Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/2FyTupSmYD1w5B3_EsuKD6ztBPs.roa
File: 2FyTupSmYD1w5B3_EsuKD6ztBPs.roa (raw, json)
Hash identifier: lJ2DzR8fmWWjGRKurDNiCba8vo/djgSXlTSjA/IRLFA=
Subject key identifier: D8:5C:93:BA:94:A6:60:3D:70:E4:1D:FF:12:CB:8A:0F:AC:ED:04:FB
Certificate issuer: /CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Certificate serial: 018572BA6EC81B0D86DC5E8B6296C0E736D5
Authority key identifier: EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/2FyTupSmYD1w5B3_EsuKD6ztBPs.roa
Signing time: Mon 02 Jan 2023 13:44:58 +0000
ROA not before: Mon 02 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.150.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6e:c8:1b:0d:86:dc:5e:8b:62:96:c0:e7:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Validity
Not Before: Jan 2 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d85c93ba94a6603d70e41dff12cb8a0faced04fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:54:e8:f6:5f:b6:c8:5e:f6:09:e7:ec:c1:
24:63:71:a5:07:9f:8d:7d:04:9c:81:45:70:8d:fd:
61:c0:e5:89:7c:30:ef:1d:07:6c:e4:f7:f7:86:dd:
76:d9:6d:3d:2f:45:41:b2:79:61:26:b9:34:22:b5:
30:b3:0e:1d:79:9d:88:4a:37:d7:69:a6:8c:79:7c:
39:aa:40:cf:30:97:8f:f5:34:a5:d8:04:ac:4a:d7:
7a:15:98:70:f9:8f:36:76:af:4f:45:a2:f0:cd:c6:
f6:24:56:7f:b7:37:7a:ab:dd:a9:86:0e:a1:55:97:
2c:6f:00:9b:c8:fc:25:d3:8e:ba:f8:42:a1:16:b6:
6a:70:8e:37:db:ef:8f:0f:48:a3:50:42:cc:d7:37:
37:12:ea:9d:82:85:a8:f2:86:17:cb:68:d6:9f:7e:
40:9c:89:23:e7:be:a7:2c:b6:78:49:55:0f:d1:b8:
73:33:0d:0f:fd:14:07:f5:2a:78:a3:c1:ab:13:6f:
36:06:ab:6f:f9:94:4f:1e:ed:27:01:b0:a2:0e:61:
2b:6a:1c:8f:74:a2:8d:5f:2b:4d:bb:e5:d5:46:ea:
a6:44:e3:ec:ee:67:85:b5:b8:be:c6:e5:14:03:69:
5e:94:b2:04:ac:42:0c:0e:1f:35:35:77:9e:5b:d1:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:93:BA:94:A6:60:3D:70:E4:1D:FF:12:CB:8A:0F:AC:ED:04:FB
X509v3 Authority Key Identifier:
keyid:EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/2FyTupSmYD1w5B3_EsuKD6ztBPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.104.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0d:2b:5a:17:61:96:ea:16:3c:e3:be:c0:d0:df:e6:ca:a8:
e0:64:4b:ea:ac:e6:57:65:c2:72:0b:f8:1a:7b:65:6d:7b:0c:
a8:83:5b:3c:ab:70:ca:68:4d:ab:b1:f8:c3:45:e0:c2:2f:6d:
7f:09:83:da:59:03:ca:90:76:36:e5:94:98:62:f3:53:1f:03:
e9:47:25:54:dd:d7:0c:79:8a:c3:7a:94:87:aa:0b:c7:9e:ce:
9e:ce:68:74:fb:6b:24:94:bd:c7:93:3a:bb:f4:ff:10:77:88:
d8:22:e3:2c:45:05:fb:82:f8:d4:a3:2c:e9:53:8f:b0:5a:82:
9a:ef:a7:6d:da:41:1a:4d:a5:f2:3f:16:80:0b:a9:ec:3a:e3:
1a:f4:f8:2d:24:ec:48:b2:dd:b7:66:15:48:00:80:17:41:a0:
7a:c0:2d:37:65:fa:91:3e:74:5e:97:cb:37:b3:14:f8:15:c8:
01:65:07:32:b8:24:c0:c6:bd:ed:ef:87:36:57:7b:fe:ef:bd:
7f:b8:87:29:a0:70:5d:33:f1:89:d8:7b:63:ec:a9:2a:5d:65:
99:93:00:b4:e3:13:72:bd:32:c7:e1:79:a1:93:42:3b:85:53:
f6:cb:77:81:92:5d:18:aa:c1:3d:69:1d:dc:c5:98:06:f4:08:
fd:1a:b4:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyum7IGw2G3F6LYpbA5zbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTVmMTNiN2M2ZWY0NjM5YWYwZmUwZmUxNzA0NTk0M2Mz
NGYyYWYwHhcNMjMwMTAyMTM0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODVjOTNiYTk0YTY2MDNkNzBlNDFkZmYxMmNiOGEwZmFjZWQwNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApspU6PZftshe9gnn7MEkY3GlB5+N
fQScgUVwjf1hwOWJfDDvHQds5Pf3ht122W09L0VBsnlhJrk0IrUwsw4deZ2ISjfX
aaaMeXw5qkDPMJeP9TSl2ASsStd6FZhw+Y82dq9PRaLwzcb2JFZ/tzd6q92phg6h
VZcsbwCbyPwl0466+EKhFrZqcI432++PD0ijUELM1zc3EuqdgoWo8oYXy2jWn35A
nIkj576nLLZ4SVUP0bhzMw0P/RQH9Sp4o8GrE282Bqtv+ZRPHu0nAbCiDmErahyP
dKKNXytNu+XVRuqmROPs7meFtbi+xuUUA2lelLIErEIMDh81NXeeW9HFuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhck7qUpmA9cOQd/xLLig+s7QT7MB8GA1UdIwQY
MBaAFOwV8Tt8bvRjmvD+D+FwRZQ8NPKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JYeE8zeHU5R09hOFA0UDRYQkZsRHcwOHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYzEzYTctMDlhNy00NmMyLTgwZjct
NTEyNGM2N2NkYmFjLzEvMkZ5VHVwU21ZRDF3NUIzX0VzdUtENnp0QlBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYzEzYTctMDlhNy00NmMyLTgwZjctNTEyNGM2N2NkYmFj
LzEvN0JYeE8zeHU5R09hOFA0UDRYQkZsRHcwOHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZZoMA0G
CSqGSIb3DQEBCwUAA4IBAQApDStaF2GW6hY8477A0N/myqjgZEvqrOZXZcJyC/ga
e2Vtewyog1s8q3DKaE2rsfjDReDCL21/CYPaWQPKkHY25ZSYYvNTHwPpRyVU3dcM
eYrDepSHqgvHns6ezmh0+2sklL3Hkzq79P8Qd4jYIuMsRQX7gvjUoyzpU4+wWoKa
76dt2kEaTaXyPxaAC6nsOuMa9PgtJOxIst23ZhVIAIAXQaB6wC03ZfqRPnRel8s3
sxT4FcgBZQcyuCTAxr3t74c2V3v+771/uIcpoHBdM/GJ2Htj7KkqXWWZkwC04xNy
vTLH4Xmhk0I7hVP2y3eBkl0YqsE9aR3cxZgG9Aj9GrRH
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:17 2024 by rpki-client on console-fra.rpki-client.org