Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/FmyT0LlwJEz1k5tw1aivQkQXEi4.roa
File: FmyT0LlwJEz1k5tw1aivQkQXEi4.roa (raw, json)
Hash identifier: 7SrAE577svTZTVDFIs8BmStpgbPe5sEHlP4mqRJ3610=
Subject key identifier: 16:6C:93:D0:B9:70:24:4C:F5:93:9B:70:D5:A8:AF:42:44:17:12:2E
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 01856CB82C7D1DF2608F36F413861C4CA0F8
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/FmyT0LlwJEz1k5tw1aivQkQXEi4.roa
Signing time: Sun 01 Jan 2023 09:44:47 +0000
ROA not before: Sun 01 Jan 2023 09:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44749
IP address blocks: 185.126.172.0/22 maxlen: 24
2a06:ca40::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:2c:7d:1d:f2:60:8f:36:f4:13:86:1c:4c:a0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Jan 1 09:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=166c93d0b970244cf5939b70d5a8af424417122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:e4:f1:ca:ac:e0:e2:48:66:e3:8a:86:26:
98:4d:e8:cc:1b:54:26:38:f5:75:c2:db:2b:62:38:
88:1b:67:93:36:5c:a3:0a:aa:b9:7f:57:9c:c1:02:
5d:41:4e:09:04:81:4d:31:ee:65:a5:23:cd:d6:f7:
05:fb:f9:a7:d7:38:d0:ff:f8:4b:0d:2e:65:a6:5c:
93:8e:0b:8a:3b:ff:03:ef:26:2c:7c:ce:86:01:49:
ae:5f:91:a7:b3:8c:2f:63:ea:0a:fb:d9:49:de:1e:
b2:f3:c7:9a:f9:57:47:af:c3:67:db:81:a8:38:d6:
06:c6:95:56:07:85:09:09:20:be:a1:be:d7:d6:b2:
67:16:57:6c:c5:24:bc:d9:da:a6:a7:b9:90:0b:54:
9c:d7:a6:9a:ee:79:69:8a:e5:68:94:e0:b5:62:22:
c0:2f:2b:1b:31:b9:0b:81:cd:0c:b2:3c:57:14:f4:
22:eb:70:29:32:fe:29:74:09:e7:92:55:63:3f:49:
98:d2:9f:4a:d2:05:b7:b9:2a:1a:c2:07:22:64:47:
30:85:fd:76:b1:26:70:c3:7a:ac:57:62:0c:90:11:
3b:ee:4f:d3:37:0c:60:15:42:f9:e1:a8:85:9a:97:
c3:20:a4:65:96:61:4d:c8:e3:af:d9:39:23:e3:8d:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:93:D0:B9:70:24:4C:F5:93:9B:70:D5:A8:AF:42:44:17:12:2E
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/FmyT0LlwJEz1k5tw1aivQkQXEi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.172.0/22
IPv6:
2a06:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
26:e6:75:d4:66:e0:1d:2e:8e:cb:a5:04:9d:a4:e2:7a:38:0a:
8d:3a:58:4c:14:2f:70:3a:76:31:d4:ee:d4:9d:10:42:01:1b:
9a:f3:cf:05:50:40:f4:90:6a:98:cf:89:33:79:fe:ae:b7:ab:
ac:57:05:6e:64:34:01:e1:ab:74:a9:f7:66:cb:1d:48:93:66:
11:a2:c6:90:d1:aa:ac:31:15:66:bb:be:8d:22:0e:0e:02:6c:
67:da:53:dc:26:51:6b:39:ac:44:5f:89:d9:4b:a0:c8:76:1e:
19:26:1e:b5:18:0e:5f:4c:84:19:7c:ae:26:d6:10:61:cb:ab:
08:c6:d2:31:60:4c:35:8b:0d:ea:2a:c4:88:a1:17:18:4c:6b:
28:94:34:82:13:7f:05:d7:97:dd:10:22:cb:28:0a:a5:27:5e:
c3:ce:62:9a:f4:f8:02:1a:c2:dc:11:35:d5:79:c7:7e:cb:fb:
dd:e0:94:6b:19:78:76:cb:67:2b:28:1a:5b:cb:a6:f0:a7:27:
c4:fb:a6:4c:70:0b:0e:17:d6:28:c2:db:51:7a:62:d2:f2:c0:
66:0e:af:c5:e2:94:72:70:cd:56:4c:9d:84:25:b3:71:c9:c7:
48:b4:27:af:14:aa:33:ae:2c:dc:41:ab:44:ae:a9:50:b1:c6:
4d:13:fe:5c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsuCx9HfJgjzb0E4YcTKD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdhMzZkNzc2OGE3YjMwYTRlZWNiYjY5NjRjOGMyMzdk
NzQ0MDEwHhcNMjMwMTAxMDk0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjZjOTNkMGI5NzAyNDRjZjU5MzliNzBkNWE4YWY0MjQ0MTcxMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Afk8cqs4OJIZuOKhiaYTejMG1Qm
OPV1wtsrYjiIG2eTNlyjCqq5f1ecwQJdQU4JBIFNMe5lpSPN1vcF+/mn1zjQ//hL
DS5lplyTjguKO/8D7yYsfM6GAUmuX5Gns4wvY+oK+9lJ3h6y88ea+VdHr8Nn24Go
ONYGxpVWB4UJCSC+ob7X1rJnFldsxSS82dqmp7mQC1Sc16aa7nlpiuVolOC1YiLA
LysbMbkLgc0MsjxXFPQi63ApMv4pdAnnklVjP0mY0p9K0gW3uSoawgciZEcwhf12
sSZww3qsV2IMkBE77k/TNwxgFUL54aiFmpfDIKRllmFNyOOv2Tkj442s/QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBZsk9C5cCRM9ZObcNWor0JEFxIuMB8GA1UdIwQY
MBaAFAdHo213aKezCk7su2lkyMI310QBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEt
YWFiYWRkMDcxOWJhLzEvRm15VDBMbHdKRXoxazV0dzFhaXZRa1FYRWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEtYWFiYWRkMDcxOWJh
LzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX6sMA0E
AgACMAcDBQMqBspAMA0GCSqGSIb3DQEBCwUAA4IBAQAm5nXUZuAdLo7LpQSdpOJ6
OAqNOlhMFC9wOnYx1O7UnRBCARua888FUED0kGqYz4kzef6ut6usVwVuZDQB4at0
qfdmyx1Ik2YRosaQ0aqsMRVmu76NIg4OAmxn2lPcJlFrOaxEX4nZS6DIdh4ZJh61
GA5fTIQZfK4m1hBhy6sIxtIxYEw1iw3qKsSIoRcYTGsolDSCE38F15fdECLLKAql
J17DzmKa9PgCGsLcETXVecd+y/vd4JRrGXh2y2crKBpby6bwpyfE+6ZMcAsOF9Yo
wttRemLS8sBmDq/F4pRycM1WTJ2EJbNxycdItCevFKozrizcQatErqlQscZNE/5c
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:49 2024 by rpki-client on console-ams.rpki-client.org