Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/Fi4uO1X8LfZ2o3BLYALa3dmStYo.roa
File: Fi4uO1X8LfZ2o3BLYALa3dmStYo.roa (raw, json)
Hash identifier: pE9rbHQENtfZinDUNnTRUit6yiomRwKy+IIFfl5I5hI=
Subject key identifier: 16:2E:2E:3B:55:FC:2D:F6:76:A3:70:4B:60:02:DA:DD:D9:92:B5:8A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 01856E1D302A17EB651511E516846D34EB4F
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/Fi4uO1X8LfZ2o3BLYALa3dmStYo.roa
Signing time: Sun 01 Jan 2023 16:14:44 +0000
ROA not before: Sun 01 Jan 2023 16:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.29.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:30:2a:17:eb:65:15:11:e5:16:84:6d:34:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jan 1 16:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=162e2e3b55fc2df676a3704b6002daddd992b58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:48:8e:46:61:3e:19:4d:74:2c:56:78:6a:
ed:d8:15:44:50:21:84:da:2d:fc:c2:0d:21:a9:9b:
0b:82:d8:ac:27:05:7e:e5:30:a9:10:f6:22:34:19:
a0:34:7c:27:e5:37:9d:b1:7d:c5:a7:45:47:e5:67:
ef:03:7a:e2:c9:e1:04:2d:b5:74:02:ca:c5:b5:32:
11:39:ca:e8:1a:17:8e:64:6c:78:e0:d9:2e:c8:55:
cb:d4:7b:6a:6e:1e:e5:6c:19:82:31:3b:93:8a:b9:
19:17:96:76:e4:80:54:6b:64:b0:68:df:97:93:a7:
d0:e4:83:8c:d5:42:15:1f:ab:4c:ea:9b:60:00:8f:
c3:6f:b0:8f:ef:c4:b4:44:df:10:d1:41:8d:2d:5a:
60:43:32:ad:1b:8e:0c:d1:ca:64:63:38:e6:5c:f4:
4b:4c:3f:69:10:83:73:8b:e5:c0:47:3e:2a:8a:67:
8f:be:00:2c:48:a2:b5:9d:8d:69:db:cb:74:90:95:
d8:94:01:08:1f:56:60:ee:9b:33:20:26:ab:03:7b:
fc:db:6f:b3:89:64:ed:da:ba:46:12:22:82:2b:9e:
35:04:4e:fa:c6:5c:25:71:73:86:9f:c7:c9:d8:5d:
84:36:83:71:70:08:2e:e4:45:5f:6d:e0:de:4a:57:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:2E:3B:55:FC:2D:F6:76:A3:70:4B:60:02:DA:DD:D9:92:B5:8A
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/Fi4uO1X8LfZ2o3BLYALa3dmStYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0e:b2:93:5a:64:90:71:93:05:65:6e:67:c2:52:ab:3e:f3:
03:4f:8b:9a:6b:15:42:cf:e6:55:28:53:b7:75:ec:81:60:13:
a5:03:9e:3b:49:4a:2f:aa:4a:32:f6:f1:5e:b8:fe:d1:89:a3:
1b:90:46:c1:cc:b4:73:b8:ee:e4:f9:29:f5:9b:93:7f:2b:fc:
4d:77:45:80:9d:5e:c1:30:d3:b2:94:a0:c1:c2:1e:8d:8e:35:
09:21:09:e5:1c:56:84:be:42:90:22:0d:24:70:ab:fe:99:44:
ed:4a:94:5c:2f:18:21:fa:64:20:e2:76:25:e8:43:78:3f:7a:
46:5b:9e:b6:fe:71:21:1a:2f:8d:4c:3b:26:4d:0a:ff:2a:82:
55:ef:9b:09:da:9e:e6:fc:3b:02:eb:38:a4:e7:c5:54:ba:5e:
38:f0:76:0e:17:9d:7a:51:1a:c2:22:48:f0:27:09:36:d0:59:
84:d1:8c:11:c1:9a:6a:e6:f4:64:ca:24:f7:6a:e6:93:19:2f:
73:c3:b6:ed:54:be:8a:93:09:9d:a0:d2:ec:16:a2:29:7c:15:
30:aa:ca:36:0d:c4:3e:64:88:75:f0:fa:67:3a:81:12:b9:13:
f9:c0:a4:9f:0d:59:2d:3a:16:ee:44:b4:19:ce:b5:ff:c5:f8:
1c:fd:72:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuHTAqF+tlFRHlFoRtNOtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMDBhMTY5YzhlNjk2Y2ExNjliNTk5YzdhMTcxMTkzZmZm
MDZkMmEwHhcNMjMwMTAxMTYxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJlMmUzYjU1ZmMyZGY2NzZhMzcwNGI2MDAyZGFkZGQ5OTJiNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA765IjkZhPhlNdCxWeGrt2BVEUCGE
2i38wg0hqZsLgtisJwV+5TCpEPYiNBmgNHwn5TedsX3Fp0VH5WfvA3riyeEELbV0
AsrFtTIROcroGheOZGx44NkuyFXL1Htqbh7lbBmCMTuTirkZF5Z25IBUa2SwaN+X
k6fQ5IOM1UIVH6tM6ptgAI/Db7CP78S0RN8Q0UGNLVpgQzKtG44M0cpkYzjmXPRL
TD9pEINzi+XARz4qimePvgAsSKK1nY1p28t0kJXYlAEIH1Zg7pszICarA3v822+z
iWTt2rpGEiKCK541BE76xlwlcXOGn8fJ2F2ENoNxcAgu5EVfbeDeSlePUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBYuLjtV/C32dqNwS2AC2t3ZkrWKMB8GA1UdIwQY
MBaAFAEAoWnI5pbKFptZnHoXEZP/8G0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYt
YjU2NmFlYjk1ZjkzLzEvRmk0dU8xWDhMZloybzNCTFlBTGEzZG1TdFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYtYjU2NmFlYjk1Zjkz
LzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR0vMA0G
CSqGSIb3DQEBCwUAA4IBAQCbDrKTWmSQcZMFZW5nwlKrPvMDT4uaaxVCz+ZVKFO3
deyBYBOlA547SUovqkoy9vFeuP7RiaMbkEbBzLRzuO7k+Sn1m5N/K/xNd0WAnV7B
MNOylKDBwh6NjjUJIQnlHFaEvkKQIg0kcKv+mUTtSpRcLxgh+mQg4nYl6EN4P3pG
W562/nEhGi+NTDsmTQr/KoJV75sJ2p7m/DsC6zik58VUul448HYOF516URrCIkjw
Jwk20FmE0YwRwZpq5vRkyiT3auaTGS9zw7btVL6KkwmdoNLsFqIpfBUwqso2DcQ+
ZIh18PpnOoESuRP5wKSfDVktOhbuRLQZzrX/xfgc/XJM
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:00 2024 by rpki-client on console-ams.rpki-client.org