Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/fFSBd49oJBB2OPZrffqD1ZfYYLQ.roa
File: fFSBd49oJBB2OPZrffqD1ZfYYLQ.roa (raw, json)
Hash identifier: vcYyPmBBZkEKwOT563YUrgdORYtqIY00VDyGHRoFMPM=
Subject key identifier: 7C:54:81:77:8F:68:24:10:76:38:F6:6B:7D:FA:83:D5:97:D8:60:B4
Certificate issuer: /CN=05072a23730bbe1a31051f07e3bb2d39d6085527
Certificate serial: 01856DE663754E0E8A215A627BD75ECDA802
Authority key identifier: 05:07:2A:23:73:0B:BE:1A:31:05:1F:07:E3:BB:2D:39:D6:08:55:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQcqI3MLvhoxBR8H47stOdYIVSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/fFSBd49oJBB2OPZrffqD1ZfYYLQ.roa
Signing time: Sun 01 Jan 2023 15:14:53 +0000
ROA not before: Sun 01 Jan 2023 15:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3561
IP address blocks: 130.193.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:63:75:4e:0e:8a:21:5a:62:7b:d7:5e:cd:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05072a23730bbe1a31051f07e3bb2d39d6085527
Validity
Not Before: Jan 1 15:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5481778f6824107638f66b7dfa83d597d860b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:9c:1b:75:5c:0c:14:bd:da:67:5d:a3:d0:
8d:2a:50:cd:e5:36:ee:4e:fb:21:0b:36:54:aa:3e:
69:4e:fc:49:85:5e:c5:30:eb:48:27:8d:49:7c:1b:
01:d8:e2:d0:b7:47:5c:10:53:ee:30:4a:12:c4:d9:
aa:79:53:39:59:82:c7:3d:0c:fa:80:25:4c:0d:83:
bf:be:8a:d8:00:ca:de:16:6b:81:68:75:fb:d4:e4:
68:87:6e:01:fc:92:45:e7:da:ca:f3:27:d4:df:c9:
46:ee:18:c5:17:93:16:ad:61:4f:ca:d8:d1:09:5c:
03:c1:59:e1:dd:44:6e:e1:e2:d0:53:4b:05:fa:78:
c1:89:08:09:e2:03:83:85:5f:42:c6:92:25:44:20:
5a:5d:12:6e:32:84:29:9d:04:c9:05:10:14:c2:47:
25:68:63:67:6b:d0:4f:8b:31:ad:05:a4:fc:0b:e6:
8e:c5:fe:73:ef:87:28:41:f6:ec:ef:bc:0a:ba:0b:
e2:99:c4:12:33:b0:d4:7f:4b:bf:aa:28:9b:87:8c:
2a:bc:24:fa:37:d7:41:1c:51:af:f2:07:9c:3e:3e:
58:b0:f7:01:ee:34:da:f9:48:16:bd:4a:d1:b2:de:
8a:59:56:a6:a5:fc:b4:17:60:0e:6e:a4:00:76:b6:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:81:77:8F:68:24:10:76:38:F6:6B:7D:FA:83:D5:97:D8:60:B4
X509v3 Authority Key Identifier:
keyid:05:07:2A:23:73:0B:BE:1A:31:05:1F:07:E3:BB:2D:39:D6:08:55:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQcqI3MLvhoxBR8H47stOdYIVSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/fFSBd49oJBB2OPZrffqD1ZfYYLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/BQcqI3MLvhoxBR8H47stOdYIVSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:77:f5:0c:4d:89:d1:5d:e8:b9:97:91:dd:36:f1:19:f7:e2:
c5:85:63:a0:a0:72:d6:51:60:34:49:d0:ad:43:8e:dc:45:b3:
ee:ce:c3:6d:8c:35:0d:c0:2e:52:f9:15:54:1f:ef:28:2b:f5:
52:e3:3d:b1:b2:e7:82:0f:0c:60:18:45:d7:cc:68:54:7a:a4:
4e:6a:b0:6c:ed:78:85:49:d6:8a:39:08:3e:1d:52:82:bf:8d:
19:0f:19:20:70:fd:3f:f5:92:99:91:d0:37:6f:78:70:f9:51:
09:bc:ab:d5:44:3c:fc:ff:aa:3b:49:30:ad:3b:05:95:f6:1c:
5d:6f:e9:18:92:ce:49:e1:4f:b1:fe:cd:b8:ba:cc:8c:70:5a:
72:ed:26:a0:ed:f1:da:1f:44:28:3f:ba:48:fe:fa:99:ed:e9:
61:7a:e6:cb:23:d2:e5:a1:78:3b:38:20:10:4c:5d:cb:bc:35:
8d:4f:fc:7a:eb:d1:6a:da:32:fd:f6:84:ed:2e:50:98:91:d3:
40:f7:d2:04:0a:32:3c:28:23:df:f6:fa:40:67:2f:5e:9f:e5:
01:77:a1:f3:f4:ce:8f:ea:96:1d:78:e1:2d:90:85:f9:86:9f:
ec:97:ec:13:1a:cf:6b:11:84:6d:d0:cc:34:b0:37:6f:2b:94:
3b:c1:a5:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt5mN1Tg6KIVpie9dezagCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDcyYTIzNzMwYmJlMWEzMTA1MWYwN2UzYmIyZDM5ZDYw
ODU1MjcwHhcNMjMwMTAxMTUxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzU0ODE3NzhmNjgyNDEwNzYzOGY2NmI3ZGZhODNkNTk3ZDg2MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSacG3VcDBS92mddo9CNKlDN5Tbu
TvshCzZUqj5pTvxJhV7FMOtIJ41JfBsB2OLQt0dcEFPuMEoSxNmqeVM5WYLHPQz6
gCVMDYO/vorYAMreFmuBaHX71ORoh24B/JJF59rK8yfU38lG7hjFF5MWrWFPytjR
CVwDwVnh3URu4eLQU0sF+njBiQgJ4gODhV9CxpIlRCBaXRJuMoQpnQTJBRAUwkcl
aGNna9BPizGtBaT8C+aOxf5z74coQfbs77wKugvimcQSM7DUf0u/qiibh4wqvCT6
N9dBHFGv8gecPj5YsPcB7jTa+UgWvUrRst6KWVampfy0F2AObqQAdrazlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxUgXePaCQQdjj2a336g9WX2GC0MB8GA1UdIwQY
MBaAFAUHKiNzC74aMQUfB+O7LTnWCFUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFjcUkzTUx2aG94QlI4SDQ3c3RPZFlJVlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yNWRmODctMTVhYi00YjkwLWI3NjAt
NTIyNzkxNTNiYmY0LzEvZkZTQmQ0OW9KQkIyT1BacmZmcUQxWmZZWUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yNWRmODctMTVhYi00YjkwLWI3NjAtNTIyNzkxNTNiYmY0
LzEvQlFjcUkzTUx2aG94QlI4SDQ3c3RPZFlJVlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsEDMA0G
CSqGSIb3DQEBCwUAA4IBAQBSd/UMTYnRXei5l5HdNvEZ9+LFhWOgoHLWUWA0SdCt
Q47cRbPuzsNtjDUNwC5S+RVUH+8oK/VS4z2xsueCDwxgGEXXzGhUeqROarBs7XiF
SdaKOQg+HVKCv40ZDxkgcP0/9ZKZkdA3b3hw+VEJvKvVRDz8/6o7STCtOwWV9hxd
b+kYks5J4U+x/s24usyMcFpy7Sag7fHaH0QoP7pI/vqZ7elheubLI9LloXg7OCAQ
TF3LvDWNT/x669Fq2jL99oTtLlCYkdNA99IECjI8KCPf9vpAZy9en+UBd6Hz9M6P
6pYdeOEtkIX5hp/sl+wTGs9rEYRt0Mw0sDdvK5Q7waUD
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:19 2024 by rpki-client on console-fra.rpki-client.org