Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/_f-F7r_QJoupH_pTSPJYUZXuOxI.roa
File: _f-F7r_QJoupH_pTSPJYUZXuOxI.roa (raw, json)
Hash identifier: SPB0FsM+R2/xdnmdrsPn1wc2akmMHJLVuGgHWqzSYRU=
Subject key identifier: FD:FF:85:EE:BF:D0:26:8B:A9:1F:FA:53:48:F2:58:51:95:EE:3B:12
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01857227EF694D97718CE594E26ECE569404
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/_f-F7r_QJoupH_pTSPJYUZXuOxI.roa
Signing time: Mon 02 Jan 2023 11:04:57 +0000
ROA not before: Mon 02 Jan 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199803
IP address blocks: 188.92.44.0/24 maxlen: 24
188.92.40.0/24 maxlen: 24
188.92.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:ef:69:4d:97:71:8c:e5:94:e2:6e:ce:56:94:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Jan 2 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdff85eebfd0268ba91ffa5348f2585195ee3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:f7:fa:4e:17:37:bb:13:ee:66:36:ae:07:
81:a1:95:86:35:04:1e:4b:6c:85:87:09:9b:04:cc:
7f:7e:1f:59:b0:78:19:17:64:80:55:43:da:ba:39:
d3:59:8f:79:86:13:f0:74:58:17:aa:70:4b:bc:91:
1a:0b:fd:65:5a:de:27:cb:d1:9c:07:18:91:47:95:
a5:3e:7f:23:00:b7:29:60:28:d6:97:32:ce:bf:76:
bd:18:18:78:c2:a1:2f:7b:7f:85:73:1e:6c:59:2b:
4a:92:9e:03:d8:7d:91:be:65:b1:ea:bd:bd:4f:13:
73:48:71:ea:10:b5:c9:6b:f9:8d:57:f0:04:b3:5e:
13:f7:07:d2:8a:00:30:24:cb:bf:83:ca:96:c9:6e:
9b:86:09:f1:dd:05:7c:c9:69:29:af:ae:11:61:20:
57:03:57:87:f5:43:fa:97:b0:11:06:20:aa:3a:6a:
f1:d1:d7:9a:4b:48:94:49:c7:e3:a3:85:38:7e:b6:
1b:c7:b6:dc:5b:5f:ce:70:db:fb:c0:e8:60:78:6c:
38:59:03:83:83:0a:15:49:69:60:c9:b1:46:2f:c9:
d1:f6:28:16:50:d7:5b:69:37:05:5d:9e:55:7f:f0:
4e:e4:58:18:76:21:22:8f:0b:51:8c:f4:3d:21:30:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:85:EE:BF:D0:26:8B:A9:1F:FA:53:48:F2:58:51:95:EE:3B:12
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/_f-F7r_QJoupH_pTSPJYUZXuOxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.40.0/23
188.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:2d:18:27:3d:c4:7b:ff:c4:fb:39:c8:00:cc:d4:1c:79:60:
d4:fa:4a:fa:9d:d3:77:aa:f9:31:2c:98:a3:a6:e1:bd:d7:08:
a5:af:e7:4d:07:52:25:70:01:94:a2:c0:f3:da:c2:21:c2:2d:
2b:6d:a2:5c:40:0e:ea:4b:4c:d3:f0:d9:03:5c:f7:61:76:34:
e4:de:e1:4e:54:b8:ba:21:07:cd:33:52:a1:eb:d6:16:1d:8c:
58:86:99:d8:c4:df:8b:4b:8b:9b:ef:50:8c:8e:fe:cd:94:3c:
0c:1c:20:09:5a:ba:a5:6f:49:1c:ef:07:94:9d:53:ae:5d:84:
9a:f6:52:39:e6:90:c5:a9:32:e9:dc:5d:62:73:fe:a2:98:c2:
e0:37:0b:cf:7a:7f:d1:b4:7d:0b:ef:9c:0d:8c:bd:78:f1:fc:
0f:6b:2b:84:1e:13:a4:84:37:e6:33:d1:9b:0e:ed:b1:00:9a:
b3:72:1f:aa:99:0d:de:29:30:19:cb:b9:7d:5c:a8:d8:28:50:
27:1b:d9:7d:11:4d:42:ce:1d:9f:35:ab:8f:58:c4:b2:ca:2e:
ff:43:15:93:be:3d:2c:3e:49:95:a4:03:0f:9e:15:c6:8d:3a:
d3:71:e4:3e:ca:84:8f:3d:82:8b:50:77:9f:e0:ac:d5:70:d3:
73:2d:b0:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyJ+9pTZdxjOWU4m7OVpQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjMwMTAyMTEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGZmODVlZWJmZDAyNjhiYTkxZmZhNTM0OGYyNTg1MTk1ZWUzYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xb3+k4XN7sT7mY2rgeBoZWGNQQe
S2yFhwmbBMx/fh9ZsHgZF2SAVUPaujnTWY95hhPwdFgXqnBLvJEaC/1lWt4ny9Gc
BxiRR5WlPn8jALcpYCjWlzLOv3a9GBh4wqEve3+Fcx5sWStKkp4D2H2RvmWx6r29
TxNzSHHqELXJa/mNV/AEs14T9wfSigAwJMu/g8qWyW6bhgnx3QV8yWkpr64RYSBX
A1eH9UP6l7ARBiCqOmrx0deaS0iUScfjo4U4frYbx7bcW1/OcNv7wOhgeGw4WQOD
gwoVSWlgybFGL8nR9igWUNdbaTcFXZ5Vf/BO5FgYdiEijwtRjPQ9ITDPHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP3/he6/0CaLqR/6U0jyWFGV7jsSMB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvX2YtRjdyX1FKb3VwSF9wVFNQSllVWlh1T3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBvFwoAwQA
vFwsMA0GCSqGSIb3DQEBCwUAA4IBAQDALRgnPcR7/8T7OcgAzNQceWDU+kr6ndN3
qvkxLJijpuG91wilr+dNB1IlcAGUosDz2sIhwi0rbaJcQA7qS0zT8NkDXPdhdjTk
3uFOVLi6IQfNM1Kh69YWHYxYhpnYxN+LS4ub71CMjv7NlDwMHCAJWrqlb0kc7weU
nVOuXYSa9lI55pDFqTLp3F1ic/6imMLgNwvPen/RtH0L75wNjL148fwPayuEHhOk
hDfmM9GbDu2xAJqzch+qmQ3eKTAZy7l9XKjYKFAnG9l9EU1Czh2fNauPWMSyyi7/
QxWTvj0sPkmVpAMPnhXGjTrTceQ+yoSPPYKLUHef4KzVcNNzLbCV
-----END CERTIFICATE-----
Generated at Thu Nov 2 09:27:35 2023 by rpki-client on console-fra.rpki-client.org