Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/FVVV1uAFkgouV247NAJxQVGxXMc.roa
File: FVVV1uAFkgouV247NAJxQVGxXMc.roa (raw, json)
Hash identifier: ef4W4UcpXYAzC/tu1tBb0TwFCOTerHqtlo90fyjHC2s=
Subject key identifier: 15:55:55:D6:E0:05:92:0A:2E:57:6E:3B:34:02:71:41:51:B1:5C:C7
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 01857315E7429C3A96F744AEA268CCBDE338
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/FVVV1uAFkgouV247NAJxQVGxXMc.roa
Signing time: Mon 02 Jan 2023 15:24:53 +0000
ROA not before: Mon 02 Jan 2023 15:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197075
IP address blocks: 185.250.164.0/22 maxlen: 22
2a03:ff80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:e7:42:9c:3a:96:f7:44:ae:a2:68:cc:bd:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Jan 2 15:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155555d6e005920a2e576e3b3402714151b15cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:41:7e:4a:dd:0f:86:05:76:f4:11:99:c2:
ca:c4:75:6c:7e:63:77:75:7f:cb:07:ef:ef:b1:89:
dc:32:31:fd:fe:3d:79:ce:4c:37:88:82:16:67:20:
7d:e5:76:b4:20:4a:78:09:47:3d:8f:10:95:b8:40:
12:69:02:b1:60:77:1a:ba:7e:a4:cc:d1:b0:3b:74:
e7:29:fa:de:83:e7:30:1e:d2:fc:4b:60:37:a2:25:
e5:9e:0d:c5:75:a0:bc:e4:b7:54:fc:fa:5e:f9:ca:
de:3f:dd:f5:ff:c3:62:67:bd:b1:84:4d:dc:67:22:
06:f1:f3:f4:d8:ae:04:58:8c:d9:c1:43:37:7b:40:
e7:2b:16:30:9f:3e:7f:49:f3:70:e0:9f:b7:0d:e2:
5a:29:16:72:ef:83:5a:52:81:a2:57:cf:ca:f9:5a:
b8:8e:67:bc:6f:84:45:89:d5:66:67:e0:da:07:12:
d3:ac:2e:1e:ed:c2:63:32:fa:d9:5d:9a:94:ab:0d:
ba:1c:5a:a5:cd:78:2f:4a:f0:6c:46:fe:c8:15:a4:
dc:3c:a4:98:e5:9a:11:b0:98:dc:f4:f5:c2:88:77:
af:13:fd:e3:fc:f2:27:d6:15:b6:1f:da:8a:64:32:
c7:06:f5:fa:ea:fb:41:69:27:ce:95:eb:2c:0d:27:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:55:D6:E0:05:92:0A:2E:57:6E:3B:34:02:71:41:51:B1:5C:C7
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/FVVV1uAFkgouV247NAJxQVGxXMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.164.0/22
IPv6:
2a03:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
68:a4:2b:fa:c7:29:32:c6:94:7a:70:9d:09:8a:ee:e3:d4:83:
a7:57:5a:0b:91:b3:be:0a:63:fb:36:85:0f:5b:5c:e1:3e:5d:
00:e5:b8:02:2d:a5:11:54:f4:40:84:af:2e:09:60:2b:a1:9c:
95:56:95:42:f6:04:ee:51:d6:59:f9:06:9f:40:98:ec:14:68:
be:38:a8:12:98:d0:8a:6a:7f:d8:ef:4f:2d:4d:b8:6b:3b:b0:
e4:1f:e8:27:26:59:74:ad:a4:40:6d:8c:50:44:93:97:86:53:
80:c4:5e:67:59:c1:05:5a:5f:57:c4:b9:ad:57:ff:a0:82:b6:
76:12:cb:f1:1f:cd:e2:b7:38:e3:01:77:b0:06:6f:1a:5c:eb:
b9:61:b7:55:dc:c0:13:5d:1d:c9:ea:45:67:71:69:b8:94:fa:
3d:13:fc:54:33:df:5d:5c:31:65:18:96:0e:ec:2f:8b:18:61:
6f:f3:f5:02:7a:26:ae:92:5e:ed:86:ed:b1:41:46:d4:ba:97:
7b:02:d5:18:e7:75:62:99:79:54:eb:e4:83:27:ef:8d:4b:24:
76:85:a8:1c:a3:a2:6a:5a:71:f1:2d:d8:80:fa:b7:1f:4a:7c:
07:4d:41:83:ee:58:30:a5:62:ce:c9:2e:51:c2:fa:8e:17:f0:
8c:e5:d5:8c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVzFedCnDqW90SuomjMveM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2
MzY0YTAwHhcNMjMwMTAyMTUyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTU1NTVkNmUwMDU5MjBhMmU1NzZlM2IzNDAyNzE0MTUxYjE1Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZBBfkrdD4YFdvQRmcLKxHVsfmN3
dX/LB+/vsYncMjH9/j15zkw3iIIWZyB95Xa0IEp4CUc9jxCVuEASaQKxYHcaun6k
zNGwO3TnKfreg+cwHtL8S2A3oiXlng3FdaC85LdU/Ppe+creP931/8NiZ72xhE3c
ZyIG8fP02K4EWIzZwUM3e0DnKxYwnz5/SfNw4J+3DeJaKRZy74NaUoGiV8/K+Vq4
jme8b4RFidVmZ+DaBxLTrC4e7cJjMvrZXZqUqw26HFqlzXgvSvBsRv7IFaTcPKSY
5ZoRsJjc9PXCiHevE/3j/PIn1hW2H9qKZDLHBvX66vtBaSfOlessDSescQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBVVVdbgBZIKLlduOzQCcUFRsVzHMB8GA1UdIwQY
MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt
YWNlY2FkNTNjODE1LzEvRlZWVjF1QUZrZ291VjI0N05BSnhRVkd4WE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1
LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufqkMA0E
AgACMAcDBQMqA/+AMA0GCSqGSIb3DQEBCwUAA4IBAQBopCv6xykyxpR6cJ0Jiu7j
1IOnV1oLkbO+CmP7NoUPW1zhPl0A5bgCLaURVPRAhK8uCWAroZyVVpVC9gTuUdZZ
+QafQJjsFGi+OKgSmNCKan/Y708tTbhrO7DkH+gnJll0raRAbYxQRJOXhlOAxF5n
WcEFWl9XxLmtV/+ggrZ2EsvxH83itzjjAXewBm8aXOu5YbdV3MATXR3J6kVncWm4
lPo9E/xUM99dXDFlGJYO7C+LGGFv8/UCeiaukl7thu2xQUbUupd7AtUY53VimXlU
6+SDJ++NSyR2hagco6JqWnHxLdiA+rcfSnwHTUGD7lgwpWLOyS5RwvqOF/CM5dWM
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:00 2024 by rpki-client on console-fra.rpki-client.org