Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/FBYuzNABNIISKIbWuGy0n6f73c0.roa
File: FBYuzNABNIISKIbWuGy0n6f73c0.roa (raw, json)
Hash identifier: C1qXJqPyBfyq+ZjURSAxfLc5JG62I6PWusSF08WZ8Cg=
Subject key identifier: 14:16:2E:CC:D0:01:34:82:12:28:86:D6:B8:6C:B4:9F:A7:FB:DD:CD
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 018CC493840EC3CAB2520748C07A79A6BE0B
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/FBYuzNABNIISKIbWuGy0n6f73c0.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60012
IP address blocks: 185.204.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:0e:c3:ca:b2:52:07:48:c0:7a:79:a6:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14162eccd0013482122886d6b86cb49fa7fbddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:04:aa:e6:6e:f5:da:95:11:49:e8:bf:53:
bf:a8:cb:0d:d4:70:13:ad:26:24:4e:61:8b:f2:62:
2c:29:93:a8:99:77:1c:96:2d:49:90:ef:83:8a:e1:
98:cb:5d:ac:db:c2:8f:d3:ca:11:8a:e8:2f:a8:5b:
f0:95:d1:ad:7f:3e:44:50:70:13:9f:4c:d7:aa:5e:
2e:81:00:f9:cc:cc:0e:a7:ee:ba:17:26:77:43:89:
88:5c:9f:01:75:7f:db:56:35:08:1f:ed:0e:44:47:
5c:a0:ef:44:c1:83:cd:cc:bc:ff:9d:04:c4:55:93:
d0:29:73:b6:66:7e:51:06:0b:3f:f8:d6:2f:ad:42:
30:cd:0d:d0:7b:4e:b4:ce:d8:c2:35:78:2a:4f:77:
f4:3f:87:e3:ad:f7:b1:4c:ae:0e:8c:8e:be:0e:f8:
7d:0c:a7:a8:f6:b1:6c:7f:9b:6f:65:d4:55:f5:c5:
ed:1e:d0:70:a5:9b:2e:d9:80:96:99:ba:fa:cb:51:
51:45:71:af:6d:62:35:31:db:70:9c:26:d3:65:c0:
1e:2d:b2:b0:54:88:f3:e5:4e:b2:d5:8f:f0:a6:f5:
4a:0d:34:87:1d:0d:bc:0d:a2:3d:81:66:45:34:87:
1a:de:dd:2a:8c:63:72:f5:be:0b:07:a8:dc:32:93:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:2E:CC:D0:01:34:82:12:28:86:D6:B8:6C:B4:9F:A7:FB:DD:CD
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/FBYuzNABNIISKIbWuGy0n6f73c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.44.0/22
Signature Algorithm: sha256WithRSAEncryption
46:63:5d:36:af:64:e3:a5:44:a5:c8:0e:6b:c6:e2:97:21:f8:
13:59:57:fa:a5:3f:68:3c:e5:59:d8:50:25:ea:93:62:b1:07:
58:ec:fa:9a:ab:c7:57:20:76:2f:55:df:be:cd:3b:2d:c1:ce:
b0:ec:44:bb:21:98:a9:c2:2c:13:33:2c:9d:30:49:9e:6b:98:
c1:40:41:c7:55:38:e8:9c:ca:44:d8:0a:4e:b6:3d:bf:bf:0d:
d3:f8:9d:c5:f7:fa:56:e3:7d:95:5d:bf:8e:b6:d2:26:a4:51:
a0:15:8b:11:c9:5f:f0:cc:d0:6b:1b:c5:4f:d4:25:64:23:a1:
bb:6c:25:e8:7f:21:4d:51:1a:f5:b7:33:34:8b:37:35:91:37:
48:f5:60:4a:4e:df:7f:a7:3e:b9:13:79:19:1f:9b:74:0b:27:
7e:4d:79:8a:9b:52:f5:75:fe:85:46:d0:9b:fe:d0:8d:dc:8a:
ea:50:68:40:0d:35:ed:a3:c5:ca:eb:55:1d:2a:6f:d9:e1:b4:
83:3e:f4:50:64:7f:66:60:97:37:0d:19:46:d1:27:5a:96:dc:
57:dd:e5:82:1f:83:c4:96:fc:c9:fb:a7:f8:ad:d2:4f:04:b0:
f2:cd:bb:b1:c3:3d:0f:0e:94:e9:34:f0:1f:f5:fc:f1:5f:ee:
99:5e:97:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4QOw8qyUgdIwHp5pr4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYTU5YjA5NjBlYTY1ZDZiOTIzOTNlZTAzNDdhMWE4MzJm
OWI5ODQwHhcNMjQwMTAxMTAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE2MmVjY2QwMDEzNDgyMTIyODg2ZDZiODZjYjQ5ZmE3ZmJkZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdQEquZu9dqVEUnov1O/qMsN1HAT
rSYkTmGL8mIsKZOomXccli1JkO+DiuGYy12s28KP08oRiugvqFvwldGtfz5EUHAT
n0zXql4ugQD5zMwOp+66FyZ3Q4mIXJ8BdX/bVjUIH+0OREdcoO9EwYPNzLz/nQTE
VZPQKXO2Zn5RBgs/+NYvrUIwzQ3Qe060ztjCNXgqT3f0P4fjrfexTK4OjI6+Dvh9
DKeo9rFsf5tvZdRV9cXtHtBwpZsu2YCWmbr6y1FRRXGvbWI1MdtwnCbTZcAeLbKw
VIjz5U6y1Y/wpvVKDTSHHQ28DaI9gWZFNIca3t0qjGNy9b4LB6jcMpPZDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQWLszQATSCEiiG1rhstJ+n+93NMB8GA1UdIwQY
MBaAFEGlmwlg6mXWuSOT7gNHoagy+bmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt
YmZkZWMwYzExMmUzLzEvRkJZdXpOQUJOSUlTS0liV3VHeTBuNmY3M2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz
LzEvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucwsMA0G
CSqGSIb3DQEBCwUAA4IBAQBGY102r2TjpUSlyA5rxuKXIfgTWVf6pT9oPOVZ2FAl
6pNisQdY7Pqaq8dXIHYvVd++zTstwc6w7ES7IZipwiwTMyydMEmea5jBQEHHVTjo
nMpE2ApOtj2/vw3T+J3F9/pW432VXb+OttImpFGgFYsRyV/wzNBrG8VP1CVkI6G7
bCXofyFNURr1tzM0izc1kTdI9WBKTt9/pz65E3kZH5t0Cyd+TXmKm1L1df6FRtCb
/tCN3IrqUGhADTXto8XK61UdKm/Z4bSDPvRQZH9mYJc3DRlG0SdaltxX3eWCH4PE
lvzJ+6f4rdJPBLDyzbuxwz0PDpTpNPAf9fzxX+6ZXpdp
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:36 2025 by rpki-client