Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/sfgWDLf1wDfKPl4mkgFlkSEGVms.roa
File: sfgWDLf1wDfKPl4mkgFlkSEGVms.roa (raw, json)
Hash identifier: 4hXscV2C+/Fm0TRgCSOPuawP/qxpxRu3mlcb5e66lB4=
Subject key identifier: B1:F8:16:0C:B7:F5:C0:37:CA:3E:5E:26:92:01:65:91:21:06:56:6B
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018A661504D5D815D8F057109FFA7964269A
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/sfgWDLf1wDfKPl4mkgFlkSEGVms.roa
Signing time: Tue 05 Sep 2023 16:02:48 +0000
ROA not before: Tue 05 Sep 2023 16:02:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.62.162.0/24 maxlen: 24
94.247.138.0/24 maxlen: 24
91.205.223.0/24 maxlen: 24
46.254.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 18:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:15:04:d5:d8:15:d8:f0:57:10:9f:fa:79:64:26:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 5 16:02:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1f8160cb7f5c037ca3e5e26920165912106566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:2b:d5:f8:fd:ce:6e:91:4a:e2:f5:1c:c0:
7f:ec:3f:2a:7c:b0:d6:ee:7b:67:88:95:a2:b7:f3:
3b:83:8c:c1:20:76:00:49:c8:8b:b5:cd:ab:43:af:
1d:39:9f:ca:b2:2b:05:df:fd:10:f5:2b:3b:ce:b8:
a7:50:e2:d1:c1:ec:18:23:6b:21:a5:45:90:f3:6e:
56:8d:84:5b:70:ad:dc:0c:a1:6c:af:ea:e2:d5:96:
8f:a9:0a:0e:3a:46:4f:54:ca:91:6a:de:6b:59:71:
b7:fe:34:84:65:93:1c:3e:2d:88:29:22:9b:63:7b:
2d:90:e5:d2:46:1a:fe:12:92:e3:bc:a0:d7:e5:b5:
7b:67:a7:f8:9f:08:48:fa:ca:31:78:29:0b:99:ed:
39:2e:04:05:04:bf:13:c0:ba:39:b9:f7:f1:a1:96:
2a:29:58:64:90:0e:30:e0:92:25:b5:fe:b0:5f:15:
34:5d:3b:f3:25:24:59:d4:0b:7e:4c:b0:e9:03:dd:
af:f9:72:81:ad:60:4f:9e:ac:ce:d7:e9:5e:67:b4:
32:3a:24:9b:ef:20:6e:ad:88:f2:c6:04:c3:3b:8b:
06:a0:6f:17:f3:b2:16:12:7a:44:23:0a:cd:c9:ab:
ae:9a:a8:d2:7c:6d:aa:b3:3b:d7:44:ef:f1:b4:f8:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F8:16:0C:B7:F5:C0:37:CA:3E:5E:26:92:01:65:91:21:06:56:6B
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/sfgWDLf1wDfKPl4mkgFlkSEGVms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
91.205.223.0/24
94.247.138.0/24
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a4:1d:31:db:f2:32:e1:a9:ba:07:96:77:7a:fa:1a:48:d0:
10:21:b2:0a:12:9e:ce:91:64:08:91:df:0f:76:a8:f6:a3:a7:
73:e8:a8:aa:93:93:aa:c5:bb:ed:a4:f5:26:74:57:62:ae:3c:
cf:c4:73:62:c4:d3:34:df:d3:67:89:5c:d1:de:d0:fb:ff:68:
95:b2:b6:5b:10:2b:53:7d:85:71:c2:07:9f:fe:78:a1:a4:c1:
11:88:bc:d6:c4:01:11:5d:7e:1b:ce:cf:d7:68:71:ed:38:40:
44:85:68:45:a9:59:84:4b:69:3e:b6:21:3f:7d:2d:f6:6a:41:
76:71:a8:d1:cf:17:af:6c:01:3a:ff:62:dd:46:fb:c5:78:e1:
6e:aa:b2:ac:74:64:01:79:ef:68:e2:05:39:27:77:84:7b:d6:
7a:d6:1b:87:2d:ba:66:4a:7e:3e:49:8a:05:21:2d:4b:a5:27:
c2:e1:df:c4:8b:7e:a8:f4:f3:8c:7a:8e:da:51:ac:dc:06:5e:
0f:ff:44:6a:4c:fd:26:51:30:f5:92:54:4b:0a:c5:ce:79:25:
52:25:7d:a7:ed:b3:e5:35:4a:b8:7b:13:e8:f8:0c:59:74:45:
7b:db:08:1f:e6:a8:6d:33:97:04:13:8d:99:0b:6d:1b:5a:82:
20:98:cc:f6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYpmFQTV2BXY8FcQn/p5ZCaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjMwOTA1MTYwMjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWY4MTYwY2I3ZjVjMDM3Y2EzZTVlMjY5MjAxNjU5MTIxMDY1NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTwr1fj9zm6RSuL1HMB/7D8qfLDW
7ntniJWit/M7g4zBIHYASciLtc2rQ68dOZ/KsisF3/0Q9Ss7zrinUOLRwewYI2sh
pUWQ825WjYRbcK3cDKFsr+ri1ZaPqQoOOkZPVMqRat5rWXG3/jSEZZMcPi2IKSKb
Y3stkOXSRhr+EpLjvKDX5bV7Z6f4nwhI+soxeCkLme05LgQFBL8TwLo5uffxoZYq
KVhkkA4w4JIltf6wXxU0XTvzJSRZ1At+TLDpA92v+XKBrWBPnqzO1+leZ7QyOiSb
7yBurYjyxgTDO4sGoG8X87IWEnpEIwrNyauumqjSfG2qszvXRO/xtPjD9wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLH4Fgy39cA3yj5eJpIBZZEhBlZrMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvc2ZnV0RMZjF3RGZLUGw0bWtnRmxrU0VHVm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALv5sAwQA
W83fAwQAXveKAwQAwj6iMA0GCSqGSIb3DQEBCwUAA4IBAQBjpB0x2/Iy4am6B5Z3
evoaSNAQIbIKEp7OkWQIkd8Pdqj2o6dz6Kiqk5OqxbvtpPUmdFdirjzPxHNixNM0
39NniVzR3tD7/2iVsrZbECtTfYVxwgef/nihpMERiLzWxAERXX4bzs/XaHHtOEBE
hWhFqVmES2k+tiE/fS32akF2cajRzxevbAE6/2LdRvvFeOFuqrKsdGQBee9o4gU5
J3eEe9Z61huHLbpmSn4+SYoFIS1LpSfC4d/Ei36o9POMeo7aUazcBl4P/0RqTP0m
UTD1klRLCsXOeSVSJX2n7bPlNUq4exPo+AxZdEV72wgf5qhtM5cEE42ZC20bWoIg
mMz2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org