Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/ffkeev74y2LGL06SwaHMPnNm9fY.roa
File: ffkeev74y2LGL06SwaHMPnNm9fY.roa (raw, json)
Hash identifier: WvKzm2Mq2ZCNqS6mCZyWUxl/463bmRfCYdDvaOStgAU=
Subject key identifier: 7D:F9:1E:7A:FE:F8:CB:62:C6:2F:4E:92:C1:A1:CC:3E:73:66:F5:F6
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 01856E942D1C7857CC2338C5180910E41A0E
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/ffkeev74y2LGL06SwaHMPnNm9fY.roa
Signing time: Sun 01 Jan 2023 18:24:42 +0000
ROA not before: Sun 01 Jan 2023 18:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 185.204.16.0/22 maxlen: 24
193.16.15.0/24 maxlen: 24
193.16.12.0/24 maxlen: 24
193.16.13.0/24 maxlen: 24
193.16.14.0/24 maxlen: 24
80.254.232.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2d:1c:78:57:cc:23:38:c5:18:09:10:e4:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 18:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7df91e7afef8cb62c62f4e92c1a1cc3e7366f5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:57:b9:2f:b9:9e:c3:67:50:38:a7:27:a1:
d8:29:e7:81:83:d6:49:e5:f0:f5:ea:4b:b9:28:14:
46:06:a6:ba:e4:c2:e2:d5:04:96:88:78:fb:8c:61:
88:bf:c1:ed:d4:36:6e:05:74:9b:47:9a:d7:6a:57:
b2:48:f8:81:9f:cd:ee:71:90:e3:23:11:98:71:91:
2f:a8:32:8c:88:3f:45:00:a2:fc:c4:7e:52:0f:e4:
eb:eb:35:ad:7e:b8:1e:89:a4:24:d8:db:fc:a2:70:
88:5a:bf:3c:ec:57:a5:05:5c:87:1d:d8:7a:30:0f:
58:03:75:ca:19:ef:c3:c6:8c:e6:fa:73:2d:75:70:
85:2e:cc:3c:20:ac:09:65:a4:5e:24:e0:fc:f8:92:
7a:24:47:9d:f4:63:80:d1:02:2e:80:1d:1a:80:c4:
14:d5:d7:5c:b2:be:20:f0:10:0a:dd:97:2b:6a:4e:
65:7e:37:a0:77:88:4a:69:e9:a4:45:21:f3:0f:fb:
de:8e:45:15:8f:c5:c4:47:14:6b:47:a6:6d:cd:9b:
01:61:da:9d:56:94:b0:09:ec:2c:1c:4d:3a:80:a5:
e3:1f:0a:29:3a:50:5b:fc:ba:c1:2a:26:c3:21:b3:
6d:0b:5d:47:07:42:1f:a8:fd:38:de:63:8a:18:f7:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:1E:7A:FE:F8:CB:62:C6:2F:4E:92:C1:A1:CC:3E:73:66:F5:F6
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/ffkeev74y2LGL06SwaHMPnNm9fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.232.0/21
185.204.16.0/22
193.16.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ff:73:d1:34:02:ca:dc:6f:f3:84:14:0a:97:18:2c:f8:1b:
10:3d:a7:ff:7a:2a:0e:9b:b0:c0:3e:b9:52:a9:86:85:bb:15:
d0:c9:d5:51:f1:0f:5b:d7:b3:36:38:45:ec:46:fc:f0:a0:db:
3a:d8:31:3e:1c:68:b5:5b:80:58:a2:06:82:06:94:3f:9c:d2:
7e:4c:cd:9a:33:39:f0:81:77:60:4b:5e:42:78:50:9f:65:7c:
43:5d:d1:c2:b4:c0:c9:f1:a9:96:6d:f1:2e:49:2f:58:64:6e:
1e:91:93:d6:bb:52:04:b2:69:65:4d:f1:b4:6c:a0:6e:1b:9d:
e4:65:a8:42:17:f2:91:34:25:41:f0:e7:41:ff:34:50:dc:44:
2c:fb:f3:11:ba:91:59:c4:b7:3e:fc:1e:47:84:ea:39:69:2e:
4c:0a:f8:d5:2d:c8:0d:a4:8f:4d:42:94:1b:41:c3:96:bd:3c:
d9:79:b4:59:fd:f0:14:b8:64:b3:9f:44:3f:9b:1e:4c:7e:38:
71:8a:9f:22:a0:66:cc:09:5e:0f:cb:11:48:c3:fc:e8:f6:32:
f6:fe:e4:24:a2:68:8f:ce:85:ac:95:40:9b:5f:6b:88:85:56:
bf:c1:a0:3c:33:ef:e6:de:74:af:fe:14:dd:02:a6:cd:5a:f7:
e9:c2:4d:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVulC0ceFfMIzjFGAkQ5BoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm
ZGE1MjAwHhcNMjMwMTAxMTgyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGY5MWU3YWZlZjhjYjYyYzYyZjRlOTJjMWExY2MzZTczNjZmNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5XuS+5nsNnUDinJ6HYKeeBg9ZJ
5fD16ku5KBRGBqa65MLi1QSWiHj7jGGIv8Ht1DZuBXSbR5rXaleySPiBn83ucZDj
IxGYcZEvqDKMiD9FAKL8xH5SD+Tr6zWtfrgeiaQk2Nv8onCIWr887FelBVyHHdh6
MA9YA3XKGe/Dxozm+nMtdXCFLsw8IKwJZaReJOD8+JJ6JEed9GOA0QIugB0agMQU
1ddcsr4g8BAK3Zcrak5lfjegd4hKaemkRSHzD/vejkUVj8XERxRrR6ZtzZsBYdqd
VpSwCewsHE06gKXjHwopOlBb/LrBKibDIbNtC11HB0IfqP043mOKGPfatwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH35Hnr++Mtixi9OksGhzD5zZvX2MB8GA1UdIwQY
MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt
NDM4YWNiNzJmYzViLzEvZmZrZWV2NzR5MkxHTDA2U3dhSE1Qbk5tOWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi
LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDUP7oAwQC
ucwQAwQCwRAMMA0GCSqGSIb3DQEBCwUAA4IBAQCg/3PRNALK3G/zhBQKlxgs+BsQ
Paf/eioOm7DAPrlSqYaFuxXQydVR8Q9b17M2OEXsRvzwoNs62DE+HGi1W4BYogaC
BpQ/nNJ+TM2aMznwgXdgS15CeFCfZXxDXdHCtMDJ8amWbfEuSS9YZG4ekZPWu1IE
smllTfG0bKBuG53kZahCF/KRNCVB8OdB/zRQ3EQs+/MRupFZxLc+/B5HhOo5aS5M
CvjVLcgNpI9NQpQbQcOWvTzZebRZ/fAUuGSzn0Q/mx5Mfjhxip8ioGbMCV4PyxFI
w/zo9jL2/uQkomiPzoWslUCbX2uIhVa/waA8M+/m3nSv/hTdAqbNWvfpwk3Q
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:22 2023 by rpki-client on console-fra.rpki-client.org