Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/m_oFSFFIF1DtDnF4UUOvBUYcyW4.roa
File: m_oFSFFIF1DtDnF4UUOvBUYcyW4.roa (raw, json)
Hash identifier: DrC3Zyi0l1gguJSJIUm1VmvvyJJeqyTq5GY+IfMqr+c=
Subject key identifier: 9B:FA:05:48:51:48:17:50:ED:0E:71:78:51:43:AF:05:46:1C:C9:6E
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01898C2475143BB8F00A8DBEB86659D04490
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/m_oFSFFIF1DtDnF4UUOvBUYcyW4.roa
Signing time: Tue 25 Jul 2023 08:22:26 +0000
ROA not before: Tue 25 Jul 2023 08:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264617
IP address blocks: 45.113.238.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:24:75:14:3b:b8:f0:0a:8d:be:b8:66:59:d0:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 25 08:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bfa054851481750ed0e71785143af05461cc96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:c8:c2:6f:3e:1e:66:56:b0:5f:22:65:2f:
dd:14:99:a5:0e:29:2a:9b:52:7a:c0:d7:78:94:e6:
d4:a9:85:de:87:f3:2f:6a:00:d5:98:c8:4a:66:e4:
b4:55:34:84:f6:1c:97:a4:58:87:10:1a:40:5f:a9:
2b:01:1f:0d:c1:43:a8:e6:43:c0:d1:41:ba:33:6c:
e7:00:8d:3d:92:1a:22:0a:1d:f3:06:2c:01:87:1c:
5b:d6:5b:db:f9:eb:77:c3:56:10:31:4d:19:38:29:
f0:36:a5:49:e1:0c:87:2b:da:23:80:dd:6f:39:58:
c3:03:59:11:b8:14:ee:a0:06:a9:64:ec:f9:da:36:
c6:fa:73:07:a6:1c:b6:6a:a3:8b:4b:4b:68:e8:f8:
54:01:df:e5:ca:c8:ee:6b:5e:cd:58:d2:c7:33:be:
a5:3b:be:d5:bc:bb:e1:16:54:18:b8:d9:2b:36:0e:
1c:11:20:a7:22:85:ab:93:03:ed:f8:14:22:6e:74:
ea:79:c9:8f:f6:ac:08:73:9a:fa:97:d8:00:eb:eb:
a5:29:f3:65:b0:1a:70:b2:92:98:de:94:76:e6:5f:
97:1f:57:7f:61:e5:7f:6c:d2:ca:63:a0:00:24:03:
49:27:f1:83:4a:5a:25:81:1f:9e:9f:f3:79:15:64:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:05:48:51:48:17:50:ED:0E:71:78:51:43:AF:05:46:1C:C9:6E
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/m_oFSFFIF1DtDnF4UUOvBUYcyW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.238.0/24
147.185.217.0/24
193.36.86.0/24
193.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
44:09:c0:de:37:d2:7e:f3:a9:73:1e:ba:fc:f2:50:a0:e6:90:
d2:3c:14:c3:33:c8:5b:37:0a:47:ac:54:68:a8:2b:65:ed:d9:
ec:3b:40:f1:d2:89:da:f5:9a:bb:2a:f2:7e:94:cf:48:64:48:
5b:bb:78:8f:30:71:c5:9d:e8:2b:d7:63:27:d4:ce:0c:9d:1c:
92:93:14:8b:ed:f4:e9:f4:73:78:9b:19:8b:32:11:f8:5d:cc:
2d:d3:65:96:92:bc:db:84:88:87:4b:f5:94:24:eb:8d:a6:9c:
b7:02:2e:93:b3:7a:75:8e:e1:a5:4d:a7:df:3b:38:75:75:2f:
cf:7d:9f:5f:0f:89:2c:40:28:a4:0a:fc:28:88:b0:83:f2:bb:
a2:df:7b:dd:54:a7:d7:73:1b:37:2f:4b:1d:79:19:4f:8f:90:
78:27:cf:b1:19:57:1b:11:f7:05:c0:12:90:06:1b:fb:6c:ee:
98:a3:ab:92:e8:4a:88:c3:e6:ef:97:28:9d:1c:bc:88:49:38:
4e:3e:12:0f:9a:ad:a0:b5:bc:49:bd:8e:dc:ac:f1:35:ab:6f:
e8:3b:86:39:55:44:17:50:a9:5d:8f:db:44:7b:8c:7b:13:d2:
fa:c6:f4:1a:3f:37:a1:9a:e3:1f:58:59:fe:c3:7e:9f:78:40:
18:58:51:72
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYmMJHUUO7jwCo2+uGZZ0ESQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjMwNzI1MDgyMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmZhMDU0ODUxNDgxNzUwZWQwZTcxNzg1MTQzYWYwNTQ2MWNjOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllTIwm8+HmZWsF8iZS/dFJmlDikq
m1J6wNd4lObUqYXeh/MvagDVmMhKZuS0VTSE9hyXpFiHEBpAX6krAR8NwUOo5kPA
0UG6M2znAI09khoiCh3zBiwBhxxb1lvb+et3w1YQMU0ZOCnwNqVJ4QyHK9ojgN1v
OVjDA1kRuBTuoAapZOz52jbG+nMHphy2aqOLS0to6PhUAd/lysjua17NWNLHM76l
O77VvLvhFlQYuNkrNg4cESCnIoWrkwPt+BQibnTqecmP9qwIc5r6l9gA6+ulKfNl
sBpwspKY3pR25l+XH1d/YeV/bNLKY6AAJANJJ/GDSlolgR+en/N5FWSLRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJv6BUhRSBdQ7Q5xeFFDrwVGHMluMB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvbV9vRlNGRklGMUR0RG5GNFVVT3ZCVVljeVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALXHuAwQA
k7nZAwQAwSRWAwQAwSSsMA0GCSqGSIb3DQEBCwUAA4IBAQBECcDeN9J+86lzHrr8
8lCg5pDSPBTDM8hbNwpHrFRoqCtl7dnsO0Dx0ona9Zq7KvJ+lM9IZEhbu3iPMHHF
negr12Mn1M4MnRySkxSL7fTp9HN4mxmLMhH4Xcwt02WWkrzbhIiHS/WUJOuNppy3
Ai6Ts3p1juGlTaffOzh1dS/PfZ9fD4ksQCikCvwoiLCD8rui33vdVKfXcxs3L0sd
eRlPj5B4J8+xGVcbEfcFwBKQBhv7bO6Yo6uS6EqIw+bvlyidHLyISThOPhIPmq2g
tbxJvY7crPE1q2/oO4Y5VUQXUKldj9tEe4x7E9L6xvQaPzehmuMfWFn+w36feEAY
WFFy
-----END CERTIFICATE-----
Generated at Tue Jul 25 09:39:06 2023 by rpki-client on console-ams.rpki-client.org