Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/F3pab-WsRM1kS0e5yifPLFf9ajw.roa
File: F3pab-WsRM1kS0e5yifPLFf9ajw.roa (raw, json)
Hash identifier: 1XayhzslDwDJ4TV5F1qnnzVv3kSlpgYKcPkkG5ldbOE=
Subject key identifier: 17:7A:5A:6F:E5:AC:44:CD:64:4B:47:B9:CA:27:CF:2C:57:FD:6A:3C
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 018DCFA44EE7F3F593D4BB38BAAD747CBC9E
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/F3pab-WsRM1kS0e5yifPLFf9ajw.roa
Signing time: Thu 22 Feb 2024 07:07:48 +0000
ROA not before: Thu 22 Feb 2024 07:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 09:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:a4:4e:e7:f3:f5:93:d4:bb:38:ba:ad:74:7c:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Feb 22 07:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=177a5a6fe5ac44cd644b47b9ca27cf2c57fd6a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:47:2f:c1:a6:8f:83:c7:5b:e6:4c:96:ec:
2e:24:18:59:f2:32:d7:07:d7:4b:d0:61:98:09:27:
3f:2f:dd:31:fd:57:40:f9:d2:99:c3:ef:5a:c7:d9:
fc:bd:4a:14:b7:39:67:af:44:41:09:50:c4:f4:8d:
3a:f0:ac:37:70:c2:e1:ee:e3:d2:fe:78:8f:f6:71:
fe:4e:96:d2:a3:1a:6e:02:85:f2:92:86:0e:de:02:
34:17:c7:95:c6:65:fc:80:30:3a:e6:50:7b:45:ba:
34:04:c0:14:f1:84:8b:c1:02:b8:8e:63:96:54:cf:
a4:9b:50:37:ba:68:d6:df:bf:9f:2f:6b:c1:78:01:
60:de:98:86:61:39:08:62:b1:fc:6d:32:6f:fd:bb:
ea:d8:da:34:c3:92:13:2c:4e:24:7c:82:8c:f1:cc:
2e:02:0b:03:e3:47:f2:0e:48:53:eb:a9:c8:63:e8:
70:2f:1b:88:80:8d:eb:80:0a:df:9c:bb:02:9a:ef:
d4:90:bf:97:8b:d9:17:cb:e0:f7:1d:b0:2d:5a:f4:
ad:71:07:98:8e:ae:8f:39:ca:9c:e0:71:95:42:93:
05:a8:9f:1b:41:9a:e9:80:1d:f8:63:b2:83:9d:7a:
d9:4b:c7:c6:f6:b3:22:86:e3:9e:6c:af:16:b0:57:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:5A:6F:E5:AC:44:CD:64:4B:47:B9:CA:27:CF:2C:57:FD:6A:3C
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/F3pab-WsRM1kS0e5yifPLFf9ajw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6d:2a:ed:df:8a:f9:43:10:cb:1d:90:ec:c1:aa:b6:4b:69:
51:21:a5:2a:ef:6c:6f:ee:71:1f:4d:f7:de:b7:87:c7:19:cb:
db:42:35:70:4f:1e:d8:2a:7a:c1:9d:47:61:b0:1d:71:7c:29:
a4:05:be:f0:d9:33:11:bc:e4:1a:3e:74:4b:66:0a:31:66:a0:
ab:b1:c0:66:ac:18:92:80:4e:3c:fe:cb:bd:bc:7b:7f:58:88:
1e:cc:43:90:2c:3f:8e:0b:0b:a4:48:61:3c:24:d2:b5:b3:3b:
7f:46:5e:ce:7e:93:91:f0:d2:9b:c9:61:fd:1c:53:67:a7:98:
7c:ed:6f:98:ad:37:d1:04:23:53:cc:5c:4d:74:57:7a:30:dc:
6b:71:4a:6a:0e:36:73:d4:88:5a:db:d8:2b:57:e7:2e:70:72:
ab:9c:80:65:54:a4:43:58:bf:c7:81:59:37:78:c6:9d:33:d3:
c5:51:8b:42:d6:8b:bd:51:a4:ba:fe:5b:29:53:82:ed:f8:fb:
ef:93:4a:d9:f0:9f:70:98:ee:30:e3:60:c6:cb:95:42:f7:df:
5a:9b:5d:99:c0:e0:d7:2d:b7:c1:2b:94:c8:f4:ae:41:ca:15:
d9:e5:d5:4e:22:25:f4:bc:3f:32:25:be:e1:ee:76:8d:cb:e0:
4a:84:1f:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3PpE7n8/WT1Ls4uq10fLyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjQwMjIyMDcwNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzdhNWE2ZmU1YWM0NGNkNjQ0YjQ3YjljYTI3Y2YyYzU3ZmQ2YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZpHL8Gmj4PHW+ZMluwuJBhZ8jLX
B9dL0GGYCSc/L90x/VdA+dKZw+9ax9n8vUoUtzlnr0RBCVDE9I068Kw3cMLh7uPS
/niP9nH+TpbSoxpuAoXykoYO3gI0F8eVxmX8gDA65lB7Rbo0BMAU8YSLwQK4jmOW
VM+km1A3umjW37+fL2vBeAFg3piGYTkIYrH8bTJv/bvq2No0w5ITLE4kfIKM8cwu
AgsD40fyDkhT66nIY+hwLxuIgI3rgArfnLsCmu/UkL+Xi9kXy+D3HbAtWvStcQeY
jq6POcqc4HGVQpMFqJ8bQZrpgB34Y7KDnXrZS8fG9rMihuOebK8WsFd2swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBd6Wm/lrETNZEtHuconzyxX/Wo8MB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvRjNwYWItV3NSTTFrUzBlNXlpZlBMRmY5YWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ejsMA0G
CSqGSIb3DQEBCwUAA4IBAQBNbSrt34r5QxDLHZDswaq2S2lRIaUq72xv7nEfTffe
t4fHGcvbQjVwTx7YKnrBnUdhsB1xfCmkBb7w2TMRvOQaPnRLZgoxZqCrscBmrBiS
gE48/su9vHt/WIgezEOQLD+OCwukSGE8JNK1szt/Rl7OfpOR8NKbyWH9HFNnp5h8
7W+YrTfRBCNTzFxNdFd6MNxrcUpqDjZz1Iha29grV+cucHKrnIBlVKRDWL/HgVk3
eMadM9PFUYtC1ou9UaS6/lspU4Lt+Pvvk0rZ8J9wmO4w42DGy5VC999am12ZwODX
LbfBK5TI9K5ByhXZ5dVOIiX0vD8yJb7h7naNy+BKhB/Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:21 2024 by rpki-client on console-ams.rpki-client.org