Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/Fpiol9U5DQn1jGaALyzOUTlV3QI.roa
File: Fpiol9U5DQn1jGaALyzOUTlV3QI.roa (raw, json)
Hash identifier: qYAeKs7LNN1Ake32D5qvXmMUw2+SrfBxV8gktGZx5SM=
Subject key identifier: 16:98:A8:97:D5:39:0D:09:F5:8C:66:80:2F:2C:CE:51:39:55:DD:02
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01856F0B73DFA4E091C90B59FA49EB0C14BF
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/Fpiol9U5DQn1jGaALyzOUTlV3QI.roa
Signing time: Sun 01 Jan 2023 20:34:59 +0000
ROA not before: Sun 01 Jan 2023 20:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57811
IP address blocks: 188.64.85.0/24 maxlen: 24
188.64.80.0/23 maxlen: 23
188.64.82.0/24 maxlen: 24
188.64.83.0/24 maxlen: 24
188.64.84.0/24 maxlen: 24
188.64.86.0/24 maxlen: 24
188.64.87.0/24 maxlen: 24
185.73.211.0/24 maxlen: 24
2a00:8dc0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:73:df:a4:e0:91:c9:0b:59:fa:49:eb:0c:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 1 20:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1698a897d5390d09f58c66802f2cce513955dd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:93:1e:54:bb:62:f6:e8:99:fa:c8:c4:2d:
a6:75:f0:9c:2e:96:2a:89:cf:61:2b:1e:8a:8c:d7:
fc:fb:d5:d1:3b:16:0f:7f:0d:16:76:07:86:2e:4f:
3e:1e:c3:c3:f7:10:46:bd:c8:fa:22:36:55:d6:02:
41:d3:d9:8f:54:65:2e:d1:ec:b5:18:55:45:90:2e:
be:88:41:ad:bb:37:40:14:04:96:cd:9c:9e:e5:13:
be:4d:56:8a:5d:d9:59:84:e6:1a:67:80:1c:09:a7:
97:24:92:7a:32:72:18:c4:77:f3:3f:7f:27:f7:cc:
68:26:63:5b:3a:b9:ce:cb:26:17:83:a4:28:d1:88:
45:24:5e:3a:55:65:1a:a8:84:56:cf:70:87:be:14:
c7:96:e0:88:cb:81:58:02:23:6b:8e:fa:bd:2b:e6:
02:a6:ad:25:7d:cf:99:8b:9c:69:36:ef:1d:1f:d7:
47:9e:37:7b:af:63:26:53:12:bd:00:e3:54:18:b3:
71:9c:3a:b6:62:30:2a:95:1f:b2:d8:32:b7:ea:fe:
40:b9:81:c4:8c:8a:e3:c3:f7:d9:65:17:db:16:e6:
88:d3:9d:cf:48:24:4a:96:8f:aa:b2:11:e1:21:d6:
24:51:80:d1:75:a3:72:b3:f4:a3:ad:11:b7:3a:19:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:A8:97:D5:39:0D:09:F5:8C:66:80:2F:2C:CE:51:39:55:DD:02
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/Fpiol9U5DQn1jGaALyzOUTlV3QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.211.0/24
188.64.80.0/21
IPv6:
2a00:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
01:a2:93:4a:2c:68:d2:e3:e1:64:57:d4:aa:be:5d:a8:5f:96:
9f:f2:ac:8a:71:08:d7:ff:cc:9c:49:d9:dc:69:22:50:27:65:
98:4c:0a:1a:d0:32:41:bf:42:e6:3a:d6:7c:67:0b:1a:0c:c7:
c8:d9:26:da:cd:7b:47:91:6a:02:ad:5b:d6:70:b8:62:9a:52:
28:fe:9c:da:56:6c:cf:aa:e5:a5:00:55:c0:f5:a8:a2:6c:90:
db:0f:98:ec:d5:70:5d:55:09:49:fe:c8:b8:48:7e:a5:2a:68:
9c:6e:e1:ce:65:e9:81:bd:b6:2e:3d:82:31:d9:8d:b8:4a:14:
b2:29:54:e8:f4:2b:49:41:f8:06:52:59:79:96:18:f0:9c:e4:
42:c3:79:a7:15:d5:b9:57:b4:4b:30:45:df:4f:70:18:0f:85:
94:4a:9a:5a:40:82:e7:ca:b6:41:28:52:e1:db:e0:23:39:05:
6c:80:66:e9:35:7b:23:90:24:01:f7:3f:17:02:0d:07:a3:45:
dd:6d:0b:31:48:21:d6:49:d8:56:19:e7:8c:94:4f:ef:ba:cf:
ee:e2:1f:35:ee:81:30:6b:b7:c6:2c:74:0e:c6:ce:a4:0e:f9:
ef:bd:b2:dc:a6:2e:1d:73:48:c0:48:bd:b4:51:a0:e7:1b:cb:
e0:b5:a4:1b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvC3PfpOCRyQtZ+knrDBS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjMwMTAxMjAzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjk4YTg5N2Q1MzkwZDA5ZjU4YzY2ODAyZjJjY2U1MTM5NTVkZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUmTHlS7YvbomfrIxC2mdfCcLpYq
ic9hKx6KjNf8+9XROxYPfw0WdgeGLk8+HsPD9xBGvcj6IjZV1gJB09mPVGUu0ey1
GFVFkC6+iEGtuzdAFASWzZye5RO+TVaKXdlZhOYaZ4AcCaeXJJJ6MnIYxHfzP38n
98xoJmNbOrnOyyYXg6Qo0YhFJF46VWUaqIRWz3CHvhTHluCIy4FYAiNrjvq9K+YC
pq0lfc+Zi5xpNu8dH9dHnjd7r2MmUxK9AONUGLNxnDq2YjAqlR+y2DK36v5AuYHE
jIrjw/fZZRfbFuaI053PSCRKlo+qshHhIdYkUYDRdaNys/SjrRG3Ohk9YQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBaYqJfVOQ0J9YxmgC8szlE5Vd0CMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvRnBpb2w5VTVEUW4xakdhQUx5ek9VVGxWM1FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuUnTAwQD
vEBQMA0EAgACMAcDBQAqAI3AMA0GCSqGSIb3DQEBCwUAA4IBAQABopNKLGjS4+Fk
V9Sqvl2oX5af8qyKcQjX/8ycSdncaSJQJ2WYTAoa0DJBv0LmOtZ8ZwsaDMfI2Sba
zXtHkWoCrVvWcLhimlIo/pzaVmzPquWlAFXA9aiibJDbD5js1XBdVQlJ/si4SH6l
KmicbuHOZemBvbYuPYIx2Y24ShSyKVTo9CtJQfgGUll5lhjwnORCw3mnFdW5V7RL
MEXfT3AYD4WUSppaQILnyrZBKFLh2+AjOQVsgGbpNXsjkCQB9z8XAg0Ho0XdbQsx
SCHWSdhWGeeMlE/vus/u4h817oEwa7fGLHQOxs6kDvnvvbLcpi4dc0jASL20UaDn
G8vgtaQb
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:33 2024 by rpki-client on console-fra.rpki-client.org