Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/FqpjLTU6ub5V___OMpH41RsFaN8.roa
File: FqpjLTU6ub5V___OMpH41RsFaN8.roa (raw, json)
Hash identifier: WCzzcNtJiBRw8xdsXIxFiJrAuM1zgX8+3TQdceyxxZQ=
Subject key identifier: 16:AA:63:2D:35:3A:B9:BE:55:FF:FF:CE:32:91:F8:D5:1B:05:68:DF
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA46AEE4D3E95A6756ACC33F7D35E1
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/FqpjLTU6ub5V___OMpH41RsFaN8.roa
Signing time: Mon 02 Jan 2023 13:44:48 +0000
ROA not before: Mon 02 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9069
IP address blocks: 195.130.96.0/20 maxlen: 20
195.251.64.0/19 maxlen: 19
83.212.64.0/22 maxlen: 22
2001:648:2330::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:46:ae:e4:d3:e9:5a:67:56:ac:c3:3f:7d:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16aa632d353ab9be55ffffce3291f8d51b0568df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:7d:36:a1:bd:17:ab:3f:ed:bf:2d:3a:c2:
0b:39:b5:12:30:f2:7c:71:23:8b:b7:f6:96:98:5c:
91:ae:40:f9:1c:d3:35:30:ad:ea:f0:2a:3c:24:c6:
95:5b:26:aa:47:d3:00:8e:38:19:cb:75:29:6c:0e:
61:53:6b:75:7c:a4:ab:14:c6:d3:3d:c5:d7:86:a5:
03:a5:85:2a:0e:f4:69:7d:b1:40:75:cd:a2:f7:6c:
57:12:6f:21:5b:e7:3e:53:0e:31:35:3f:f4:9b:ac:
77:d4:92:58:f6:14:f8:a5:c6:3b:22:36:0b:1b:5d:
af:bf:fb:a5:f6:f5:fb:7c:c2:6a:78:c0:3c:a6:b3:
a7:e9:6d:db:c1:13:66:ae:16:0d:f3:4f:b1:5a:d9:
03:aa:9d:92:fb:09:b8:74:36:4b:98:4b:0a:8f:bd:
05:a7:aa:5f:68:44:53:9a:db:85:e4:48:a5:23:3c:
0e:e5:85:ee:8d:75:30:4c:c1:d1:36:e0:23:b0:04:
f5:76:ba:1b:e9:27:6f:c2:b7:9d:bf:e8:09:c1:10:
56:44:e0:16:49:d6:ad:2f:a7:50:c7:38:2d:54:b8:
7c:3b:a4:ad:f3:6b:f6:cc:4e:44:99:ab:7e:ef:ab:
65:f7:b9:c3:a7:7d:34:08:dd:23:65:dd:47:bc:6f:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:63:2D:35:3A:B9:BE:55:FF:FF:CE:32:91:F8:D5:1B:05:68:DF
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/FqpjLTU6ub5V___OMpH41RsFaN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.64.0/22
195.130.96.0/20
195.251.64.0/19
IPv6:
2001:648:2330::/48
Signature Algorithm: sha256WithRSAEncryption
5e:2e:0e:4f:df:19:f9:0b:c5:7d:84:19:28:a5:74:97:ef:46:
6c:21:05:66:67:b4:52:ef:dc:17:bb:69:2f:be:b2:27:08:d9:
e5:22:1a:c5:42:3c:78:76:91:88:51:17:f6:fb:9a:0d:eb:57:
fb:ed:b7:7c:08:12:c4:b8:1f:f3:39:c4:55:f2:32:34:b1:58:
58:89:75:a6:c1:8d:12:4d:16:74:99:f9:48:b3:8b:7f:ad:c1:
45:fe:60:d8:cd:b0:a0:e4:5e:29:01:db:45:ff:16:ba:ac:f5:
7e:e2:e3:f9:56:4e:78:2c:99:d5:4a:c4:2e:57:1e:00:ff:94:
18:15:62:8f:0f:98:e5:d6:c1:f9:22:73:ca:bf:a8:62:1b:3f:
6a:ee:3e:1b:01:8e:ab:98:a8:a3:a1:ce:55:0b:7a:33:c0:6a:
d2:21:dc:26:8e:1e:3b:ea:f4:b0:d1:53:82:8c:a8:2c:92:1d:
85:d0:ad:e4:90:c9:f1:f3:f7:ef:f2:45:88:74:3b:fc:25:a7:
66:59:e7:66:ae:4d:17:67:e5:02:5e:00:9a:4d:ac:a8:31:e6:
f3:0c:34:e6:ea:bd:c5:f5:c0:38:de:bd:5d:e2:fc:1b:df:09:
d6:07:bb:84:a2:c2:cb:8e:11:e1:b4:30:c7:48:0b:c1:d8:53:
dc:e0:05:4a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVyukau5NPpWmdWrMM/fTXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjMwMTAyMTM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmFhNjMyZDM1M2FiOWJlNTVmZmZmY2UzMjkxZjhkNTFiMDU2OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIh9NqG9F6s/7b8tOsILObUSMPJ8
cSOLt/aWmFyRrkD5HNM1MK3q8Co8JMaVWyaqR9MAjjgZy3UpbA5hU2t1fKSrFMbT
PcXXhqUDpYUqDvRpfbFAdc2i92xXEm8hW+c+Uw4xNT/0m6x31JJY9hT4pcY7IjYL
G12vv/ul9vX7fMJqeMA8prOn6W3bwRNmrhYN80+xWtkDqp2S+wm4dDZLmEsKj70F
p6pfaERTmtuF5EilIzwO5YXujXUwTMHRNuAjsAT1drob6Sdvwredv+gJwRBWROAW
SdatL6dQxzgtVLh8O6St82v2zE5Emat+76tl97nDp300CN0jZd1HvG8LCwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFBaqYy01Orm+Vf//zjKR+NUbBWjfMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvRnFwakxUVTZ1YjVWX19fT01wSDQxUnNGYU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCU9RAAwQE
w4JgAwQFw/tAMA8EAgACMAkDBwAgAQZIIzAwDQYJKoZIhvcNAQELBQADggEBAF4u
Dk/fGfkLxX2EGSildJfvRmwhBWZntFLv3Be7aS++sicI2eUiGsVCPHh2kYhRF/b7
mg3rV/vtt3wIEsS4H/M5xFXyMjSxWFiJdabBjRJNFnSZ+Uizi3+twUX+YNjNsKDk
XikB20X/Frqs9X7i4/lWTngsmdVKxC5XHgD/lBgVYo8PmOXWwfkic8q/qGIbP2ru
PhsBjquYqKOhzlULejPAatIh3CaOHjvq9LDRU4KMqCySHYXQreSQyfHz9+/yRYh0
O/wlp2ZZ52auTRdn5QJeAJpNrKgx5vMMNObqvcX1wDjevV3i/BvfCdYHu4SiwsuO
EeG0MMdIC8HYU9zgBUo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org