Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/8bX7l9RuRqIVNODFUt0lLCcVouc.roa
File: 8bX7l9RuRqIVNODFUt0lLCcVouc.roa (raw, json)
Hash identifier: OA0WGHag792H8VI0jknxv0jHd0/oNAr97UviuH3ecPI=
Subject key identifier: F1:B5:FB:97:D4:6E:46:A2:15:34:E0:C5:52:DD:25:2C:27:15:A2:E7
Certificate issuer: /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial: 01856D4AB446F7F2C98A54DAAEFBA7C664C4
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/8bX7l9RuRqIVNODFUt0lLCcVouc.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207861
IP address blocks: 193.57.21.0/24 maxlen: 24
193.56.247.0/24 maxlen: 24
193.57.4.0/24 maxlen: 24
193.57.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b4:46:f7:f2:c9:8a:54:da:ae:fb:a7:c6:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1b5fb97d46e46a21534e0c552dd252c2715a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:30:46:81:d3:d0:d9:f6:8c:bd:ff:09:f5:
f2:ce:98:fe:63:47:56:ef:dd:00:84:9e:cc:49:7a:
50:a6:14:b8:d3:82:40:da:4b:4c:37:29:60:ee:b2:
73:02:b7:da:1b:f6:74:79:02:fe:79:08:15:df:1c:
5e:cb:fd:4c:11:cc:6d:d7:ad:c4:8a:bd:fe:d8:c4:
8c:45:d0:df:a9:0d:9a:ea:aa:06:e3:f3:3b:38:16:
24:37:01:e4:4a:61:14:42:32:3f:91:ab:be:67:fb:
e6:de:50:2e:cf:82:86:36:8e:9c:64:cb:18:e7:d3:
ba:c7:c8:40:cd:81:67:ab:1a:32:24:37:d9:a5:38:
92:2f:18:03:61:4a:17:a2:50:a7:59:c4:b4:48:41:
3e:0a:77:05:86:4f:8d:53:55:9a:97:47:41:85:56:
95:0e:21:ca:db:45:69:27:02:c1:51:9c:3f:f6:63:
b1:89:18:16:b5:b5:c5:7d:18:4f:43:aa:4e:d1:4c:
13:a9:26:2b:88:0c:4c:39:ad:8f:7b:3e:cb:f7:6a:
d9:4b:39:e1:cb:68:58:10:7c:69:cf:37:3f:11:d1:
eb:ca:10:37:87:eb:d8:02:71:33:a9:66:0e:26:eb:
63:0a:60:04:db:ca:9a:4d:e1:6a:f5:96:f8:77:ec:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:FB:97:D4:6E:46:A2:15:34:E0:C5:52:DD:25:2C:27:15:A2:E7
X509v3 Authority Key Identifier:
keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/8bX7l9RuRqIVNODFUt0lLCcVouc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.247.0/24
193.57.4.0/24
193.57.7.0/24
193.57.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c5:11:f4:f6:44:cc:9e:64:41:12:6f:e5:fb:99:d3:ea:0b:
53:0c:98:50:22:c1:a4:6c:91:35:57:0a:62:d6:fc:21:31:48:
e0:3b:fa:73:4e:5f:ce:a3:8f:e1:20:8e:d2:19:8e:67:3f:09:
40:97:d3:18:33:44:ef:38:22:67:4a:95:3d:61:48:0d:13:c7:
df:9f:d2:5e:34:73:85:83:ef:8c:4f:93:4e:de:bb:3a:77:15:
2e:91:0c:4c:ec:fa:63:72:1d:f6:c3:a4:ae:e3:74:a8:92:b8:
d7:49:f0:f0:77:14:8a:04:91:b2:ac:8c:42:0c:c2:7a:27:b2:
24:db:0d:6e:a5:80:1c:79:a1:63:99:ef:73:f4:2a:0c:86:71:
3f:f2:3a:82:fe:bd:bf:11:c5:88:d1:f4:5d:97:9c:9d:0b:17:
45:ac:2b:4b:0d:b1:fe:f2:ab:57:9e:33:d9:7c:83:6a:a5:98:
4d:4e:e2:51:e9:9e:44:84:a2:da:69:4f:51:b3:07:ea:8b:e8:
e0:42:76:a2:e1:b3:95:e4:70:26:78:2d:af:8c:12:93:6c:35:
38:ef:64:5c:6d:ae:57:3d:29:67:7f:ac:37:18:e2:98:fe:01:
0d:c0:a3:1b:24:0e:3b:ee:17:16:89:07:63:84:e9:c6:c7:a9:
ff:f2:00:72
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVtSrRG9/LJilTarvunxmTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjZiYTBhNjYwYWE4OGZhNTRlZjhkNzQ2ZWE3ZTUyNzc4
MWZjM2MwHhcNMjMwMTAxMTIyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWI1ZmI5N2Q0NmU0NmEyMTUzNGUwYzU1MmRkMjUyYzI3MTVhMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUwRoHT0Nn2jL3/CfXyzpj+Y0dW
790AhJ7MSXpQphS404JA2ktMNylg7rJzArfaG/Z0eQL+eQgV3xxey/1MEcxt163E
ir3+2MSMRdDfqQ2a6qoG4/M7OBYkNwHkSmEUQjI/kau+Z/vm3lAuz4KGNo6cZMsY
59O6x8hAzYFnqxoyJDfZpTiSLxgDYUoXolCnWcS0SEE+CncFhk+NU1Wal0dBhVaV
DiHK20VpJwLBUZw/9mOxiRgWtbXFfRhPQ6pO0UwTqSYriAxMOa2Pez7L92rZSznh
y2hYEHxpzzc/EdHryhA3h+vYAnEzqWYOJutjCmAE28qaTeFq9Zb4d+zG+wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFPG1+5fUbkaiFTTgxVLdJSwnFaLnMB8GA1UdIwQY
MBaAFPq2ugpmCqiPpU7410bqflJ3gfw8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yYTZDbVlLcUktbFR2alhSdXAtVW5lQl9Edy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMTU3NzNlLWZmMWMtNDBlZS1iYTBi
LTJhMWJhNDg4OTYzNS8xLzhiWDdsOVJ1UnFJVk5PREZVdDBsTENjVm91Yy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWEvMTU3NzNlLWZmMWMtNDBlZS1iYTBiLTJhMWJhNDg4OTYz
NS8xLzEtcmE2Q21ZS3FJLWxUdmpYUnVwLVVuZUJfRHcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBADBOPcD
BADBOQQDBADBOQcDBADBORUwDQYJKoZIhvcNAQELBQADggEBAErFEfT2RMyeZEES
b+X7mdPqC1MMmFAiwaRskTVXCmLW/CExSOA7+nNOX86jj+EgjtIZjmc/CUCX0xgz
RO84ImdKlT1hSA0Tx9+f0l40c4WD74xPk07euzp3FS6RDEzs+mNyHfbDpK7jdKiS
uNdJ8PB3FIoEkbKsjEIMwnonsiTbDW6lgBx5oWOZ73P0KgyGcT/yOoL+vb8RxYjR
9F2XnJ0LF0WsK0sNsf7yq1eeM9l8g2qlmE1O4lHpnkSEotppT1GzB+qL6OBCdqLh
s5XkcCZ4La+MEpNsNTjvZFxtrlc9KWd/rDcY4pj+AQ3AoxskDjvuFxaJB2OE6cbH
qf/yAHI=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:17 2024 by rpki-client on console-fra.rpki-client.org