Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/FscjQBxv1adco5laW58xvLVm6S8.roa
File: FscjQBxv1adco5laW58xvLVm6S8.roa (raw, json)
Hash identifier: pJvi4VQgdsx7Ofx9Bw6iPAK1r8j8r8NX7iZPIjk12Dc=
Subject key identifier: 16:C7:23:40:1C:6F:D5:A7:5C:A3:99:5A:5B:9F:31:BC:B5:66:E9:2F
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 018BD338808AB5A25402563C374815CCB48D
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/FscjQBxv1adco5laW58xvLVm6S8.roa
Signing time: Wed 15 Nov 2023 13:42:57 +0000
ROA not before: Wed 15 Nov 2023 13:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30801
IP address blocks: 193.93.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:38:80:8a:b5:a2:54:02:56:3c:37:48:15:cc:b4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Nov 15 13:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c723401c6fd5a75ca3995a5b9f31bcb566e92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:2c:b1:e2:1c:8d:4f:12:ad:f5:71:5b:cb:
9a:2c:fb:f1:9b:e9:76:48:26:e5:87:a9:6d:14:65:
0a:53:86:33:74:1b:61:fa:f9:1e:54:cf:90:85:be:
e4:5d:76:b9:ae:5d:51:b2:d3:4a:a2:78:90:b0:bf:
d7:c4:2f:9a:db:53:64:c6:8d:d2:f4:c8:ba:0f:08:
06:4c:19:18:a6:78:28:3e:7d:e8:02:0e:ed:21:2a:
b4:92:86:60:32:ac:4c:ca:de:25:44:b1:11:6d:8b:
bd:a5:af:3a:82:40:72:f8:35:58:ca:7e:9b:b4:ce:
fc:21:c2:84:e9:af:27:29:2f:98:ab:0e:24:e9:9c:
ad:4e:44:66:d1:c3:23:22:ff:a9:0e:9e:89:db:60:
f8:43:b1:9c:5e:32:90:16:13:80:95:4e:e8:36:e5:
9f:21:d3:03:d9:6d:e6:94:31:c7:a5:53:00:5c:98:
27:72:83:6e:a0:34:18:f0:2f:2f:66:b1:5d:ec:64:
38:f4:86:f2:56:18:04:ad:6f:1c:39:f8:2f:3b:97:
a9:6e:36:51:f5:4b:33:b3:d9:97:97:a0:a1:de:a8:
72:51:ca:46:1b:31:60:2e:3a:43:59:54:38:8b:75:
ea:f5:c0:b6:81:d5:91:c4:ae:f2:e4:f0:dd:ee:2e:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:23:40:1C:6F:D5:A7:5C:A3:99:5A:5B:9F:31:BC:B5:66:E9:2F
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/FscjQBxv1adco5laW58xvLVm6S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.112.0/22
Signature Algorithm: sha256WithRSAEncryption
28:70:97:0d:32:49:10:50:3d:ca:9e:76:8b:8b:30:8a:d0:4a:
13:ba:dd:35:09:14:a3:0e:ed:5e:3f:44:02:42:9e:cf:12:0b:
78:f7:65:cc:d4:47:6a:b9:7a:e2:55:02:32:4b:c7:9e:5a:29:
1e:fa:d3:1f:d7:e3:b4:c6:85:ff:aa:2e:e4:a8:56:4d:b2:a2:
a2:67:ca:9b:07:45:06:45:b8:ec:63:9b:4c:c4:87:3c:f8:ca:
ff:27:ed:24:65:7c:f6:8a:80:e8:e3:f6:02:3d:19:70:c5:89:
c4:70:a9:85:2d:a3:ed:2d:12:8e:7b:12:b7:f3:5a:57:48:36:
d8:7f:72:56:f2:ad:20:59:d2:b7:55:5c:97:79:12:0a:3c:67:
e9:c0:92:57:f0:fc:1b:f6:1d:b2:8e:77:ac:aa:70:a4:cc:7d:
31:45:3d:73:95:ec:c6:98:ee:59:9e:98:79:ee:46:3c:21:9c:
05:9b:e4:59:a6:dc:f3:f4:18:84:0b:c3:4b:01:61:67:25:b2:
2b:d2:0e:44:79:47:e6:c8:e9:34:bb:79:29:64:6f:9e:80:28:
55:c4:26:9b:6e:a6:25:b7:42:03:b9:b6:d2:0d:e4:fb:ed:0e:
07:ae:e8:ba:d8:56:8e:04:1a:92:f2:07:08:48:cd:79:27:ab:
c2:d8:0e:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvTOICKtaJUAlY8N0gVzLSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTJjNTVlOGIzNTk1MDc3NWRmNzYzZTc0OTMwZDUyMjlj
OWZhMDAwHhcNMjMxMTE1MTM0MjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM3MjM0MDFjNmZkNWE3NWNhMzk5NWE1YjlmMzFiY2I1NjZlOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRcsseIcjU8SrfVxW8uaLPvxm+l2
SCblh6ltFGUKU4YzdBth+vkeVM+Qhb7kXXa5rl1RstNKoniQsL/XxC+a21Nkxo3S
9Mi6DwgGTBkYpngoPn3oAg7tISq0koZgMqxMyt4lRLERbYu9pa86gkBy+DVYyn6b
tM78IcKE6a8nKS+Yqw4k6ZytTkRm0cMjIv+pDp6J22D4Q7GcXjKQFhOAlU7oNuWf
IdMD2W3mlDHHpVMAXJgncoNuoDQY8C8vZrFd7GQ49IbyVhgErW8cOfgvO5epbjZR
9Uszs9mXl6Ch3qhyUcpGGzFgLjpDWVQ4i3Xq9cC2gdWRxK7y5PDd7i73IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbHI0Acb9WnXKOZWlufMby1ZukvMB8GA1UdIwQY
MBaAFIuSxV6LNZUHdd92PnSTDVIpyfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMt
YmViYmU0YWE3Y2FiLzEvRnNjalFCeHYxYWRjbzVsYVc1OHh2TFZtNlM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMtYmViYmU0YWE3Y2Fi
LzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV1wMA0G
CSqGSIb3DQEBCwUAA4IBAQAocJcNMkkQUD3KnnaLizCK0EoTut01CRSjDu1eP0QC
Qp7PEgt492XM1EdquXriVQIyS8eeWike+tMf1+O0xoX/qi7kqFZNsqKiZ8qbB0UG
RbjsY5tMxIc8+Mr/J+0kZXz2ioDo4/YCPRlwxYnEcKmFLaPtLRKOexK381pXSDbY
f3JW8q0gWdK3VVyXeRIKPGfpwJJX8Pwb9h2yjnesqnCkzH0xRT1zlezGmO5Znph5
7kY8IZwFm+RZptzz9BiEC8NLAWFnJbIr0g5EeUfmyOk0u3kpZG+egChVxCabbqYl
t0IDubbSDeT77Q4Hrui62FaOBBqS8gcISM15J6vC2A7O
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:07 2024 by rpki-client on console-ams.rpki-client.org