Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/fxcB-tKYGS4xO8Cweyu4f6aEjiQ.roa
File: fxcB-tKYGS4xO8Cweyu4f6aEjiQ.roa (raw, json)
Hash identifier: HSdp9te6Pb75s1VN3rFC1cnnVI/ZhJ5DLeWCb/Afex4=
Subject key identifier: 7F:17:01:FA:D2:98:19:2E:31:3B:C0:B0:7B:2B:B8:7F:A6:84:8E:24
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 01856F023F36E344F16FEE1EFC4E15356AA4
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/fxcB-tKYGS4xO8Cweyu4f6aEjiQ.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3f:36:e3:44:f1:6f:ee:1e:fc:4e:15:35:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1701fad298192e313bc0b07b2bb87fa6848e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:1e:f6:64:44:81:e1:f6:8a:01:31:3d:a0:
f4:c0:b8:55:ae:97:80:20:eb:94:dc:06:89:72:7e:
96:9c:93:c4:20:9e:b9:72:6d:38:6e:83:4d:3a:8e:
d2:f6:e3:35:a5:97:4a:b8:a8:f4:04:c6:a6:31:cb:
cf:b8:a7:f5:85:60:27:2b:04:ec:74:6a:22:c3:66:
a9:af:58:9d:e0:c2:ce:43:93:dd:15:b8:33:7d:a5:
5d:62:76:a3:d2:c6:12:ef:9b:a0:7d:17:c9:c9:a0:
94:a7:42:d5:47:ea:c1:39:8e:0d:ea:8e:c9:db:8a:
38:0a:cf:7b:f8:33:2b:b3:ad:86:73:72:47:0e:2b:
47:f4:26:6b:24:f6:08:26:77:aa:a4:b9:4d:70:52:
8a:6b:55:aa:2f:48:3b:18:fd:00:b5:ee:ae:32:74:
69:90:18:31:db:89:e4:38:14:72:11:9e:d1:f2:23:
c6:5f:b0:a6:98:e2:75:39:a9:5d:8d:58:cd:d2:f2:
73:94:8a:13:e9:0c:a9:9f:99:d1:61:45:fa:2c:c4:
16:b2:be:8d:ff:48:38:8e:a3:e3:08:4c:05:ed:fd:
1f:74:d0:58:d6:e4:aa:61:88:dd:8c:bc:98:ce:34:
c0:c9:28:d0:7e:37:30:c6:0d:5e:43:fc:c5:1a:f5:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:01:FA:D2:98:19:2E:31:3B:C0:B0:7B:2B:B8:7F:A6:84:8E:24
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/fxcB-tKYGS4xO8Cweyu4f6aEjiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.129.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b2:7b:c9:a1:6d:28:42:fe:90:d3:07:e8:f7:60:88:81:12:
fd:5e:36:73:16:d3:79:c6:13:da:d9:13:10:55:cc:ee:e5:88:
b7:6a:7c:3f:3e:06:fc:48:71:c5:0d:ce:12:36:be:77:2b:52:
4f:b2:b5:4a:4e:27:0a:6c:3d:22:53:b2:e6:9c:de:a6:58:56:
49:b4:4f:5f:55:cf:da:b0:04:5a:55:81:36:b3:6d:7a:fc:73:
96:86:03:d6:d2:2e:0a:6c:67:fc:62:d4:b9:9c:f1:9a:be:8d:
db:4c:8a:34:71:50:4a:66:d1:2d:dd:0c:ad:6e:75:56:da:33:
c4:0a:62:9b:b0:b2:76:31:8c:d5:0e:28:5e:ac:2a:3b:b4:f1:
c2:8c:ad:a9:63:d6:9d:22:9e:fb:59:65:47:e9:2b:e1:f1:36:
16:fc:43:c0:5f:14:f1:78:2a:90:c3:ba:8e:cc:64:a3:18:27:
03:0a:0a:59:72:c4:ef:d6:53:f0:49:55:3e:6a:48:9c:f4:b9:
83:60:14:32:30:ca:32:08:f3:82:7f:95:a8:21:98:0a:ff:45:
37:04:9b:6f:05:6d:e2:bf:de:96:1c:2e:0b:93:c3:94:55:cc:
e0:b3:28:a7:89:a4:f9:85:94:83:b6:9f:7f:1d:0f:3d:02:32:
45:37:e3:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAj8240Txb+4e/E4VNWqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy
Njg2YmYwHhcNMjMwMTAxMjAyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjE3MDFmYWQyOTgxOTJlMzEzYmMwYjA3YjJiYjg3ZmE2ODQ4ZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAoe9mREgeH2igExPaD0wLhVrpeA
IOuU3AaJcn6WnJPEIJ65cm04boNNOo7S9uM1pZdKuKj0BMamMcvPuKf1hWAnKwTs
dGoiw2apr1id4MLOQ5PdFbgzfaVdYnaj0sYS75ugfRfJyaCUp0LVR+rBOY4N6o7J
24o4Cs97+DMrs62Gc3JHDitH9CZrJPYIJneqpLlNcFKKa1WqL0g7GP0Ate6uMnRp
kBgx24nkOBRyEZ7R8iPGX7CmmOJ1OaldjVjN0vJzlIoT6Qypn5nRYUX6LMQWsr6N
/0g4jqPjCEwF7f0fdNBY1uSqYYjdjLyYzjTAySjQfjcwxg1eQ/zFGvUROwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH8XAfrSmBkuMTvAsHsruH+mhI4kMB8GA1UdIwQY
MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt
ODlhOTAyMzI2MWYxLzEvZnhjQi10S1lHUzR4TzhDd2V5dTRmNmFFamlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx
LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmaBMA0G
CSqGSIb3DQEBCwUAA4IBAQBHsnvJoW0oQv6Q0wfo92CIgRL9XjZzFtN5xhPa2RMQ
Vczu5Yi3anw/Pgb8SHHFDc4SNr53K1JPsrVKTicKbD0iU7LmnN6mWFZJtE9fVc/a
sARaVYE2s216/HOWhgPW0i4KbGf8YtS5nPGavo3bTIo0cVBKZtEt3QytbnVW2jPE
CmKbsLJ2MYzVDiherCo7tPHCjK2pY9adIp77WWVH6Svh8TYW/EPAXxTxeCqQw7qO
zGSjGCcDCgpZcsTv1lPwSVU+akic9LmDYBQyMMoyCPOCf5WoIZgK/0U3BJtvBW3i
v96WHC4Lk8OUVczgsyiniaT5hZSDtp9/HQ89AjJFN+MR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:53 2024 by rpki-client on console-fra.rpki-client.org