Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/fcYrpvz-E8_2Nqa36JgWxHot9Qg.roa
File: fcYrpvz-E8_2Nqa36JgWxHot9Qg.roa (raw, json)
Hash identifier: sVWHxkPEqTDyU+q/EVC7FyRCxZf5POat2ySf504yas8=
Subject key identifier: 7D:C6:2B:A6:FC:FE:13:CF:F6:36:A6:B7:E8:98:16:C4:7A:2D:F5:08
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 01856FA71107103E25E7048470353A9B5F2E
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/fcYrpvz-E8_2Nqa36JgWxHot9Qg.roa
Signing time: Sun 01 Jan 2023 23:24:57 +0000
ROA not before: Sun 01 Jan 2023 23:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207846
IP address blocks: 185.194.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:11:07:10:3e:25:e7:04:84:70:35:3a:9b:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 23:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dc62ba6fcfe13cff636a6b7e89816c47a2df508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:62:ae:20:09:9e:dc:66:b5:a7:86:fa:11:
22:d8:34:0a:a8:3c:55:1c:06:84:5c:89:4c:32:39:
2a:01:0a:a8:55:31:84:9b:dc:d8:13:95:b4:a2:82:
84:f8:bc:ea:ee:56:7a:87:03:33:f4:df:c0:12:54:
65:03:b4:ae:b6:01:7e:82:1e:a7:db:33:90:92:7b:
63:9a:45:2b:61:73:4e:55:e0:65:49:39:49:66:b8:
cc:c7:c0:18:04:84:65:66:ca:7e:6b:cb:e6:bd:24:
25:44:76:08:6d:e7:52:a2:e7:34:39:cc:be:f6:52:
77:80:a0:c9:af:b8:d5:bc:13:bd:8a:cc:70:62:c5:
44:a8:3a:b7:a6:4a:01:c7:99:02:46:fe:5f:a2:b5:
ee:69:0f:ab:a3:ec:a9:a9:88:5c:b6:f3:14:0f:b3:
66:c9:08:55:70:67:c1:01:52:9a:a4:19:e9:43:4b:
a4:9b:38:ea:fd:9f:c1:a9:58:6d:b9:48:1d:f0:d3:
b9:fb:97:2e:11:fc:97:45:7d:c0:62:99:a6:9e:7a:
46:d6:65:c8:e6:eb:83:0f:51:cc:cf:5b:5c:d5:51:
e9:97:b1:9d:2a:d0:33:97:93:57:28:77:ec:ec:14:
06:c0:cf:40:b2:0e:3d:b0:8d:55:10:ef:72:ea:c5:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:2B:A6:FC:FE:13:CF:F6:36:A6:B7:E8:98:16:C4:7A:2D:F5:08
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/fcYrpvz-E8_2Nqa36JgWxHot9Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:88:a6:6b:28:52:99:ea:3b:08:4f:2a:ef:d8:06:54:eb:e4:
b2:5e:ea:eb:10:37:ff:90:0c:62:b8:46:e0:9a:12:79:f5:8a:
26:90:f4:b4:a9:20:ba:c5:94:7f:92:09:e5:39:0d:43:85:91:
a6:1a:b6:88:02:77:a9:d3:63:6d:4e:e1:79:d8:6a:36:67:26:
d7:53:5f:22:eb:fa:49:63:54:19:5f:1f:a1:27:cd:01:3e:b9:
14:cd:df:c3:fd:e6:85:17:c7:65:8a:67:74:4a:3d:59:9c:33:
63:89:ae:8a:6f:c9:82:8e:9c:91:09:48:de:9c:a8:d9:56:3f:
fa:5e:16:cf:e8:22:e4:99:40:42:57:cc:4c:df:43:47:47:8b:
35:37:68:68:9d:78:20:c8:a4:73:5c:a4:46:2b:0a:51:91:ea:
ee:0a:c6:87:c5:d6:e6:03:d3:f0:c5:50:2c:53:73:d2:11:4a:
93:a8:43:d8:ec:fd:6a:90:76:12:41:3c:bb:aa:30:66:cb:84:
13:fe:20:cd:ab:29:91:d3:b8:f3:bb:92:f7:09:2c:64:5d:dd:
ab:61:36:40:39:f8:35:be:62:7a:3d:0f:6c:a1:7b:a5:34:0c:
a6:4d:41:8e:08:01:e4:83:bb:91:3f:4d:89:56:28:5e:ce:33:
6f:8e:79:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpxEHED4l5wSEcDU6m18uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzczZjMyZDNjYjRlMTNlNDNmMTBhM2RjNDIyZjFmMzI3
MWJmYmEwHhcNMjMwMTAxMjMyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGM2MmJhNmZjZmUxM2NmZjYzNmE2YjdlODk4MTZjNDdhMmRmNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAViriAJntxmtaeG+hEi2DQKqDxV
HAaEXIlMMjkqAQqoVTGEm9zYE5W0ooKE+Lzq7lZ6hwMz9N/AElRlA7SutgF+gh6n
2zOQkntjmkUrYXNOVeBlSTlJZrjMx8AYBIRlZsp+a8vmvSQlRHYIbedSouc0Ocy+
9lJ3gKDJr7jVvBO9isxwYsVEqDq3pkoBx5kCRv5forXuaQ+ro+ypqYhctvMUD7Nm
yQhVcGfBAVKapBnpQ0ukmzjq/Z/BqVhtuUgd8NO5+5cuEfyXRX3AYpmmnnpG1mXI
5uuDD1HMz1tc1VHpl7GdKtAzl5NXKHfs7BQGwM9Asg49sI1VEO9y6sUiKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3GK6b8/hPP9jamt+iYFsR6LfUIMB8GA1UdIwQY
MBaAFBB3PzLTy04T5D8Qo9xCLx8ycb+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhjX010UExUaFBrUHhDajNFSXZIekp4djdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wOWNhZmQtNjhiYy00MWEyLThiYWIt
ODBiODRlNGYyMGM5LzEvZmNZcnB2ei1FOF8yTnFhMzZKZ1d4SG90OVFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wOWNhZmQtNjhiYy00MWEyLThiYWItODBiODRlNGYyMGM5
LzEvRUhjX010UExUaFBrUHhDajNFSXZIekp4djdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucJyMA0G
CSqGSIb3DQEBCwUAA4IBAQC8iKZrKFKZ6jsITyrv2AZU6+SyXurrEDf/kAxiuEbg
mhJ59YomkPS0qSC6xZR/kgnlOQ1DhZGmGraIAnep02NtTuF52Go2ZybXU18i6/pJ
Y1QZXx+hJ80BPrkUzd/D/eaFF8dlimd0Sj1ZnDNjia6Kb8mCjpyRCUjenKjZVj/6
XhbP6CLkmUBCV8xM30NHR4s1N2honXggyKRzXKRGKwpRkeruCsaHxdbmA9PwxVAs
U3PSEUqTqEPY7P1qkHYSQTy7qjBmy4QT/iDNqymR07jzu5L3CSxkXd2rYTZAOfg1
vmJ6PQ9soXulNAymTUGOCAHkg7uRP02JVihezjNvjnnb
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:25 2024 by rpki-client on console-ams.rpki-client.org