Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/fvkX_Z1LKFvy_coyKc5opR97xbw.roa
File: fvkX_Z1LKFvy_coyKc5opR97xbw.roa (raw, json)
Hash identifier: R28xZ2nDC+pxdxEADQYKgPgucjSL5OCklTkPorUF+cQ=
Subject key identifier: 7E:F9:17:FD:9D:4B:28:5B:F2:FD:CA:32:29:CE:68:A5:1F:7B:C5:BC
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 01856D789F465E6A0B9A7191C98B54145C0B
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/fvkX_Z1LKFvy_coyKc5opR97xbw.roa
Signing time: Sun 01 Jan 2023 13:14:59 +0000
ROA not before: Sun 01 Jan 2023 13:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42183
IP address blocks: 185.82.96.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:9f:46:5e:6a:0b:9a:71:91:c9:8b:54:14:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Jan 1 13:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ef917fd9d4b285bf2fdca3229ce68a51f7bc5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:a9:77:a2:98:8d:c1:c6:2b:ca:dd:a5:ec:
47:77:f3:d5:13:35:60:a3:ea:b6:a8:57:cc:b8:39:
4b:4d:45:53:42:12:54:93:45:d5:e1:eb:75:53:c9:
19:66:17:62:66:f8:b6:ed:aa:d5:ba:9c:1c:df:b0:
d7:10:99:ad:ca:d7:22:04:3b:4e:ae:c7:24:27:ad:
36:bc:49:eb:7a:56:cb:5f:12:8f:7a:e4:d4:13:43:
a0:2a:56:a2:8e:4a:ee:e7:e8:53:c8:9a:e9:c0:ec:
0b:28:47:4f:2c:53:78:f3:64:38:c8:c0:88:57:bc:
21:69:2c:ad:4a:5e:43:a7:f7:45:ad:3a:ee:f2:ff:
64:4d:5e:23:a7:9d:d5:62:48:46:ea:b5:77:23:ca:
10:4f:25:68:99:40:0b:3c:70:22:62:65:17:b9:bd:
c6:c5:cc:ec:a1:32:b1:9e:79:40:96:9f:d8:8b:f8:
8d:c8:0a:b8:78:07:1d:ea:b2:96:46:87:a6:3d:f1:
df:f7:9b:75:f4:45:c3:a4:84:00:83:83:61:1f:00:
5b:ec:7a:20:ea:6e:90:ae:51:84:97:57:6d:6d:7d:
67:90:80:f7:ce:54:40:4e:de:8d:7c:df:5a:68:ef:
e9:70:b3:8e:e4:d0:f4:d3:65:d2:31:1a:0b:cf:9d:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:17:FD:9D:4B:28:5B:F2:FD:CA:32:29:CE:68:A5:1F:7B:C5:BC
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/fvkX_Z1LKFvy_coyKc5opR97xbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.96.0/22
Signature Algorithm: sha256WithRSAEncryption
87:53:a9:1e:93:f7:6d:2a:ee:91:1f:15:4c:69:26:a8:9b:8d:
25:ce:a6:cc:1a:6e:2e:64:58:62:5e:23:0f:10:3e:72:b4:dc:
b2:08:64:1c:03:42:a8:b0:b0:4e:c5:ae:2b:a8:6d:d4:89:94:
95:c4:a1:c7:2f:ec:c5:76:24:52:ef:0e:9e:a4:05:aa:e5:bc:
e2:50:7c:c4:a2:56:05:07:9a:8c:cd:92:16:52:28:dc:8f:8a:
6c:4c:69:eb:84:83:a3:c6:d4:a5:cf:7f:d5:5f:92:57:9b:e3:
c2:34:84:53:a4:c0:c8:5a:fe:ae:fd:4d:a3:1c:73:2a:b7:9a:
33:4a:b1:89:67:d8:61:db:75:a7:4b:ef:0f:ef:77:6f:3c:7a:
f3:4c:38:7f:94:2a:d7:f5:65:06:61:ad:8e:e2:fb:17:7e:a5:
9a:84:54:cc:37:67:17:77:ff:51:b1:e6:4c:b6:40:fe:20:8a:
41:e8:2a:07:6c:4e:22:0e:bb:b6:56:66:bd:bc:4a:fd:c3:f5:
a5:02:2a:d8:84:f6:5f:5a:38:5c:da:74:eb:b7:0a:9d:b6:6f:
50:1c:cc:a7:8d:9e:4b:68:5f:95:c6:3f:b3:f0:4f:3b:2e:68:
c8:d1:d7:90:79:78:5d:b8:e8:89:dd:9b:69:44:cf:5d:40:cc:
d8:89:40:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteJ9GXmoLmnGRyYtUFFwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0
NmVhMDMwHhcNMjMwMTAxMTMxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWY5MTdmZDlkNGIyODViZjJmZGNhMzIyOWNlNjhhNTFmN2JjNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiapd6KYjcHGK8rdpexHd/PVEzVg
o+q2qFfMuDlLTUVTQhJUk0XV4et1U8kZZhdiZvi27arVupwc37DXEJmtytciBDtO
rsckJ602vEnrelbLXxKPeuTUE0OgKlaijkru5+hTyJrpwOwLKEdPLFN482Q4yMCI
V7whaSytSl5Dp/dFrTru8v9kTV4jp53VYkhG6rV3I8oQTyVomUALPHAiYmUXub3G
xczsoTKxnnlAlp/Yi/iNyAq4eAcd6rKWRoemPfHf95t19EXDpIQAg4NhHwBb7Hog
6m6QrlGEl1dtbX1nkID3zlRATt6NfN9aaO/pcLOO5ND002XSMRoLz51GbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH75F/2dSyhb8v3KMinOaKUfe8W8MB8GA1UdIwQY
MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt
ZjI3YWE5YzZlYjZiLzEvZnZrWF9aMUxLRnZ5X2NveUtjNW9wUjk3eGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi
LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJgMA0G
CSqGSIb3DQEBCwUAA4IBAQCHU6kek/dtKu6RHxVMaSaom40lzqbMGm4uZFhiXiMP
ED5ytNyyCGQcA0KosLBOxa4rqG3UiZSVxKHHL+zFdiRS7w6epAWq5bziUHzEolYF
B5qMzZIWUijcj4psTGnrhIOjxtSlz3/VX5JXm+PCNIRTpMDIWv6u/U2jHHMqt5oz
SrGJZ9hh23WnS+8P73dvPHrzTDh/lCrX9WUGYa2O4vsXfqWahFTMN2cXd/9RseZM
tkD+IIpB6CoHbE4iDru2Vma9vEr9w/WlAirYhPZfWjhc2nTrtwqdtm9QHMynjZ5L
aF+Vxj+z8E87LmjI0deQeXhduOiJ3ZtpRM9dQMzYiUA2
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:04 2024 by rpki-client on console-ams.rpki-client.org