Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ab_soO3N9y898-KTlWesBANL4Do.roa
File: ab_soO3N9y898-KTlWesBANL4Do.roa (raw, json)
Hash identifier: E8oDjML9jWLLYVsIC6qorGZcHD5lDpfH5oQ3JP8cKWM=
Subject key identifier: 69:BF:EC:A0:ED:CD:F7:2F:3D:F3:E2:93:95:67:AC:04:03:4B:E0:3A
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018722B84DBFD31AE4F594E101C85B19F966
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ab_soO3N9y898-KTlWesBANL4Do.roa
Signing time: Mon 27 Mar 2023 10:58:36 +0000
ROA not before: Mon 27 Mar 2023 10:58:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 193.92.8.0/22 maxlen: 24
213.16.192.0/20 maxlen: 24
185.4.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:b8:4d:bf:d3:1a:e4:f5:94:e1:01:c8:5b:19:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Mar 27 10:58:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69bfeca0edcdf72f3df3e2939567ac04034be03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:b3:52:dc:06:03:c6:93:5d:7f:7e:a5:a2:
47:31:ca:42:f6:db:e4:c4:c7:6f:d5:03:71:08:d6:
02:50:c3:36:aa:2b:37:c5:bd:e2:5b:e6:44:cb:47:
8c:4a:b4:f2:6f:e1:35:81:2d:22:34:d1:84:ea:6d:
97:23:d6:e8:a1:71:68:fa:cc:c9:e6:dc:23:64:64:
fa:83:8a:b5:1d:08:fb:e9:94:b5:f4:bd:ad:d3:17:
be:b8:5f:93:07:00:d1:7e:f9:b1:65:12:19:af:5e:
09:91:75:5d:b7:fc:d3:a9:ec:64:07:99:d1:47:62:
5a:0b:c6:5f:6b:0b:6b:95:44:c4:ca:e8:d2:19:13:
10:13:f4:60:db:5b:52:fa:ff:5d:d2:c5:93:51:bd:
fa:f8:ea:c3:35:09:5c:ea:9c:7e:ce:b2:02:62:de:
35:3f:96:e0:fc:36:c5:24:e3:99:5a:30:ca:29:1d:
73:c1:3f:ad:d9:35:2e:68:72:e0:52:39:0a:57:79:
53:de:9b:d9:4a:9c:52:d8:b0:f3:19:ad:79:8b:17:
6b:d4:4b:d0:fa:02:38:b9:b2:2d:99:26:5d:d4:49:
9b:ed:84:97:93:f3:db:a0:a3:87:5b:84:ab:ea:6e:
cf:fd:5f:7b:c4:9d:89:e1:f5:93:e1:f0:93:67:4c:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BF:EC:A0:ED:CD:F7:2F:3D:F3:E2:93:95:67:AC:04:03:4B:E0:3A
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ab_soO3N9y898-KTlWesBANL4Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.88.0/22
193.92.8.0/22
213.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:4d:cf:4e:1d:cb:55:14:7a:77:19:27:96:ed:b8:df:86:41:
bd:be:77:bf:04:1a:9d:2b:36:19:74:58:1e:96:23:82:a0:55:
21:75:b2:e0:dd:93:15:a3:75:6d:2f:e6:1c:0a:74:f8:36:3c:
b9:4c:de:a8:99:6e:7c:ae:a8:a5:6d:7a:ff:5f:7d:b1:ee:ba:
07:ed:59:7a:0f:4e:ae:86:75:4a:96:fd:ab:c8:e8:72:c7:bf:
4c:0a:8e:85:47:a2:5c:0d:56:9a:4e:b0:bd:78:82:40:98:ab:
67:ad:a9:26:5c:de:a2:32:ed:f7:3d:12:80:82:d3:72:15:65:
ca:28:4b:85:34:52:dd:ff:ba:59:e2:bb:4f:88:a6:a0:4c:7b:
7f:72:73:8b:c6:da:cc:fb:a7:be:1c:94:80:e2:84:33:dc:a8:
c4:fc:73:06:e5:dd:c0:20:98:2a:1c:50:6b:db:ba:7a:e3:2c:
9a:dd:a1:c7:2c:02:9c:d0:32:b8:ba:c0:f8:8f:4f:e5:32:c6:
58:e4:28:16:8d:96:79:08:89:8a:91:7b:51:f7:7a:a7:83:97:
b0:ee:1d:53:e1:78:29:29:97:48:08:68:26:38:0f:de:b0:3f:
85:17:ed:ff:44:99:3b:25:7c:5c:b4:63:52:77:e8:2c:ab:56:
58:cb:67:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYciuE2/0xrk9ZThAchbGflmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1
MjYxNDMwHhcNMjMwMzI3MTA1ODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWJmZWNhMGVkY2RmNzJmM2RmM2UyOTM5NTY3YWMwNDAzNGJlMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2+zUtwGA8aTXX9+paJHMcpC9tvk
xMdv1QNxCNYCUMM2qis3xb3iW+ZEy0eMSrTyb+E1gS0iNNGE6m2XI9booXFo+szJ
5twjZGT6g4q1HQj76ZS19L2t0xe+uF+TBwDRfvmxZRIZr14JkXVdt/zTqexkB5nR
R2JaC8ZfawtrlUTEyujSGRMQE/Rg21tS+v9d0sWTUb36+OrDNQlc6px+zrICYt41
P5bg/DbFJOOZWjDKKR1zwT+t2TUuaHLgUjkKV3lT3pvZSpxS2LDzGa15ixdr1EvQ
+gI4ubItmSZd1Emb7YSXk/PboKOHW4Sr6m7P/V97xJ2J4fWT4fCTZ0yiQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGm/7KDtzfcvPfPik5VnrAQDS+A6MB8GA1UdIwQY
MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt
ZTY5ZjdhNWQyZDkwLzEvYWJfc29PM045eTg5OC1LVGxXZXNCQU5MNERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw
LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuQRYAwQC
wVwIAwQE1RDAMA0GCSqGSIb3DQEBCwUAA4IBAQBbTc9OHctVFHp3GSeW7bjfhkG9
vne/BBqdKzYZdFgeliOCoFUhdbLg3ZMVo3VtL+YcCnT4Njy5TN6omW58rqilbXr/
X32x7roH7Vl6D06uhnVKlv2ryOhyx79MCo6FR6JcDVaaTrC9eIJAmKtnrakmXN6i
Mu33PRKAgtNyFWXKKEuFNFLd/7pZ4rtPiKagTHt/cnOLxtrM+6e+HJSA4oQz3KjE
/HMG5d3AIJgqHFBr27p64yya3aHHLAKc0DK4usD4j0/lMsZY5CgWjZZ5CImKkXtR
93qng5ew7h1T4XgpKZdICGgmOA/esD+FF+3/RJk7JXxctGNSd+gsq1ZYy2cN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-ams.rpki-client.org