Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/F3js8gZwbjKhey6kF0Xxh93POgw.roa
File: F3js8gZwbjKhey6kF0Xxh93POgw.roa (raw, json)
Hash identifier: lA9Y3Z+sdjofcfh+fZw0wpqqufhfRK2fHwP4eoAOrRY=
Subject key identifier: 17:78:EC:F2:06:70:6E:32:A1:7B:2E:A4:17:45:F1:87:DD:CF:3A:0C
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01856DCACFB87B6C018F2B761F8CBEBED9B8
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/F3js8gZwbjKhey6kF0Xxh93POgw.roa
Signing time: Sun 01 Jan 2023 14:44:45 +0000
ROA not before: Sun 01 Jan 2023 14:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196957
IP address blocks: 193.107.172.0/22 maxlen: 22
91.234.40.0/22 maxlen: 22
2001:67c:13b8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:cf:b8:7b:6c:01:8f:2b:76:1f:8c:be:be:d9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 14:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1778ecf206706e32a17b2ea41745f187ddcf3a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:80:30:6c:50:c7:30:9c:bd:c6:b9:e1:28:
86:83:7e:89:e3:59:7c:77:a9:29:40:b8:1b:c1:48:
c7:b6:1a:b5:9a:ad:3a:72:e5:d0:c7:72:a1:c8:1e:
f3:62:18:b2:75:cc:4e:54:a5:96:43:72:a1:a4:6f:
1c:55:7a:9d:8d:3b:3b:a0:d9:91:34:66:9b:42:79:
61:28:40:be:2a:db:3f:48:4f:46:9d:d2:49:d2:07:
2f:ba:60:76:24:f0:df:00:a5:6a:45:f0:7a:f3:0e:
88:94:d7:10:00:3b:86:df:8b:0f:fb:e9:e8:b4:36:
6c:54:8f:e2:3e:c5:0a:d9:45:c1:20:73:6d:b3:4e:
ae:e3:08:4e:27:0b:d9:f4:3e:77:d9:07:a9:cc:fe:
93:e8:0d:e4:02:f4:ec:8d:ce:9d:6b:19:a8:3c:72:
42:7a:d1:f2:f6:ca:fa:a2:cd:9a:de:11:df:35:f1:
88:9a:5a:f9:1d:6b:80:cc:7e:e4:c2:fe:0c:38:f8:
ad:9a:08:b3:ce:d5:c7:8d:04:55:38:58:5c:d6:ca:
ce:5b:ec:3b:27:0e:cf:c2:42:27:8d:47:78:a1:f7:
0f:03:9b:fa:9f:6f:2f:12:cc:b5:bc:6a:f7:b3:e6:
7c:a2:bc:1a:05:7e:c8:27:8b:ac:49:63:d7:45:98:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:EC:F2:06:70:6E:32:A1:7B:2E:A4:17:45:F1:87:DD:CF:3A:0C
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/F3js8gZwbjKhey6kF0Xxh93POgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.40.0/22
193.107.172.0/22
IPv6:
2001:67c:13b8::/48
Signature Algorithm: sha256WithRSAEncryption
80:86:09:40:37:80:d5:ba:1b:ad:76:fa:a2:3d:ec:fa:d5:e5:
5e:bb:2b:8c:a4:bc:83:f7:4d:49:94:78:3a:8e:bf:dc:60:58:
df:ad:1b:8b:1d:89:bd:d7:b1:c1:e4:3d:33:74:38:69:9c:75:
a8:90:f5:12:75:ca:93:50:78:d3:4a:ec:c9:1b:e1:ed:eb:39:
fd:66:a6:2a:86:2a:aa:7d:22:e0:f9:7e:7b:0a:17:f0:aa:80:
69:95:44:f1:35:3d:e3:58:0e:26:44:40:1a:dc:10:2f:c5:db:
68:58:43:55:e4:55:c0:2a:5b:fe:eb:e2:7e:89:9e:d0:37:57:
b3:94:d4:3b:fc:16:4b:9f:48:1a:48:d7:e7:1a:6e:91:5a:0b:
28:02:f3:55:86:40:77:34:4c:08:a2:df:40:92:c2:f0:0e:46:
b4:c5:e9:26:7f:ba:4f:20:c5:75:81:ae:bb:3f:ec:7b:49:10:
65:4f:25:cf:9a:26:f4:26:ec:66:da:61:8e:5f:4a:8c:85:0d:
ff:57:1d:3a:38:c3:c1:f0:b3:27:77:fe:98:d7:1c:ac:c1:a6:
8e:9e:07:1d:f4:44:75:78:6d:fc:55:53:5e:f3:78:ef:ee:bb:
9b:d2:0f:bf:fc:8b:9c:a8:63:8b:1c:2d:c4:ac:38:63:c9:d9:
0e:5d:a8:6c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVtys+4e2wBjyt2H4y+vtm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjMwMTAxMTQ0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzc4ZWNmMjA2NzA2ZTMyYTE3YjJlYTQxNzQ1ZjE4N2RkY2YzYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFWAMGxQxzCcvca54SiGg36J41l8
d6kpQLgbwUjHthq1mq06cuXQx3KhyB7zYhiydcxOVKWWQ3KhpG8cVXqdjTs7oNmR
NGabQnlhKEC+Kts/SE9GndJJ0gcvumB2JPDfAKVqRfB68w6IlNcQADuG34sP++no
tDZsVI/iPsUK2UXBIHNts06u4whOJwvZ9D532QepzP6T6A3kAvTsjc6daxmoPHJC
etHy9sr6os2a3hHfNfGImlr5HWuAzH7kwv4MOPitmgizztXHjQRVOFhc1srOW+w7
Jw7PwkInjUd4ofcPA5v6n28vEsy1vGr3s+Z8orwaBX7IJ4usSWPXRZh1/wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBd47PIGcG4yoXsupBdF8YfdzzoMMB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvRjNqczhnWndiaktoZXk2a0YwWHhoOTNQT2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCW+ooAwQC
wWusMA8EAgACMAkDBwAgAQZ8E7gwDQYJKoZIhvcNAQELBQADggEBAICGCUA3gNW6
G612+qI97PrV5V67K4ykvIP3TUmUeDqOv9xgWN+tG4sdib3XscHkPTN0OGmcdaiQ
9RJ1ypNQeNNK7Mkb4e3rOf1mpiqGKqp9IuD5fnsKF/CqgGmVRPE1PeNYDiZEQBrc
EC/F22hYQ1XkVcAqW/7r4n6JntA3V7OU1Dv8FkufSBpI1+cabpFaCygC81WGQHc0
TAii30CSwvAORrTF6SZ/uk8gxXWBrrs/7HtJEGVPJc+aJvQm7GbaYY5fSoyFDf9X
HTo4w8Hwsyd3/pjXHKzBpo6eBx30RHV4bfxVU17zeO/uu5vSD7/8i5yoY4scLcSs
OGPJ2Q5dqGw=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:17 2024 by rpki-client on console-ams.rpki-client.org