Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fKoyv5mDK4olGReQXXIqjfSj-IQ.roa
File: fKoyv5mDK4olGReQXXIqjfSj-IQ.roa (raw, json)
Hash identifier: QR1miiJzlR8Jjgq/gxzxqH3cxGMHB1bAsLIJ+c0m7c8=
Subject key identifier: 7C:AA:32:BF:99:83:2B:8A:25:19:17:90:5D:72:2A:8D:F4:A3:F8:84
Certificate issuer: /CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Certificate serial: 01856D9D0B91C09D54524264F4A69B4CD4A9
Authority key identifier: 7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fKoyv5mDK4olGReQXXIqjfSj-IQ.roa
Signing time: Sun 01 Jan 2023 13:54:46 +0000
ROA not before: Sun 01 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202050
IP address blocks: 193.108.215.0/24 maxlen: 24
193.108.219.0/24 maxlen: 24
193.109.94.0/24 maxlen: 24
193.109.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0b:91:c0:9d:54:52:42:64:f4:a6:9b:4c:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Validity
Not Before: Jan 1 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7caa32bf99832b8a251917905d722a8df4a3f884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:81:cc:b4:d7:b5:0f:ca:ca:57:14:4d:70:
9f:53:81:2a:39:93:ca:0b:e1:d3:c7:49:51:f8:a1:
51:0d:6a:66:3d:2f:23:65:15:6e:4a:7b:80:bd:17:
dc:7b:b3:40:87:e9:10:0c:4f:4f:87:60:38:61:92:
2c:b0:b5:4b:4d:ed:eb:40:31:5a:50:a6:a3:4f:8f:
79:de:8f:5e:d8:a1:80:5f:94:55:11:ef:d8:00:09:
92:1d:5e:ac:6e:c2:d8:e5:37:c9:63:a8:af:7f:e3:
f6:18:40:b3:41:5d:d7:aa:f5:7a:55:e0:da:11:70:
cc:f9:98:5b:3d:b2:88:e5:85:53:1b:c7:5a:40:cb:
6b:a6:44:04:29:e5:05:2d:3a:28:be:ff:c8:d6:13:
bd:43:aa:fc:15:cf:24:dc:15:b3:d8:12:3f:dc:06:
ca:f2:36:49:8d:b2:f8:14:21:e1:7c:24:c6:de:55:
bc:7b:71:b6:96:56:4a:0c:06:5a:cd:97:9d:2d:35:
e9:14:55:a5:09:9b:c4:4a:82:77:f4:35:95:01:ba:
01:36:d8:81:ed:2b:6c:09:26:76:8f:8c:57:19:75:
77:bc:09:e8:69:22:31:09:e9:48:10:8b:c5:ef:5b:
a4:f9:a8:f1:98:97:64:fa:4a:96:5c:d9:a9:47:cd:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AA:32:BF:99:83:2B:8A:25:19:17:90:5D:72:2A:8D:F4:A3:F8:84
X509v3 Authority Key Identifier:
keyid:7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fKoyv5mDK4olGReQXXIqjfSj-IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.215.0/24
193.108.219.0/24
193.109.92.0/24
193.109.94.0/24
Signature Algorithm: sha256WithRSAEncryption
76:43:fb:e8:0f:b0:0d:ec:c1:fc:8f:c7:72:10:97:5d:4e:49:
0e:a3:26:c5:cc:64:16:27:de:56:60:03:86:d3:1c:21:49:63:
90:a7:58:fb:44:63:ef:0e:67:df:dc:7e:0e:d5:de:28:0f:f7:
b9:36:f3:43:80:a3:47:01:93:71:d8:b9:56:7b:eb:99:34:58:
1b:c9:38:c3:b8:52:09:ae:fc:04:f2:2e:a9:8a:4d:e3:a5:33:
6b:0a:1d:25:7d:13:18:2f:78:3c:83:81:15:d5:b5:f7:fc:ca:
49:62:b8:17:b3:60:82:6f:3c:64:ab:b0:b3:52:ba:17:19:8e:
59:74:2d:50:ba:ea:77:a4:f5:5f:06:55:d4:31:ce:eb:a1:f8:
4e:74:2b:18:a2:04:07:34:90:7b:03:ad:90:2d:b2:12:74:bb:
3b:25:67:6c:fe:2e:00:b9:bd:f0:18:75:56:bf:f3:78:bd:2e:
65:0a:c3:31:53:1f:41:9e:7a:35:cc:71:30:71:b4:ad:0e:5c:
14:fa:44:bc:77:85:2f:43:34:d3:ed:9d:3d:19:98:02:d2:a0:
50:5f:b9:67:2f:08:6f:c9:86:6a:d2:fd:86:89:03:03:07:a7:
6c:5a:20:5b:4a:be:1c:e0:3b:cf:5d:4b:91:bd:3f:1b:3b:e8:
96:ad:cb:1a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVtnQuRwJ1UUkJk9KabTNSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZjUzMmViYjA3ZWE4NTA2YjY1MzQzMGMwNDZlYzhkNDAy
Zjk2OGIwHhcNMjMwMTAxMTM1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2FhMzJiZjk5ODMyYjhhMjUxOTE3OTA1ZDcyMmE4ZGY0YTNmODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyaBzLTXtQ/KylcUTXCfU4EqOZPK
C+HTx0lR+KFRDWpmPS8jZRVuSnuAvRfce7NAh+kQDE9Ph2A4YZIssLVLTe3rQDFa
UKajT4953o9e2KGAX5RVEe/YAAmSHV6sbsLY5TfJY6ivf+P2GECzQV3XqvV6VeDa
EXDM+ZhbPbKI5YVTG8daQMtrpkQEKeUFLToovv/I1hO9Q6r8Fc8k3BWz2BI/3AbK
8jZJjbL4FCHhfCTG3lW8e3G2llZKDAZazZedLTXpFFWlCZvESoJ39DWVAboBNtiB
7StsCSZ2j4xXGXV3vAnoaSIxCelIEIvF71uk+ajxmJdk+kqWXNmpR803jQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHyqMr+ZgyuKJRkXkF1yKo30o/iEMB8GA1UdIwQY
MBaAFH71MuuwfqhQa2U0MMBG7I1AL5aLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnZVeTY3Qi1xRkJyWlRRd3dFYnNqVUF2bG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85Mjc1ZmYtYmE5ZS00OGUwLTkwYTEt
NDc3MjcwNjYxMTYzLzEvZktveXY1bURLNG9sR1JlUVhYSXFqZlNqLUlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85Mjc1ZmYtYmE5ZS00OGUwLTkwYTEtNDc3MjcwNjYxMTYz
LzEvZnZVeTY3Qi1xRkJyWlRRd3dFYnNqVUF2bG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwWzXAwQA
wWzbAwQAwW1cAwQAwW1eMA0GCSqGSIb3DQEBCwUAA4IBAQB2Q/voD7AN7MH8j8dy
EJddTkkOoybFzGQWJ95WYAOG0xwhSWOQp1j7RGPvDmff3H4O1d4oD/e5NvNDgKNH
AZNx2LlWe+uZNFgbyTjDuFIJrvwE8i6pik3jpTNrCh0lfRMYL3g8g4EV1bX3/MpJ
YrgXs2CCbzxkq7CzUroXGY5ZdC1Quup3pPVfBlXUMc7rofhOdCsYogQHNJB7A62Q
LbISdLs7JWds/i4Aub3wGHVWv/N4vS5lCsMxUx9Bnno1zHEwcbStDlwU+kS8d4Uv
QzTT7Z09GZgC0qBQX7lnLwhvyYZq0v2GiQMDB6dsWiBbSr4c4DvPXUuRvT8bO+iW
rcsa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org