Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Auta-fcm5icKCYzEM8Rb2eaYP9c.roa
File: Auta-fcm5icKCYzEM8Rb2eaYP9c.roa (raw, json)
Hash identifier: mhE6IKzET7n5X75APjpLVK8BFP7za1CvUjYPmH5wFn4=
Subject key identifier: 02:EB:5A:F9:F7:26:E6:27:0A:09:8C:C4:33:C4:5B:D9:E6:98:3F:D7
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D9C09AB1EBF3B0513C3F0BC1CF20EDCF5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Auta-fcm5icKCYzEM8Rb2eaYP9c.roa
Signing time: Mon 12 Feb 2024 06:38:15 +0000
ROA not before: Mon 12 Feb 2024 06:38:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.116.0/24 maxlen: 24
193.233.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 12 Feb 2024 11:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:09:ab:1e:bf:3b:05:13:c3:f0:bc:1c:f2:0e:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 12 06:38:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02eb5af9f726e6270a098cc433c45bd9e6983fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:35:53:3e:12:bf:07:e1:8f:a5:cb:b5:df:
e6:76:d9:61:14:6d:b9:d1:22:25:b3:50:44:fb:18:
f3:39:6d:3e:a3:9e:35:20:2f:b9:74:ad:17:33:19:
9b:a0:24:bb:f8:b3:db:10:f1:58:bc:f9:40:c3:d5:
88:c6:05:e6:1c:9f:d3:08:87:27:22:cf:4a:bf:5e:
44:7e:bd:11:05:0a:3b:f8:06:05:fc:d0:af:f1:b2:
20:05:95:9e:e2:b6:9a:ca:2a:a5:e3:9c:e0:75:1b:
cd:55:fe:d2:db:79:1f:44:f4:d8:bc:97:40:8f:c1:
c8:bb:12:c2:26:28:88:07:06:11:02:e6:82:07:d2:
4b:90:c2:f3:80:a7:a9:98:b1:9f:8a:5e:3e:e4:d7:
78:09:7e:fa:b8:d4:ba:14:54:4a:37:61:a2:05:ce:
86:94:3f:d8:40:0f:d1:1d:60:96:9b:9a:f7:33:dc:
4f:34:54:22:e0:82:a7:10:07:26:3e:1e:de:a1:84:
c2:80:46:a7:bd:c3:2e:62:65:d2:b9:e7:a8:50:0f:
d5:df:5f:5e:dc:bd:7e:b4:fb:37:28:8a:54:63:37:
b8:0c:77:4c:24:f4:58:c3:a3:5f:02:4f:c0:77:5b:
aa:dd:30:82:52:d9:ce:50:9c:18:c4:27:63:e5:00:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EB:5A:F9:F7:26:E6:27:0A:09:8C:C4:33:C4:5B:D9:E6:98:3F:D7
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Auta-fcm5icKCYzEM8Rb2eaYP9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.116.0/24
193.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
23:bb:8e:95:ea:8c:51:f8:b2:32:4c:88:5a:99:ce:2e:8e:89:
b0:fc:06:72:be:98:5b:87:de:48:c8:32:d1:4e:8f:a6:5b:6f:
2b:7c:34:74:e4:1f:66:78:18:de:11:96:0f:68:6c:c8:4d:ba:
41:58:47:81:82:1f:09:f6:f7:6c:a6:43:7f:b7:b3:80:f3:82:
cf:13:d1:0e:f3:83:db:22:cc:a4:ac:7a:c5:32:77:ef:6f:1d:
7b:c6:b8:77:8e:5e:b8:3e:1d:4f:0e:2c:53:57:6e:bb:da:62:
40:50:60:73:48:de:8d:ac:71:93:33:9c:df:fc:6e:17:40:f6:
56:1f:91:a3:ee:c9:27:13:df:1b:e7:f1:fb:cc:8b:d4:19:59:
99:1e:cd:91:25:da:b7:f1:90:f8:90:30:60:60:07:28:c7:a6:
ec:1e:c8:ca:d0:d9:f4:95:50:23:0b:3b:eb:43:3a:61:54:ea:
d7:6d:44:36:cb:16:70:22:62:15:e3:14:4a:5f:5d:52:70:ee:
8f:bb:25:c7:d0:10:b6:f9:60:98:32:8d:7c:6b:62:10:99:3e:
7f:d9:02:60:cf:86:54:1e:6e:16:a9:35:03:05:41:11:f6:3b:
46:9d:1d:37:e3:cd:51:01:85:45:41:7e:c8:16:9d:a8:48:90:
17:7f:92:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2cCasevzsFE8PwvBzyDtz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMjEyMDYzODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmViNWFmOWY3MjZlNjI3MGEwOThjYzQzM2M0NWJkOWU2OTgzZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m01Uz4Svwfhj6XLtd/mdtlhFG25
0SIls1BE+xjzOW0+o541IC+5dK0XMxmboCS7+LPbEPFYvPlAw9WIxgXmHJ/TCIcn
Is9Kv15Efr0RBQo7+AYF/NCv8bIgBZWe4raayiql45zgdRvNVf7S23kfRPTYvJdA
j8HIuxLCJiiIBwYRAuaCB9JLkMLzgKepmLGfil4+5Nd4CX76uNS6FFRKN2GiBc6G
lD/YQA/RHWCWm5r3M9xPNFQi4IKnEAcmPh7eoYTCgEanvcMuYmXSueeoUA/V319e
3L1+tPs3KIpUYze4DHdMJPRYw6NfAk/Ad1uq3TCCUtnOUJwYxCdj5QDV5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFALrWvn3JuYnCgmMxDPEW9nmmD/XMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvQXV0YS1mY201aWNLQ1l6RU04UmIyZWFZUDljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAky10AwQC
wel8MA0GCSqGSIb3DQEBCwUAA4IBAQAju46V6oxR+LIyTIhamc4ujomw/AZyvphb
h95IyDLRTo+mW28rfDR05B9meBjeEZYPaGzITbpBWEeBgh8J9vdspkN/t7OA84LP
E9EO84PbIsykrHrFMnfvbx17xrh3jl64Ph1PDixTV2672mJAUGBzSN6NrHGTM5zf
/G4XQPZWH5Gj7sknE98b5/H7zIvUGVmZHs2RJdq38ZD4kDBgYAcox6bsHsjK0Nn0
lVAjCzvrQzphVOrXbUQ2yxZwImIV4xRKX11ScO6PuyXH0BC2+WCYMo18a2IQmT5/
2QJgz4ZUHm4WqTUDBUER9jtGnR03481RAYVFQX7IFp2oSJAXf5Ih
-----END CERTIFICATE-----
Generated at Mon Feb 12 15:17:06 2024 by rpki-client on console-ams.rpki-client.org