Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/FUszYbsk9JVlfom2jXHJvAobIQg.roa
File: FUszYbsk9JVlfom2jXHJvAobIQg.roa (raw, json)
Hash identifier: LVMJm0OBSot3DWJkdL9ywx3008tbL+hTmzD/uwzXKDI=
Subject key identifier: 15:4B:33:61:BB:24:F4:95:65:7E:89:B6:8D:71:C9:BC:0A:1B:21:08
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 018BEE8A954BB19A4CDA3B09A0E6372F57D9
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/FUszYbsk9JVlfom2jXHJvAobIQg.roa
Signing time: Mon 20 Nov 2023 21:02:21 +0000
ROA not before: Mon 20 Nov 2023 21:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 146.19.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:8a:95:4b:b1:9a:4c:da:3b:09:a0:e6:37:2f:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Nov 20 21:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=154b3361bb24f495657e89b68d71c9bc0a1b2108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:93:b8:5b:41:ee:05:55:e1:87:37:5b:f7:
65:16:e8:bc:d1:68:bb:84:a5:ae:bc:80:d9:78:db:
98:5f:b8:d3:19:b3:35:97:e3:0c:44:ca:57:35:25:
c4:aa:e2:d0:f3:8a:f5:ab:45:2d:d3:7d:ec:df:9c:
3d:4b:f5:de:d1:73:b6:4f:e3:5e:51:8f:01:e4:46:
54:a3:f1:82:e7:6b:f1:a5:73:df:ad:8c:92:6a:f6:
da:a7:b1:6c:79:ab:cb:07:50:90:c9:8e:18:4d:54:
b9:3c:5b:e3:19:8d:cd:18:46:e0:2b:72:8a:f1:3e:
b0:5b:44:3d:1e:36:e1:0f:f0:23:a2:75:37:bd:73:
bc:bd:5b:ec:a9:7f:64:38:63:43:cc:1b:5d:b7:02:
1b:67:40:3d:58:54:b0:48:62:71:bb:19:47:73:07:
a6:07:48:a0:04:e6:df:0e:4f:88:bf:be:af:3b:54:
6a:ba:a1:28:45:e6:4e:1b:69:55:5d:fa:24:ee:da:
45:ae:24:77:48:dd:7c:77:2e:1e:0d:35:37:44:fd:
a5:2d:2e:5c:d0:25:38:c1:70:08:a9:fd:11:9d:cd:
c0:c5:dc:74:d0:96:8d:02:3f:35:e5:6a:82:ae:c7:
e2:89:09:c4:01:b8:f3:92:3d:0d:8d:ef:56:86:41:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:33:61:BB:24:F4:95:65:7E:89:B6:8D:71:C9:BC:0A:1B:21:08
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/FUszYbsk9JVlfom2jXHJvAobIQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e5:ef:33:da:92:06:bd:42:a3:b3:c7:0e:5b:1a:31:ea:a6:
9d:87:69:89:d3:4d:9e:79:57:4e:b4:3d:bc:a1:7f:9b:0e:ca:
44:93:f4:07:e4:23:d7:85:9e:95:d6:45:c5:a5:18:cd:af:7b:
d4:af:48:1c:b8:75:94:58:a0:37:36:00:98:41:7a:ef:00:86:
6a:1f:0a:6d:a9:02:1b:90:bc:51:58:eb:4b:bc:be:53:4d:80:
f0:36:ad:8e:e4:45:e0:9c:d2:40:3c:93:03:c2:6c:6f:00:75:
39:c7:cb:88:6a:cb:90:77:34:04:34:6c:95:23:f7:4c:16:4a:
ba:5b:43:51:ca:5d:19:26:4d:d0:b9:db:a7:26:2b:1c:3c:61:
86:f1:fb:a9:9d:10:dc:ac:88:04:40:82:41:94:e2:12:23:01:
6e:d9:3d:85:ff:76:e2:b7:d4:73:b9:48:eb:1f:ff:d3:61:1c:
47:a2:37:3f:71:e1:a3:5a:99:3b:9e:1e:d3:ac:97:1f:0d:c8:
f5:66:c9:e1:b3:7a:e1:90:2d:c5:5f:34:d9:4c:d6:7a:f2:6a:
5a:9f:e0:9f:ba:09:ea:d0:95:48:f4:68:ce:fc:b7:d7:76:bd:
1d:7e:f2:e0:ab:ff:c3:d6:e5:76:0d:5b:f8:58:fa:ce:b4:7f:
34:df:d3:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvuipVLsZpM2jsJoOY3L1fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWEwNWM2ZjhmOWJmZDcwZTNkNDFmZTA1YmFmYzUwZDEy
NTNiZjUwHhcNMjMxMTIwMjEwMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTRiMzM2MWJiMjRmNDk1NjU3ZTg5YjY4ZDcxYzliYzBhMWIyMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyTuFtB7gVV4Yc3W/dlFui80Wi7
hKWuvIDZeNuYX7jTGbM1l+MMRMpXNSXEquLQ84r1q0Ut033s35w9S/Xe0XO2T+Ne
UY8B5EZUo/GC52vxpXPfrYySavbap7FseavLB1CQyY4YTVS5PFvjGY3NGEbgK3KK
8T6wW0Q9HjbhD/AjonU3vXO8vVvsqX9kOGNDzBtdtwIbZ0A9WFSwSGJxuxlHcwem
B0igBObfDk+Iv76vO1RquqEoReZOG2lVXfok7tpFriR3SN18dy4eDTU3RP2lLS5c
0CU4wXAIqf0Rnc3Axdx00JaNAj815WqCrsfiiQnEAbjzkj0Nje9WhkGjNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVLM2G7JPSVZX6Jto1xybwKGyEIMB8GA1UdIwQY
MBaAFGuqBcb4+b/XDj1B/gW6/FDRJTv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYt
ZjMyMTFkOTE1MjBkLzEvRlVzellic2s5SlZsZm9tMmpYSEp2QW9iSVFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYtZjMyMTFkOTE1MjBk
LzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPMMA0G
CSqGSIb3DQEBCwUAA4IBAQBn5e8z2pIGvUKjs8cOWxox6qadh2mJ002eeVdOtD28
oX+bDspEk/QH5CPXhZ6V1kXFpRjNr3vUr0gcuHWUWKA3NgCYQXrvAIZqHwptqQIb
kLxRWOtLvL5TTYDwNq2O5EXgnNJAPJMDwmxvAHU5x8uIasuQdzQENGyVI/dMFkq6
W0NRyl0ZJk3QudunJiscPGGG8fupnRDcrIgEQIJBlOISIwFu2T2F/3bit9RzuUjr
H//TYRxHojc/ceGjWpk7nh7TrJcfDcj1Zsnhs3rhkC3FXzTZTNZ68mpan+Cfugnq
0JVI9GjO/LfXdr0dfvLgq//D1uV2DVv4WPrOtH8039OK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:18 2024 by rpki-client on console-fra.rpki-client.org