Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/1-6l715yB2wQbvkjxUdNuhYgsil8.roa
File: 1-6l715yB2wQbvkjxUdNuhYgsil8.roa (raw, json)
Hash identifier: cKWlAKGSr2bql0YPVODzlEJOsCJgV/dFSyebbk0YOjc=
Subject key identifier: FB:A9:7B:D7:9C:81:DB:04:1B:BE:48:F1:51:D3:6E:85:88:2C:8A:5F
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 01856BAEC76288FA28441ABD8E1474AD1578
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/1-6l715yB2wQbvkjxUdNuhYgsil8.roa
Signing time: Sun 01 Jan 2023 04:54:54 +0000
ROA not before: Sun 01 Jan 2023 04:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 194.9.182.0/23 maxlen: 23
193.193.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c7:62:88:fa:28:44:1a:bd:8e:14:74:ad:15:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Jan 1 04:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba97bd79c81db041bbe48f151d36e85882c8a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:4d:39:fd:53:fe:61:38:16:5e:d4:2a:a3:
3d:e6:f1:01:94:4b:d7:f8:5d:39:d0:a7:87:41:d8:
aa:ef:82:44:ef:c1:72:2f:15:f7:68:aa:ea:32:dd:
06:88:21:8b:81:08:65:cd:b7:94:3a:e0:15:c5:60:
5e:8c:ba:bf:37:1f:e7:c8:5b:e4:a3:37:1c:21:7c:
fb:4b:fa:8f:57:70:5f:01:38:ef:88:56:19:e2:96:
a8:f4:53:0e:03:dc:ec:20:6b:0f:02:e6:91:f5:44:
dc:e8:3d:0a:5b:a2:b7:12:54:87:ba:75:b5:b9:00:
7b:65:10:78:98:f2:9c:1f:2a:4d:e1:b8:71:64:f3:
7e:24:dd:71:df:ce:99:5a:02:ce:59:4e:47:ac:dc:
50:21:10:7f:0a:a7:d0:c8:4a:a8:c1:c2:39:03:93:
77:0b:ef:de:7e:77:82:d9:54:18:38:e3:79:d8:fd:
65:8a:20:a3:34:20:ed:c4:93:ab:b7:55:0a:aa:c5:
5a:2a:05:c6:7c:60:bd:d4:d4:0d:31:ba:b7:cc:ce:
9b:cd:3d:ca:01:18:13:1f:33:7e:d7:9d:bb:f8:05:
bd:6f:28:63:93:11:fa:2b:f1:9e:df:7e:19:7a:63:
ad:cf:6b:c7:f3:72:57:70:7d:49:23:6f:6a:2f:d6:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:7B:D7:9C:81:DB:04:1B:BE:48:F1:51:D3:6E:85:88:2C:8A:5F
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/1-6l715yB2wQbvkjxUdNuhYgsil8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.190.0/23
194.9.182.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:22:bb:f2:23:d5:0e:0c:5f:54:30:21:4b:60:52:33:fd:e9:
81:3d:7a:82:1b:f2:6e:7c:5b:0d:0b:c4:65:47:56:51:7b:5d:
77:33:36:a3:6b:94:c7:23:95:67:59:7b:ca:35:01:19:86:e3:
0f:05:f2:30:57:7f:c3:87:99:9a:3f:fa:e2:dc:9c:26:51:9b:
a4:24:3d:ae:c2:87:45:27:15:16:e7:0c:fc:5f:7d:ab:97:b3:
9c:c3:aa:6b:90:e1:2d:92:b5:3a:9a:de:83:21:d4:7f:f4:f4:
10:45:ee:7f:05:0e:2d:a3:20:62:b4:17:57:6b:8e:ca:6c:0a:
d8:e2:9f:48:c5:bf:c8:24:bc:f5:a8:ac:10:f0:38:f5:d7:86:
01:e1:dc:29:8b:1e:48:df:bc:05:3a:f6:1f:83:98:b2:b6:5a:
b9:58:b4:64:f0:8d:18:eb:47:d3:38:03:02:21:6b:6a:ac:57:
c1:39:36:a0:5b:2a:e5:b6:68:0e:9a:ea:e5:0d:21:98:e0:fe:
f4:7c:99:1e:7d:6e:c4:59:96:60:6d:a2:3d:1d:d6:64:60:73:
00:fd:8d:26:52:71:31:f3:b3:a5:40:c7:43:a1:75:5b:ee:bd:
64:81:33:90:28:5a:f8:7a:b4:e5:1c:fe:b0:d3:91:4c:01:43:
b0:44:64:2f
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYVrrsdiiPooRBq9jhR0rRV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy
YzM2MzAwHhcNMjMwMTAxMDQ1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmE5N2JkNzljODFkYjA0MWJiZTQ4ZjE1MWQzNmU4NTg4MmM4YTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkNNOf1T/mE4Fl7UKqM95vEBlEvX
+F050KeHQdiq74JE78FyLxX3aKrqMt0GiCGLgQhlzbeUOuAVxWBejLq/Nx/nyFvk
ozccIXz7S/qPV3BfATjviFYZ4pao9FMOA9zsIGsPAuaR9UTc6D0KW6K3ElSHunW1
uQB7ZRB4mPKcHypN4bhxZPN+JN1x386ZWgLOWU5HrNxQIRB/CqfQyEqowcI5A5N3
C+/efneC2VQYOON52P1liiCjNCDtxJOrt1UKqsVaKgXGfGC91NQNMbq3zM6bzT3K
ARgTHzN+1527+AW9byhjkxH6K/Ge334ZemOtz2vH83JXcH1JI29qL9aU5wIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPupe9ecgdsEG75I8VHTboWILIpfMB8GA1UdIwQY
MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt
YjdhZGYwNGU0MjNkLzEvMS02bDcxNXlCMndRYnZranhVZE51aFlnc2lsOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjAvM2RjNGRkLTgwYmItNGRmNS1hZjU4LWI3YWRmMDRlNDIz
ZC8xL2c3ZDhub0VIYlBTMHp2N1Y3dklRZjNVc05qQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcHBvgME
AcIJtjANBgkqhkiG9w0BAQsFAAOCAQEATSK78iPVDgxfVDAhS2BSM/3pgT16ghvy
bnxbDQvEZUdWUXtddzM2o2uUxyOVZ1l7yjUBGYbjDwXyMFd/w4eZmj/64tycJlGb
pCQ9rsKHRScVFucM/F99q5eznMOqa5DhLZK1OpregyHUf/T0EEXufwUOLaMgYrQX
V2uOymwK2OKfSMW/yCS89aisEPA49deGAeHcKYseSN+8BTr2H4OYsrZauVi0ZPCN
GOtH0zgDAiFraqxXwTk2oFsq5bZoDprq5Q0hmOD+9HyZHn1uxFmWYG2iPR3WZGBz
AP2NJlJxMfOzpUDHQ6F1W+69ZIEzkCha+Hq05Rz+sNORTAFDsERkLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org