Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/F8ctoBYFriH5MUKF_Amjdng-KIU.roa
File: F8ctoBYFriH5MUKF_Amjdng-KIU.roa (raw, json)
Hash identifier: gDKlrsh+8UpIfBl7XDF4x/U7/+P1/+SGVIpXUxNxHwo=
Subject key identifier: 17:C7:2D:A0:16:05:AE:21:F9:31:42:85:FC:09:A3:76:78:3E:28:85
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 01857246EB90DAD90CB0157A62B600F5DF27
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/F8ctoBYFriH5MUKF_Amjdng-KIU.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8255
IP address blocks: 193.57.122.0/23 maxlen: 24
193.57.126.0/24 maxlen: 24
193.56.246.0/24 maxlen: 24
193.57.112.0/22 maxlen: 24
193.57.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:eb:90:da:d9:0c:b0:15:7a:62:b6:00:f5:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17c72da01605ae21f9314285fc09a376783e2885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:29:c9:d8:5b:23:fe:17:b5:34:78:23:22:
44:2c:68:c6:d5:73:39:28:2f:6e:d1:c9:ab:6d:d2:
e4:87:5e:af:a7:8f:8e:e4:d7:c9:2d:8f:1c:e8:09:
01:2d:ac:01:18:47:d0:0f:7c:b1:72:18:bc:f5:78:
6b:ae:09:fc:52:e2:ab:78:ba:7a:43:83:1a:03:aa:
d0:3f:73:3a:da:b1:f2:ca:30:0e:8c:c9:38:04:21:
f4:a8:ed:c9:ea:16:2d:c7:6c:e2:ac:b8:66:3c:ca:
76:a6:5f:84:9f:e2:9e:0f:e3:04:f4:c5:e4:a6:f1:
6d:4f:dc:08:d9:7b:cb:20:78:ee:66:61:f9:92:7d:
0c:19:56:14:0e:a4:dd:d8:f6:93:aa:76:15:af:b9:
d1:a0:a9:40:75:90:ef:79:de:92:87:60:67:0a:23:
40:5c:8b:51:01:80:22:55:06:4e:39:4d:e4:9d:1c:
e1:55:a8:8c:db:95:5a:93:3e:d6:38:d3:ab:30:89:
2c:09:4d:c4:47:f8:0b:f6:e8:00:28:3c:9f:ab:e2:
f1:90:ad:be:94:3a:aa:e1:73:14:8b:98:b0:2c:1e:
7f:96:54:1f:7e:cf:a3:bd:86:99:f8:47:58:9d:bd:
5a:70:71:7c:60:05:99:63:23:c3:b3:43:eb:64:99:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:2D:A0:16:05:AE:21:F9:31:42:85:FC:09:A3:76:78:3E:28:85
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/F8ctoBYFriH5MUKF_Amjdng-KIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.246.0/24
193.57.112.0/21
193.57.122.0/23
193.57.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1d:fe:d4:c6:e9:9e:e2:ce:ca:81:42:a1:48:3b:64:0c:03:
1c:d9:c4:4d:ae:12:28:ab:96:bf:12:95:d0:5c:15:03:17:bc:
b1:6f:70:31:a6:a9:e0:6d:8b:dd:d7:18:45:ae:94:a3:14:96:
15:16:74:0d:95:5a:fa:5b:b8:26:09:0b:4d:ae:2c:c1:ae:18:
7e:a1:fd:cf:ca:40:42:5e:08:84:32:d7:55:12:d6:9f:ac:45:
c6:c7:a4:f0:b1:9f:d7:90:05:71:78:f9:b0:e5:57:54:8f:f7:
05:15:3f:a9:eb:44:03:ac:22:ca:14:a3:6d:5d:9f:e7:96:db:
75:2d:74:47:dc:f6:de:e8:4a:41:5a:59:43:77:84:42:ff:d2:
f3:ec:4b:f2:69:ca:27:ae:52:13:b9:6d:4c:18:09:57:85:6d:
1e:8d:0b:42:c1:39:f8:b3:a9:3b:c5:36:d8:9f:8a:c6:93:5f:
83:3e:70:f2:9e:aa:0f:57:a8:0e:4c:77:fa:4e:34:a4:2e:02:
6c:6c:d0:d7:e2:e2:62:f5:e7:ce:31:05:f5:00:56:37:22:23:
09:67:49:09:06:40:f1:91:83:2b:e2:69:aa:49:37:5c:e9:68:
a6:47:25:bc:bb:1d:ca:13:a4:7c:b5:72:7c:a9:0c:83:e1:04:
ec:35:45:8e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVyRuuQ2tkMsBV6YrYA9d8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTQxNjU5MDU4NWE1ZDM1MWRiYmNhMWYwYjNjYTlmNjJh
Yjc4NWQwHhcNMjMwMTAyMTEzODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2M3MmRhMDE2MDVhZTIxZjkzMTQyODVmYzA5YTM3Njc4M2UyODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzwpydhbI/4XtTR4IyJELGjG1XM5
KC9u0cmrbdLkh16vp4+O5NfJLY8c6AkBLawBGEfQD3yxchi89Xhrrgn8UuKreLp6
Q4MaA6rQP3M62rHyyjAOjMk4BCH0qO3J6hYtx2zirLhmPMp2pl+En+KeD+ME9MXk
pvFtT9wI2XvLIHjuZmH5kn0MGVYUDqTd2PaTqnYVr7nRoKlAdZDved6Sh2BnCiNA
XItRAYAiVQZOOU3knRzhVaiM25Vakz7WONOrMIksCU3ER/gL9ugAKDyfq+LxkK2+
lDqq4XMUi5iwLB5/llQffs+jvYaZ+EdYnb1acHF8YAWZYyPDs0PrZJn/OwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBfHLaAWBa4h+TFChfwJo3Z4PiiFMB8GA1UdIwQY
MBaAFO7kFlkFhaXTUdu8ofCzyp9iq3hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMt
MDc2YTc1MGI4NTQxLzEvRjhjdG9CWUZyaUg1TVVLRl9BbWpkbmctS0lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMtMDc2YTc1MGI4NTQx
LzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwTj2AwQD
wTlwAwQBwTl6AwQAwTl+MA0GCSqGSIb3DQEBCwUAA4IBAQCKHf7Uxume4s7KgUKh
SDtkDAMc2cRNrhIoq5a/EpXQXBUDF7yxb3AxpqngbYvd1xhFrpSjFJYVFnQNlVr6
W7gmCQtNrizBrhh+of3PykBCXgiEMtdVEtafrEXGx6TwsZ/XkAVxePmw5VdUj/cF
FT+p60QDrCLKFKNtXZ/nltt1LXRH3Pbe6EpBWllDd4RC/9Lz7EvyaconrlITuW1M
GAlXhW0ejQtCwTn4s6k7xTbYn4rGk1+DPnDynqoPV6gOTHf6TjSkLgJsbNDX4uJi
9efOMQX1AFY3IiMJZ0kJBkDxkYMr4mmqSTdc6WimRyW8ux3KE6R8tXJ8qQyD4QTs
NUWO
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:19 2024 by rpki-client on console-ams.rpki-client.org