Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/fCLg09GxzflyWSK1Dfm3awqfvos.roa
File: fCLg09GxzflyWSK1Dfm3awqfvos.roa (raw, json)
Hash identifier: UzsjPKsCVXfccrulxIMOugeSXuAmdp7i6RyZ9rtHic4=
Subject key identifier: 7C:22:E0:D3:D1:B1:CD:F9:72:59:22:B5:0D:F9:B7:6B:0A:9F:BE:8B
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 01866F9E664A5D2C64043EE7E3FE28B3D83F
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/fCLg09GxzflyWSK1Dfm3awqfvos.roa
Signing time: Mon 20 Feb 2023 16:18:17 +0000
ROA not before: Mon 20 Feb 2023 16:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.13.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:9e:66:4a:5d:2c:64:04:3e:e7:e3:fe:28:b3:d8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Feb 20 16:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c22e0d3d1b1cdf9725922b50df9b76b0a9fbe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:c9:b2:51:55:3a:c5:f5:fc:8f:d8:57:8a:
11:30:7a:e4:40:a0:ba:96:39:76:5d:65:69:a0:bb:
1b:e4:52:fa:cb:73:57:af:27:e0:ad:02:66:1b:46:
31:0f:08:87:ae:57:b6:67:7c:d5:3b:1c:5e:87:22:
22:bc:c5:f8:4c:cb:79:26:69:b7:dc:16:35:db:1c:
59:f2:e1:74:a4:a1:9d:15:b5:4e:14:1c:49:63:c6:
c7:c0:15:73:c8:0c:51:d1:7e:24:e2:00:a8:3d:92:
ba:8e:c3:83:2c:39:97:ce:96:cb:d0:ac:7d:7e:07:
1d:2c:b2:7e:ed:8c:08:75:af:4e:4c:2f:4f:07:63:
c0:21:16:b3:3c:1d:36:91:38:59:2b:98:31:71:5c:
24:9d:e7:fd:5f:a0:ed:b5:54:eb:53:c5:01:fb:77:
35:08:30:46:9b:f3:55:17:78:8f:6f:5f:3c:5e:20:
45:c7:07:e3:e5:7b:3e:f9:7e:50:15:58:23:fd:ce:
7b:b5:27:07:0f:ef:86:eb:77:a9:fa:41:f7:c7:5b:
04:4d:06:cf:c5:97:38:c8:de:5a:ad:44:ac:90:b1:
64:99:d4:5a:95:07:09:44:2c:45:75:0e:69:c1:20:
6e:a1:f2:db:65:ed:92:a4:91:9e:95:77:ed:8c:d0:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:22:E0:D3:D1:B1:CD:F9:72:59:22:B5:0D:F9:B7:6B:0A:9F:BE:8B
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/fCLg09GxzflyWSK1Dfm3awqfvos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/24
Signature Algorithm: sha256WithRSAEncryption
97:89:c2:d0:1c:c4:ba:85:3c:4f:b3:c4:f1:50:fe:7d:f8:fa:
4b:00:c8:84:6f:38:f8:01:73:17:2e:58:bf:c5:fe:0d:8c:e3:
2c:cc:35:ee:7a:b8:4b:e1:e7:54:3a:44:dc:c8:b7:55:f3:6e:
d9:55:c6:b9:46:c8:12:3e:46:9e:75:0c:b0:84:b1:b8:85:f4:
73:e7:36:89:ff:87:d1:07:44:44:f4:33:a4:35:a4:3e:5c:ee:
f8:0e:6f:af:1d:18:db:cf:aa:0b:33:78:31:61:57:89:bb:70:
17:c6:7d:4a:32:36:e1:49:f0:ee:d7:80:7f:ab:3d:36:da:a7:
41:c7:87:92:1d:65:44:ad:a5:7c:ad:78:ad:85:cf:eb:dc:5d:
55:2e:72:43:c7:b7:59:6e:63:63:04:78:26:27:3c:21:e5:af:
fe:87:f8:93:d8:3e:51:86:a6:0b:dc:1f:67:6e:77:66:7d:14:
f8:84:6c:d2:fa:17:13:06:87:2b:b7:72:fb:f5:60:47:f4:79:
d3:43:77:77:d8:8b:b0:93:b4:f4:04:09:d5:e4:03:26:8b:23:
61:b0:5b:45:27:70:4b:ab:f3:d4:a2:24:73:b8:bd:62:89:bf:
6f:a0:74:fe:64:42:f5:fa:2b:19:98:ff:7d:f0:08:9c:2b:8c:
fa:b0:b3:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZvnmZKXSxkBD7n4/4os9g/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTgyYmUyMDBmMmVkOWJlNDBmYzk4M2Q5NGQ5YzcyNjM1
MGE5ZDkwHhcNMjMwMjIwMTYxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzIyZTBkM2QxYjFjZGY5NzI1OTIyYjUwZGY5Yjc2YjBhOWZiZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV3JslFVOsX1/I/YV4oRMHrkQKC6
ljl2XWVpoLsb5FL6y3NXryfgrQJmG0YxDwiHrle2Z3zVOxxehyIivMX4TMt5Jmm3
3BY12xxZ8uF0pKGdFbVOFBxJY8bHwBVzyAxR0X4k4gCoPZK6jsODLDmXzpbL0Kx9
fgcdLLJ+7YwIda9OTC9PB2PAIRazPB02kThZK5gxcVwknef9X6DttVTrU8UB+3c1
CDBGm/NVF3iPb188XiBFxwfj5Xs++X5QFVgj/c57tScHD++G63ep+kH3x1sETQbP
xZc4yN5arUSskLFkmdRalQcJRCxFdQ5pwSBuofLbZe2SpJGelXftjNAXqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwi4NPRsc35clkitQ35t2sKn76LMB8GA1UdIwQY
MBaAFBWYK+IA8u2b5A/Jg9lNnHJjUKnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2Qt
Y2E3ZTZjM2FlOGNlLzEvZkNMZzA5R3h6Zmx5V1NLMURmbTNhd3Fmdm9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2QtY2E3ZTZjM2FlOGNl
LzEvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ3iMA0G
CSqGSIb3DQEBCwUAA4IBAQCXicLQHMS6hTxPs8TxUP59+PpLAMiEbzj4AXMXLli/
xf4NjOMszDXuerhL4edUOkTcyLdV827ZVca5RsgSPkaedQywhLG4hfRz5zaJ/4fR
B0RE9DOkNaQ+XO74Dm+vHRjbz6oLM3gxYVeJu3AXxn1KMjbhSfDu14B/qz022qdB
x4eSHWVEraV8rXithc/r3F1VLnJDx7dZbmNjBHgmJzwh5a/+h/iT2D5RhqYL3B9n
bndmfRT4hGzS+hcTBocrt3L79WBH9HnTQ3d32Iuwk7T0BAnV5AMmiyNhsFtFJ3BL
q/PUoiRzuL1iib9voHT+ZEL1+isZmP998AicK4z6sLM1
-----END CERTIFICATE-----
Generated at Fri Aug 18 13:56:17 2023 by rpki-client on console-fra.rpki-client.org