Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F3pKwp-rVDTr9jDvp2OG7r2h7CI.roa
File: F3pKwp-rVDTr9jDvp2OG7r2h7CI.roa (raw, json)
Hash identifier: ukYjbkgxiyJj2xrZ+KAhQfm/QB2a0Ju6k32gk4dT+4g=
Subject key identifier: 17:7A:4A:C2:9F:AB:54:34:EB:F6:30:EF:A7:63:86:EE:BD:A1:EC:22
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E898E9DC845223960DDEAA37E03A96D5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F3pKwp-rVDTr9jDvp2OG7r2h7CI.roa
Signing time: Wed 25 Jan 2023 11:03:33 +0000
ROA not before: Wed 25 Jan 2023 11:03:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8928
IP address blocks: 195.143.0.0/24 maxlen: 24
212.222.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:98:e9:dc:84:52:23:96:0d:de:aa:37:e0:3a:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:03:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=177a4ac29fab5434ebf630efa76386eebda1ec22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:04:6d:bd:3c:83:55:b6:ed:d2:ef:4c:09:
7c:47:14:9a:6e:75:b5:17:98:fb:d6:30:80:66:54:
6b:7a:91:f8:3d:b2:52:cd:0e:ca:55:8c:cc:45:96:
7e:d5:c4:ee:01:30:9e:77:1a:e1:a0:92:14:c3:d8:
ca:d8:54:cd:10:19:3c:8a:53:b5:3f:ab:8d:79:3d:
08:e8:cd:d1:88:2c:8b:68:48:65:a9:a4:46:f8:14:
35:53:f0:b0:e0:54:de:4d:53:5f:98:2f:fa:e6:b8:
be:8f:5c:5b:fe:1e:5b:84:78:8b:c9:a8:9b:d1:48:
75:c4:d0:2f:f1:77:88:fa:e6:3f:bc:3c:73:81:63:
75:9c:2a:55:c2:07:39:bf:65:cd:7e:4e:2b:db:56:
c6:31:73:ba:47:22:ff:83:69:38:d1:6f:42:78:94:
01:14:bb:c0:13:26:d8:b0:58:b6:2e:73:53:9a:d5:
00:31:52:31:df:0f:1e:32:02:05:ed:4c:6d:26:8c:
33:25:3d:c5:13:cd:07:ce:19:11:cd:b3:cf:4e:1a:
31:59:f2:56:0f:1b:c9:ea:59:6b:de:3f:b7:3c:55:
15:0a:f4:7e:a0:72:4a:05:56:56:8c:ff:6b:94:9a:
a6:82:f9:c9:72:90:6c:c6:7d:69:da:5a:22:33:8d:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:4A:C2:9F:AB:54:34:EB:F6:30:EF:A7:63:86:EE:BD:A1:EC:22
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F3pKwp-rVDTr9jDvp2OG7r2h7CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.143.0.0/24
212.222.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d0:31:97:d0:6c:83:40:52:88:e3:da:26:32:7f:2d:32:71:
59:12:76:68:09:4d:e3:a0:45:5b:3c:6a:ba:54:ee:85:f9:c8:
da:db:4f:74:85:fd:72:26:c6:6d:1c:56:40:3b:56:b3:13:6d:
84:3d:c2:0d:83:57:4e:85:d9:91:58:f1:4e:19:e3:4a:25:97:
d8:97:cc:a8:1c:1b:bb:68:47:27:20:f2:f6:c8:b7:95:cb:f9:
2b:06:1b:8e:74:74:35:ef:3e:94:fc:bd:3e:39:f0:37:00:0b:
68:68:1f:ff:07:48:45:70:ec:3b:72:aa:98:6f:69:3c:ae:3a:
f7:95:64:51:30:10:08:36:63:cb:7e:b2:1e:de:b7:4a:75:d2:
db:35:ff:7c:1b:02:28:f5:ea:d2:71:7c:e3:97:b1:93:cf:94:
3d:05:72:b1:e0:54:c6:e0:59:1e:b0:33:ea:44:61:62:7d:f6:
e6:b8:07:a0:26:87:ae:2f:d1:ca:29:40:a0:fe:07:32:85:76:
3f:37:0b:42:2f:68:20:51:f8:b7:d4:44:bd:bc:ee:e1:26:6e:
45:b1:46:54:aa:ea:ea:d2:2e:a1:1e:50:23:cf:d9:ab:f0:fd:
12:cf:99:46:6c:87:5d:c7:8b:32:7b:50:b2:e2:35:e7:a5:e7:
38:04:15:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXomOnchFIjlg3eqjfgOpbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjMwMTI1MTEwMzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzdhNGFjMjlmYWI1NDM0ZWJmNjMwZWZhNzYzODZlZWJkYTFlYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr8Ebb08g1W27dLvTAl8RxSabnW1
F5j71jCAZlRrepH4PbJSzQ7KVYzMRZZ+1cTuATCedxrhoJIUw9jK2FTNEBk8ilO1
P6uNeT0I6M3RiCyLaEhlqaRG+BQ1U/Cw4FTeTVNfmC/65ri+j1xb/h5bhHiLyaib
0Uh1xNAv8XeI+uY/vDxzgWN1nCpVwgc5v2XNfk4r21bGMXO6RyL/g2k40W9CeJQB
FLvAEybYsFi2LnNTmtUAMVIx3w8eMgIF7UxtJowzJT3FE80HzhkRzbPPThoxWfJW
DxvJ6llr3j+3PFUVCvR+oHJKBVZWjP9rlJqmgvnJcpBsxn1p2loiM40yRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBd6SsKfq1Q06/Yw76djhu69oewiMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvRjNwS3dwLXJWRFRyOWpEdnAyT0c3cjJoN0NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw48AAwQA
1N6AMA0GCSqGSIb3DQEBCwUAA4IBAQAt0DGX0GyDQFKI49omMn8tMnFZEnZoCU3j
oEVbPGq6VO6F+cja2090hf1yJsZtHFZAO1azE22EPcINg1dOhdmRWPFOGeNKJZfY
l8yoHBu7aEcnIPL2yLeVy/krBhuOdHQ17z6U/L0+OfA3AAtoaB//B0hFcOw7cqqY
b2k8rjr3lWRRMBAINmPLfrIe3rdKddLbNf98GwIo9erScXzjl7GTz5Q9BXKx4FTG
4FkesDPqRGFiffbmuAegJoeuL9HKKUCg/gcyhXY/NwtCL2ggUfi31ES9vO7hJm5F
sUZUqurq0i6hHlAjz9mr8P0Sz5lGbIddx4sye1Cy4jXnpec4BBWN
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:23 2024 by rpki-client on console-fra.rpki-client.org