Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FYCpqArb3bdEEbWd9dNwdfmiGic.roa
File: FYCpqArb3bdEEbWd9dNwdfmiGic.roa (raw, json)
Hash identifier: GNCDTcWjw3G6pyrjHU6nhzUsQ7pOffqWKsuue6ToVAA=
Subject key identifier: 15:80:A9:A8:0A:DB:DD:B7:44:11:B5:9D:F5:D3:70:75:F9:A2:1A:27
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01880C49E52E7F9C90C022D3ACF9AE7F0DD3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FYCpqArb3bdEEbWd9dNwdfmiGic.roa
Signing time: Thu 11 May 2023 19:29:09 +0000
ROA not before: Thu 11 May 2023 19:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:49:e5:2e:7f:9c:90:c0:22:d3:ac:f9:ae:7f:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 11 19:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1580a9a80adbddb74411b59df5d37075f9a21a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:01:ff:5d:1d:f1:b9:a4:c1:24:74:f8:c5:
b4:87:31:0d:e1:cf:a1:3f:bb:82:fc:df:15:04:20:
af:cc:3e:cf:48:9d:5e:da:cb:76:98:d5:81:6d:a3:
ab:f6:c3:07:b1:09:1e:53:f9:d3:31:4b:42:fb:bc:
f3:38:db:07:43:0b:71:56:2e:14:25:b9:55:cd:c9:
99:20:10:7f:b0:34:68:db:b3:11:5d:c6:64:05:a3:
6f:28:e0:b0:72:a5:75:42:ed:d4:e2:c2:1d:2c:31:
d1:57:aa:6b:84:c5:67:2e:26:c7:de:ff:3b:0e:26:
48:b5:20:b2:15:cb:7e:9e:8d:d7:ed:6f:6d:2c:4a:
ed:31:b1:39:66:8b:d6:32:59:33:97:e2:79:22:44:
fb:58:51:ab:96:3f:5b:a1:10:59:91:eb:7f:2d:1a:
b1:d3:57:7f:05:4d:47:89:66:44:7f:b9:6f:c5:b3:
51:6a:ce:89:03:56:2a:d2:87:51:7c:f9:b5:34:7b:
14:22:25:60:3e:4c:bc:a2:5e:91:ca:5c:6c:a8:46:
25:d4:bd:f0:41:22:79:41:72:52:46:a9:a0:c0:a2:
1e:2d:6e:11:f9:45:88:8d:4f:5c:04:b0:6b:01:13:
08:88:f5:3f:59:84:21:fe:d3:ea:d1:d8:06:44:f7:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:A9:A8:0A:DB:DD:B7:44:11:B5:9D:F5:D3:70:75:F9:A2:1A:27
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FYCpqArb3bdEEbWd9dNwdfmiGic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.122.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
a2:23:40:97:ee:bd:37:fa:e0:f5:05:ee:6f:80:d6:2d:5c:7d:
99:3b:5c:70:f9:20:f2:5a:ba:f3:1b:a3:ce:e7:d5:4a:92:0a:
5a:0f:bd:fd:64:03:c9:55:05:df:a1:77:2e:80:2a:91:64:75:
da:e6:9e:6c:38:79:44:f2:0d:7f:75:b5:df:c8:ba:4c:ef:09:
e5:97:bd:a9:25:4e:bf:17:8a:48:b7:e2:94:c1:d3:6c:1e:83:
67:bc:40:ab:e7:4b:29:e4:7c:03:52:a8:85:0f:89:3c:82:d1:
a3:af:e4:e2:18:e3:b1:9c:5b:a9:ec:61:3d:76:74:62:9f:66:
d5:b6:d6:5c:42:09:34:4c:4b:24:b8:74:d5:2e:0c:e7:f8:3b:
e1:dd:f9:ba:0e:29:77:13:f5:da:db:e2:04:9a:fc:02:61:a5:
ae:94:e9:0a:81:cd:21:fe:95:85:bf:7d:c3:a0:3f:33:70:26:
9d:77:c9:33:bf:1a:09:b9:73:f6:32:80:76:7b:6f:44:1c:df:
7a:2b:cc:88:04:03:be:97:ec:a8:d0:42:23:39:37:f0:9f:62:
c4:c9:af:9f:62:fe:ba:57:bd:71:2d:e3:80:87:6c:18:24:f0:
14:5b:09:9f:2c:4d:9f:61:37:91:a7:e0:cf:c0:de:ea:5c:a4:
cf:43:0e:c2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYgMSeUuf5yQwCLTrPmufw3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwNTExMTkyOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTgwYTlhODBhZGJkZGI3NDQxMWI1OWRmNWQzNzA3NWY5YTIxYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGIB/10d8bmkwSR0+MW0hzEN4c+h
P7uC/N8VBCCvzD7PSJ1e2st2mNWBbaOr9sMHsQkeU/nTMUtC+7zzONsHQwtxVi4U
JblVzcmZIBB/sDRo27MRXcZkBaNvKOCwcqV1Qu3U4sIdLDHRV6prhMVnLibH3v87
DiZItSCyFct+no3X7W9tLErtMbE5ZovWMlkzl+J5IkT7WFGrlj9boRBZket/LRqx
01d/BU1HiWZEf7lvxbNRas6JA1Yq0odRfPm1NHsUIiVgPky8ol6RylxsqEYl1L3w
QSJ5QXJSRqmgwKIeLW4R+UWIjU9cBLBrARMIiPU/WYQh/tPq0dgGRPcYiQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBWAqagK2923RBG1nfXTcHX5ohonMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvRllDcHFBcmIzYmRFRWJXZDlkTndkZm1pR2ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHDinoD
BAfDigAwDQYJKoZIhvcNAQELBQADggEBAKIjQJfuvTf64PUF7m+A1i1cfZk7XHD5
IPJauvMbo87n1UqSCloPvf1kA8lVBd+hdy6AKpFkddrmnmw4eUTyDX91td/Iukzv
CeWXvaklTr8Xiki34pTB02weg2e8QKvnSynkfANSqIUPiTyC0aOv5OIY47GcW6ns
YT12dGKfZtW21lxCCTRMSyS4dNUuDOf4O+Hd+boOKXcT9drb4gSa/AJhpa6U6QqB
zSH+lYW/fcOgPzNwJp13yTO/Ggm5c/YygHZ7b0Qc33orzIgEA76X7KjQQiM5N/Cf
YsTJr59i/rpXvXEt44CHbBgk8BRbCZ8sTZ9hN5Gn4M/A3upcpM9DDsI=
-----END CERTIFICATE-----
Generated at Tue Sep 12 18:07:22 2023 by rpki-client on console-fra.rpki-client.org