Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/o0g7bPAT6JsL6A4D1dz5J2o_dBo.roa
File: o0g7bPAT6JsL6A4D1dz5J2o_dBo.roa (raw, json)
Hash identifier: M6N2RheHwEyASxJ65QpoXpqfzAdx195jt0EGEfzccZw=
Subject key identifier: A3:48:3B:6C:F0:13:E8:9B:0B:E8:0E:03:D5:DC:F9:27:6A:3F:74:1A
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 018570C2D6EAF85FBFCB009820D3E9D97394
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/o0g7bPAT6JsL6A4D1dz5J2o_dBo.roa
Signing time: Mon 02 Jan 2023 04:34:55 +0000
ROA not before: Mon 02 Jan 2023 04:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61003
IP address blocks: 193.108.117.0/24 maxlen: 24
193.108.118.0/24 maxlen: 24
193.108.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:d6:ea:f8:5f:bf:cb:00:98:20:d3:e9:d9:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jan 2 04:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3483b6cf013e89b0be80e03d5dcf9276a3f741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:01:81:fa:1b:fb:73:13:26:ef:7d:8a:dc:
dd:14:e9:59:f8:a4:1a:fc:d2:68:cf:a0:7c:ed:1b:
b6:7b:6e:e0:b4:db:81:7f:38:01:49:04:04:75:40:
14:8c:ec:a0:e8:c0:cb:91:c8:45:cc:ff:4f:ae:28:
45:ae:6b:2f:96:d5:46:91:d3:96:2d:6a:6d:b7:be:
6e:ce:cd:30:51:29:59:60:7a:b3:a2:1d:4c:43:2e:
62:7f:03:d4:89:b5:ec:92:9f:58:8e:cb:09:00:2c:
8e:d9:ba:70:f7:8d:4d:f6:ae:7a:46:fa:42:91:b5:
eb:f5:be:b2:fc:db:f1:a5:f6:2e:b4:7b:ae:53:ee:
0a:72:aa:55:af:f2:eb:1c:dc:be:88:74:54:9f:8f:
b5:3b:06:ac:70:6d:46:4a:94:37:0f:e8:15:b2:06:
e9:af:6a:f9:75:ea:cf:db:7d:cb:b6:39:e8:98:f8:
57:6d:a5:ee:a4:68:30:c4:ce:26:f5:c8:4d:1a:e9:
71:0e:aa:52:4e:af:dd:47:99:96:6b:ab:4f:f9:4d:
02:cf:1e:7a:7e:23:fe:62:ad:d3:5b:ec:a2:3f:9c:
0f:e3:fa:69:fe:77:cd:95:1a:5d:18:74:ee:76:2d:
9d:b5:8b:74:84:99:50:95:e0:87:10:03:d8:06:c0:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:3B:6C:F0:13:E8:9B:0B:E8:0E:03:D5:DC:F9:27:6A:3F:74:1A
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/o0g7bPAT6JsL6A4D1dz5J2o_dBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.116.0-193.108.118.255
Signature Algorithm: sha256WithRSAEncryption
1e:93:63:ef:34:2d:00:4f:69:18:1f:fe:3f:3d:b5:61:af:af:
4f:da:88:b7:99:bb:68:ca:2b:5b:fa:28:b8:9c:c6:04:76:0b:
66:4d:dc:eb:11:20:04:b2:b1:4b:5c:b3:13:41:3d:13:4c:60:
73:68:54:c5:79:40:e8:37:c9:e9:23:f4:6d:71:22:4b:87:a0:
0c:17:98:77:41:f0:ae:b7:96:0a:86:6b:28:8e:fe:d1:b7:0a:
1a:8b:81:c7:1e:86:6c:0b:7b:0d:34:a8:64:2b:d1:6f:af:6c:
ad:af:1b:ff:81:f9:25:01:5c:81:ed:9f:f0:a9:0f:e1:06:1f:
fa:9e:8f:7f:04:14:5b:f2:41:26:2f:e1:67:1d:b2:75:e3:30:
29:79:54:dd:45:3b:47:e5:91:49:b0:50:05:45:a7:2d:5a:d4:
6f:7d:30:8a:61:6f:da:49:1f:04:e4:51:c4:91:a2:8e:b8:f6:
ab:ea:19:4f:25:38:20:f4:93:6e:d2:39:b6:2c:2b:ba:c9:97:
db:0d:38:bd:7e:77:44:bb:49:71:2b:06:bf:d7:91:3b:e2:6e:
cb:c5:80:b8:f7:e2:1a:e4:0e:41:87:3a:30:7a:a5:69:44:67:
d1:90:f7:ac:74:f6:83:c4:e5:07:17:1c:54:33:a3:67:aa:bf:
bf:69:5e:0f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwwtbq+F+/ywCYINPp2XOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTZlYmQ0MGE3NDRhMGM4NGYyNTM1NDU3MDQ3ODA4YWQy
ZjE3YzQwHhcNMjMwMTAyMDQzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzQ4M2I2Y2YwMTNlODliMGJlODBlMDNkNWRjZjkyNzZhM2Y3NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjakBgfob+3MTJu99itzdFOlZ+KQa
/NJoz6B87Ru2e27gtNuBfzgBSQQEdUAUjOyg6MDLkchFzP9PrihFrmsvltVGkdOW
LWptt75uzs0wUSlZYHqzoh1MQy5ifwPUibXskp9YjssJACyO2bpw941N9q56RvpC
kbXr9b6y/NvxpfYutHuuU+4KcqpVr/LrHNy+iHRUn4+1OwascG1GSpQ3D+gVsgbp
r2r5derP233LtjnomPhXbaXupGgwxM4m9chNGulxDqpSTq/dR5mWa6tP+U0Czx56
fiP+Yq3TW+yiP5wP4/pp/nfNlRpdGHTudi2dtYt0hJlQleCHEAPYBsD9CQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKNIO2zwE+ibC+gOA9Xc+SdqP3QaMB8GA1UdIwQY
MBaAFBcW69QKdEoMhPJTVFcEeAitLxfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUt
YmFlN2FhMGExOGEwLzEvbzBnN2JQQVQ2SnNMNkE0RDFkejVKMm9fZEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUtYmFlN2FhMGExOGEw
LzEvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALBbHQD
BADBbHYwDQYJKoZIhvcNAQELBQADggEBAB6TY+80LQBPaRgf/j89tWGvr0/aiLeZ
u2jKK1v6KLicxgR2C2ZN3OsRIASysUtcsxNBPRNMYHNoVMV5QOg3yekj9G1xIkuH
oAwXmHdB8K63lgqGayiO/tG3ChqLgccehmwLew00qGQr0W+vbK2vG/+B+SUBXIHt
n/CpD+EGH/qej38EFFvyQSYv4WcdsnXjMCl5VN1FO0flkUmwUAVFpy1a1G99MIph
b9pJHwTkUcSRoo649qvqGU8lOCD0k27SObYsK7rJl9sNOL1+d0S7SXErBr/XkTvi
bsvFgLj34hrkDkGHOjB6pWlEZ9GQ96x09oPE5QcXHFQzo2eqv79pXg8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:21 2024 by rpki-client on console-ams.rpki-client.org