Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/G030FFv_q-88XNtlCCvArCsiIo8.roa
File: G030FFv_q-88XNtlCCvArCsiIo8.roa (raw, json)
Hash identifier: 4M92n4LcIsgG++TDeEglS2o4k9AHgBSqngGNay/wP50=
Subject key identifier: 1B:4D:F4:14:5B:FF:AB:EF:3C:5C:DB:65:08:2B:C0:AC:2B:22:22:8F
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0188636860C185A4819DD16E46C2FCC3FBEC
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/G030FFv_q-88XNtlCCvArCsiIo8.roa
Signing time: Sun 28 May 2023 17:29:24 +0000
ROA not before: Sun 28 May 2023 17:29:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199308
IP address blocks: 80.245.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:68:60:c1:85:a4:81:9d:d1:6e:46:c2:fc:c3:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: May 28 17:29:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b4df4145bffabef3c5cdb65082bc0ac2b22228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:2a:c1:60:1e:36:5a:44:0f:3c:90:07:f6:
c9:8b:1f:36:ed:93:50:da:ae:28:0c:cf:39:cc:aa:
c7:b6:01:d2:97:aa:6a:4e:72:f4:9d:33:f6:82:fa:
48:e4:24:da:c9:3f:cd:e9:78:1f:bc:15:1d:28:8b:
d6:76:a2:7a:00:9b:a5:c8:48:79:a3:38:27:38:06:
1d:0c:0f:12:71:9e:be:3b:4a:d2:5b:a6:a2:e7:8b:
0c:04:82:54:fc:7b:d3:89:bc:0d:75:f5:05:b3:fb:
2c:83:3c:3b:d6:98:17:f4:67:07:12:69:a9:f2:fd:
a6:a0:e9:af:32:ed:45:67:0f:e0:1c:00:d9:ac:9d:
62:83:4a:04:53:89:b1:7e:24:39:bd:af:99:4e:06:
28:df:df:6b:f1:a4:e8:49:94:6c:ef:c6:41:a8:ff:
23:63:56:af:bf:24:8c:4c:ce:75:a5:ab:0b:39:b7:
5a:6b:b3:8f:1e:f1:d1:42:e8:b2:2b:77:65:7b:1f:
34:01:0e:e9:60:d1:2c:84:da:56:85:51:f4:83:6a:
3d:ae:06:8e:89:0b:e2:5c:d0:25:8d:54:b9:4d:3a:
34:c6:01:51:29:be:60:ee:1a:ff:52:d3:75:9c:36:
2a:0a:5c:31:bf:ac:cf:b4:f9:99:7a:07:db:42:f1:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:F4:14:5B:FF:AB:EF:3C:5C:DB:65:08:2B:C0:AC:2B:22:22:8F
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/G030FFv_q-88XNtlCCvArCsiIo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.93.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:af:7c:8e:06:48:02:43:79:eb:59:7e:78:15:50:30:a0:39:
42:b9:f3:9a:62:31:a8:9a:e7:5f:31:45:c8:30:e0:d7:93:4e:
4a:ae:41:48:45:1d:94:f2:7a:62:7e:4d:a8:23:ed:7d:99:34:
b3:8d:4d:5d:ed:a1:0f:bd:83:32:43:d6:b1:59:72:a1:4e:c2:
66:17:87:0f:f2:1d:2e:21:6d:82:de:c0:b9:8a:be:ad:5e:ca:
43:e6:f8:29:eb:e2:a6:41:da:84:d4:52:0d:6b:24:c1:61:60:
29:8c:f0:22:8b:64:a8:73:5d:57:44:74:4f:43:fb:b8:e0:87:
83:86:0c:68:aa:fc:c8:5f:0c:3c:51:4c:8e:a3:ba:df:7a:b8:
61:17:3b:f0:35:c2:dd:13:5b:4d:aa:93:05:5b:60:1f:89:01:
2b:d9:5d:e6:57:ea:1e:44:9b:d6:4e:41:de:31:df:fe:ac:87:
d7:6e:77:bc:44:31:54:4a:de:04:7d:b3:b6:2f:6d:76:5c:a9:
6a:59:c1:25:68:97:06:4b:0d:ba:9a:93:8f:b1:0d:d0:ce:09:
9e:42:01:a1:da:7f:78:9b:ff:70:eb:08:0c:a5:39:f8:64:fd:
61:2a:bd:14:9a:a3:91:f3:68:9f:c3:c7:6c:8f:9f:f7:5a:db:
9c:a0:24:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhjaGDBhaSBndFuRsL8w/vsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh
ODQyMGIwHhcNMjMwNTI4MTcyOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjRkZjQxNDViZmZhYmVmM2M1Y2RiNjUwODJiYzBhYzJiMjIyMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1AqwWAeNlpEDzyQB/bJix827ZNQ
2q4oDM85zKrHtgHSl6pqTnL0nTP2gvpI5CTayT/N6XgfvBUdKIvWdqJ6AJulyEh5
ozgnOAYdDA8ScZ6+O0rSW6ai54sMBIJU/HvTibwNdfUFs/ssgzw71pgX9GcHEmmp
8v2moOmvMu1FZw/gHADZrJ1ig0oEU4mxfiQ5va+ZTgYo399r8aToSZRs78ZBqP8j
Y1avvySMTM51pasLObdaa7OPHvHRQuiyK3dlex80AQ7pYNEshNpWhVH0g2o9rgaO
iQviXNAljVS5TTo0xgFRKb5g7hr/UtN1nDYqClwxv6zPtPmZegfbQvF/EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtN9BRb/6vvPFzbZQgrwKwrIiKPMB8GA1UdIwQY
MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt
OTJlYzUxNWM1OTVhLzEvRzAzMEZGdl9xLTg4WE50bENDdkFyQ3NpSW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh
LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPVdMA0G
CSqGSIb3DQEBCwUAA4IBAQCrr3yOBkgCQ3nrWX54FVAwoDlCufOaYjGomudfMUXI
MODXk05KrkFIRR2U8npifk2oI+19mTSzjU1d7aEPvYMyQ9axWXKhTsJmF4cP8h0u
IW2C3sC5ir6tXspD5vgp6+KmQdqE1FINayTBYWApjPAii2Soc11XRHRPQ/u44IeD
hgxoqvzIXww8UUyOo7rferhhFzvwNcLdE1tNqpMFW2AfiQEr2V3mV+oeRJvWTkHe
Md/+rIfXbne8RDFUSt4EfbO2L212XKlqWcElaJcGSw26mpOPsQ3QzgmeQgGh2n94
m/9w6wgMpTn4ZP1hKr0UmqOR82ifw8dsj5/3WtucoCTF
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:08 2024 by rpki-client on console-ams.rpki-client.org