Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/FvtqG5_WsZWD0yO2v2bhLc3eohY.roa
File: FvtqG5_WsZWD0yO2v2bhLc3eohY.roa (raw, json)
Hash identifier: O2siiCce0E2InPaka/MpRu9Vpve/VbOh6H07lkIoMh8=
Subject key identifier: 16:FB:6A:1B:9F:D6:B1:95:83:D3:23:B6:BF:66:E1:2D:CD:DE:A2:16
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 01856FF058CFF6414940137B014A4BD8C2F7
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/FvtqG5_WsZWD0yO2v2bhLc3eohY.roa
Signing time: Mon 02 Jan 2023 00:45:00 +0000
ROA not before: Mon 02 Jan 2023 00:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203501
IP address blocks: 194.113.27.0/24 maxlen: 24
194.113.26.0/24 maxlen: 24
89.37.88.0/22 maxlen: 24
45.86.116.0/22 maxlen: 24
45.87.197.0/24 maxlen: 24
45.87.196.0/24 maxlen: 24
2a02:7040:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Feb 2023 09:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:58:cf:f6:41:49:40:13:7b:01:4a:4b:d8:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 2 00:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16fb6a1b9fd6b19583d323b6bf66e12dcddea216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:e8:08:69:c6:11:75:4b:74:db:ba:bc:c6:
cb:7e:0f:94:00:d8:12:c5:74:3f:53:83:93:59:4e:
28:49:d5:4d:fa:93:4a:e0:71:65:f7:03:37:da:53:
07:89:ae:bf:2c:e6:57:7e:a2:38:50:42:1c:d3:97:
eb:c4:02:1f:a0:01:34:eb:50:ea:9d:89:76:b7:09:
9c:e8:a0:e6:75:4d:ab:b6:57:5b:3d:56:61:c6:42:
c2:e3:77:ba:6b:53:33:78:2d:d6:44:3c:d1:1a:1d:
cf:a5:f7:8f:76:ea:7b:1f:e1:d7:0c:2c:c5:21:f8:
3a:aa:d9:af:31:c5:62:f5:9d:93:ee:dc:90:20:f7:
93:2f:7e:b2:06:23:07:6e:5a:06:e9:ed:d6:93:99:
b9:7f:40:99:1a:2a:5e:8d:e6:9e:1a:87:2b:09:99:
20:81:0e:f4:f8:eb:6f:be:70:3e:b3:ef:0f:18:9d:
80:96:51:4c:f7:1e:bb:6b:90:77:dd:d5:1f:08:00:
15:96:e4:57:6d:08:3f:b1:f5:32:c8:8a:51:38:6a:
81:1c:8b:b5:a5:f1:ab:ef:7e:33:37:35:f8:94:c7:
6b:2a:8e:ae:25:94:c4:b2:7f:25:82:30:a7:26:7b:
d1:c1:ff:f7:bf:39:fb:50:ae:dc:37:ff:c1:6c:a7:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:6A:1B:9F:D6:B1:95:83:D3:23:B6:BF:66:E1:2D:CD:DE:A2:16
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/FvtqG5_WsZWD0yO2v2bhLc3eohY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.116.0/22
45.87.196.0/23
89.37.88.0/22
194.113.26.0/23
IPv6:
2a02:7040:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
36:b2:c0:db:41:bb:e0:a5:5a:10:9a:11:e1:db:82:b8:fb:92:
1f:5d:fe:29:8e:a6:c5:d4:54:9b:67:5e:a3:64:df:8e:d4:18:
46:ae:30:ea:8e:ab:2f:2c:15:be:aa:8b:ed:57:af:0c:f2:57:
30:ee:51:2b:42:97:03:ac:ba:17:40:90:c4:99:d7:3b:eb:0e:
bf:c8:84:20:c6:3f:0f:28:68:f9:41:18:df:b2:99:4c:56:38:
87:01:4e:98:10:8c:cd:f3:e7:5e:76:9c:8d:ee:f6:42:db:51:
36:e5:d9:ca:25:e3:4e:be:15:58:79:c8:2e:7b:ae:c1:39:e7:
90:b9:38:3e:ff:e6:fd:1f:83:b4:96:e0:0f:17:39:eb:24:8d:
69:79:22:e4:b4:ce:b3:6e:ac:54:0a:07:c4:59:80:0c:0f:8b:
17:60:69:2d:64:d2:f8:51:d1:be:27:7b:03:1e:09:fd:0d:98:
ce:c2:7d:06:75:32:2e:24:bc:38:fb:5a:f3:18:cb:f0:16:1c:
ac:46:51:ef:de:90:e5:26:0e:aa:75:a3:14:b4:3b:47:84:53:
d6:78:bd:9c:3a:5f:33:f6:23:eb:74:49:16:48:74:9c:0b:08:
8e:19:4d:7a:6e:2c:cc:8a:b1:4d:f5:ae:c9:4a:51:f0:5b:33:
05:09:cd:01
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYVv8FjP9kFJQBN7AUpL2ML3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3
NWY0YTYwHhcNMjMwMTAyMDA0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmZiNmExYjlmZDZiMTk1ODNkMzIzYjZiZjY2ZTEyZGNkZGVhMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5noCGnGEXVLdNu6vMbLfg+UANgS
xXQ/U4OTWU4oSdVN+pNK4HFl9wM32lMHia6/LOZXfqI4UEIc05frxAIfoAE061Dq
nYl2twmc6KDmdU2rtldbPVZhxkLC43e6a1MzeC3WRDzRGh3PpfePdup7H+HXDCzF
Ifg6qtmvMcVi9Z2T7tyQIPeTL36yBiMHbloG6e3Wk5m5f0CZGipejeaeGocrCZkg
gQ70+OtvvnA+s+8PGJ2AllFM9x67a5B33dUfCAAVluRXbQg/sfUyyIpROGqBHIu1
pfGr734zNzX4lMdrKo6uJZTEsn8lgjCnJnvRwf/3vzn7UK7cN//BbKeU5QIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFBb7ahuf1rGVg9Mjtr9m4S3N3qIWMB8GA1UdIwQY
MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt
ZjJmNDI2ZWZlMDM5LzEvRnZ0cUc1X1dzWldEMHlPMnYyYmhMYzNlb2hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5
LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQCLVZ0AwQB
LVfEAwQCWSVYAwQBwnEaMA4EAgACMAgDBgAqAnBA/zANBgkqhkiG9w0BAQsFAAOC
AQEANrLA20G74KVaEJoR4duCuPuSH13+KY6mxdRUm2deo2TfjtQYRq4w6o6rLywV
vqqL7VevDPJXMO5RK0KXA6y6F0CQxJnXO+sOv8iEIMY/Dyho+UEY37KZTFY4hwFO
mBCMzfPnXnacje72QttRNuXZyiXjTr4VWHnILnuuwTnnkLk4Pv/m/R+DtJbgDxc5
6ySNaXki5LTOs26sVAoHxFmADA+LF2BpLWTS+FHRvid7Ax4J/Q2YzsJ9BnUyLiS8
OPta8xjL8BYcrEZR796Q5SYOqnWjFLQ7R4RT1ni9nDpfM/Yj63RJFkh0nAsIjhlN
em4szIqxTfWuyUpR8FszBQnNAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:53 2024 by rpki-client on console-ams.rpki-client.org