Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/RRSGz7dD-_q4wW8dynqSSFNOR_M.roa
File: RRSGz7dD-_q4wW8dynqSSFNOR_M.roa (raw, json)
Hash identifier: XhEHGWtDuwUn4zRnSziL7guM32dY4iauoSkuMrCV5TI=
Subject key identifier: 45:14:86:CF:B7:43:FB:FA:B8:C1:6F:1D:CA:7A:92:48:53:4E:47:F3
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018571D7D8A0ACF033EACCA7DE72274C8AB6
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/RRSGz7dD-_q4wW8dynqSSFNOR_M.roa
Signing time: Mon 02 Jan 2023 09:37:29 +0000
ROA not before: Mon 02 Jan 2023 09:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8323
IP address blocks: 193.193.64.0/19 maxlen: 19
195.150.0.0/17 maxlen: 17
195.150.128.0/18 maxlen: 18
2001:6d8::/29 maxlen: 29
2001:6df::/32 maxlen: 32
2001:6d8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d8:a0:ac:f0:33:ea:cc:a7:de:72:27:4c:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 09:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=451486cfb743fbfab8c16f1dca7a9248534e47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:46:5b:96:ea:a5:ad:1d:27:c5:27:d2:33:
9c:55:1c:b0:d8:75:5d:99:ff:fd:b3:02:b8:63:a6:
10:59:24:8e:fb:e7:c4:24:32:68:4b:62:be:be:c3:
30:f8:0b:1c:05:d5:e6:ba:72:80:d9:4a:0b:70:58:
e8:0c:55:55:d8:53:96:d4:4c:07:ec:3c:fc:3b:54:
6f:59:cb:77:36:45:a6:20:8d:9e:21:7a:25:67:d7:
ac:6d:22:9f:b1:6d:2f:01:3f:fe:e1:22:24:c7:c7:
c8:5a:03:7e:8f:81:a5:43:ea:5f:77:dc:7f:5e:0c:
4c:69:8c:da:a0:bd:3c:cd:00:12:d1:9d:11:ce:56:
b2:b5:88:7d:7b:bb:41:1d:74:e1:17:f6:d3:4e:14:
e9:85:99:d7:a9:8a:ca:71:c9:0d:37:c4:f1:7a:20:
cb:d2:d7:6a:90:d7:cf:68:49:e4:fd:49:e5:89:1b:
1d:56:fa:38:64:dd:70:d2:b7:d2:30:4e:63:d6:85:
3f:ff:85:f1:37:8e:f7:6b:69:ae:d7:7b:1d:0b:1f:
c1:9b:cc:5f:32:31:b3:a3:ef:77:95:a2:87:0b:48:
96:d0:da:c2:c8:19:fb:88:5b:ab:da:61:b0:48:b0:
2f:cd:89:c7:11:4b:68:4e:09:94:29:cd:51:81:ee:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:86:CF:B7:43:FB:FA:B8:C1:6F:1D:CA:7A:92:48:53:4E:47:F3
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/RRSGz7dD-_q4wW8dynqSSFNOR_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.64.0/19
195.150.0.0-195.150.191.255
IPv6:
2001:6d8::/29
Signature Algorithm: sha256WithRSAEncryption
74:f9:d3:6a:a0:99:ef:e7:56:cb:ba:1b:e7:37:e9:d6:87:16:
ad:15:32:20:18:8c:a3:5c:99:f8:b8:71:fd:9c:7f:4a:42:40:
bc:82:8c:29:18:f9:dc:df:34:46:8e:a9:fb:47:28:47:0a:ca:
a8:cb:2f:9e:c6:93:db:6c:3b:5d:91:e0:0d:36:26:5f:ee:d5:
66:21:d6:64:d5:18:92:21:57:61:aa:78:47:11:9a:4a:b3:d1:
21:9b:35:7a:63:6a:02:50:97:4c:49:71:8f:82:44:26:d8:7e:
8b:0e:51:11:67:fd:df:4f:a0:4c:4c:df:ce:58:6c:1b:6a:c2:
dc:ae:92:18:f3:b5:48:cb:c9:d1:68:d5:f6:6a:68:b0:9a:f9:
13:ef:32:59:9b:6c:4e:89:86:19:67:c8:39:96:c5:eb:6c:77:
24:93:60:48:ec:30:a0:f2:e1:dd:fd:1f:58:e5:c0:c4:51:47:
82:bc:fc:48:5b:0c:bd:b2:c3:de:29:1b:a6:10:55:63:58:e4:
9c:6a:94:38:fa:75:59:82:43:6c:26:5d:96:e9:6b:96:19:0b:
b0:ae:17:7d:04:6b:33:22:b9:da:70:1a:55:58:35:00:3d:ea:
e0:7e:f0:17:20:87:f5:38:83:64:71:d3:74:4b:a3:71:93:29:
cf:66:52:f5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVx19igrPAz6syn3nInTIq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjMwMTAyMDkzNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTE0ODZjZmI3NDNmYmZhYjhjMTZmMWRjYTdhOTI0ODUzNGU0N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA369GW5bqpa0dJ8Un0jOcVRyw2HVd
mf/9swK4Y6YQWSSO++fEJDJoS2K+vsMw+AscBdXmunKA2UoLcFjoDFVV2FOW1EwH
7Dz8O1RvWct3NkWmII2eIXolZ9esbSKfsW0vAT/+4SIkx8fIWgN+j4GlQ+pfd9x/
XgxMaYzaoL08zQAS0Z0RzlaytYh9e7tBHXThF/bTThTphZnXqYrKcckNN8TxeiDL
0tdqkNfPaEnk/UnliRsdVvo4ZN1w0rfSME5j1oU//4XxN473a2mu13sdCx/Bm8xf
MjGzo+93laKHC0iW0NrCyBn7iFur2mGwSLAvzYnHEUtoTgmUKc1Rge4Y9wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEUUhs+3Q/v6uMFvHcp6kkhTTkfzMB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xL1JSU0d6N2RELV9xNHdXOGR5bnFTU0ZOT1JfTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi
OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMBkEAgABMBMDBAXBwUAw
CwMDAcOWAwQGw5aAMA0EAgACMAcDBQMgAQbYMA0GCSqGSIb3DQEBCwUAA4IBAQB0
+dNqoJnv51bLuhvnN+nWhxatFTIgGIyjXJn4uHH9nH9KQkC8gowpGPnc3zRGjqn7
RyhHCsqoyy+expPbbDtdkeANNiZf7tVmIdZk1RiSIVdhqnhHEZpKs9EhmzV6Y2oC
UJdMSXGPgkQm2H6LDlERZ/3fT6BMTN/OWGwbasLcrpIY87VIy8nRaNX2amiwmvkT
7zJZm2xOiYYZZ8g5lsXrbHckk2BI7DCg8uHd/R9Y5cDEUUeCvPxIWwy9ssPeKRum
EFVjWOScapQ4+nVZgkNsJl2W6WuWGQuwrhd9BGszIrnacBpVWDUAPergfvAXIIf1
OINkcdN0S6NxkynPZlL1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-ams.rpki-client.org