQewKBaEpQ23iO3M0Y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTVjMGY5NWFiN2JlOGI4NWY3MTFmYTQzMzY2NWMxNGU2
ZTkzNTkwHhcNMjMwODE3MTg1MDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Zjg4MzM0N2Y1NWU4MDgwY2VjYjNlODMzMjhhNDE4N2U2YjdmYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNpb7dqA+CLhkYiTKvrUdjJqK3eL
SKp1ZSgLCNjwIbHGOt+LYIScDCUFL0gM3xGLIjlGdSCTNhE//zRv72zp2l8z3Ls8
7O4BKXkmhQLQiMBvy1CJS5S9vE+V4wv0xokooAFmqlD1LLmvZ9y8Gs1yfXXznrCs
T+ujpitqPvwx0YPjWrfOIXaEMxa1LbKPK8PQLUheCi2Iz+iLwIaK5aGxYwwOpDBH
r7qMzJacikoUpZA8gmrlSXZoWs+zMIpJMS5QjxqkxSlmOsO49VxVhoCnib4JOeoE
oJRNNr6KVxhU4/t9MIH3NnCpoHUQ3I+4zJo5aZL1En29mtexMl4OV1hVywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH+IM0f1XoCAzss+gzKKQYfmt/syMB8GA1UdIwQY
MBaAFH7lwPlat76LhfcR+kM2ZcFObpNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEt
OTAxOTRiZDY4NDI4LzEvZjRnelJfVmVnSURPeXo2RE1vcEJoLWEzLXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEtOTAxOTRiZDY4NDI4
LzEvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbUTSAwQB
uXUcMA0GCSqGSIb3DQEBCwUAA4IBAQCFXbJPWDOMusWMdEkRkF+rYk2J7EgnhwDQ
8Txll4xMEZ0fyo7wgaoOVZ/WVh8FbVG415Vlpnq+dOLhRKYHkmCmEnP0if5/NR5D
Qv0t4mR83RAz5/jNHHgjSYet/hLrRorguVRcXn8lfw2ebO46U2GHrfI1Ic6wBdNw
yJXraO4V844J4Bugjm0Zc8Kumd0uQQiyNtbyHcL9ZjE/z7IXT0LSoVXZkGwGZ6UD
VKGUPzGXwhLkgDCKruFLk7+oPCoyRgMRDQnNx2HEnJlB3W8VZgH4cIJIWNJxDRpR
oTa9//4sBiaG7E/Oye7MjQ/VJrt4FQtfkB73IcwOhE/gEPh1fVH7
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:20 2024 by rpki-client on console-ams.rpki-client.org