Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/faUWb6BgI5IdX1jkEf9fVJ7x70U.roa
File: faUWb6BgI5IdX1jkEf9fVJ7x70U.roa (raw, json)
Hash identifier: nEZu/TdWxBZh9t96WWKoGHwtL5YY89EFhzp8uM+7efY=
Subject key identifier: 7D:A5:16:6F:A0:60:23:92:1D:5F:58:E4:11:FF:5F:54:9E:F1:EF:45
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 018573439C231B7C83FBEE40F2CDBE04B62F
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/faUWb6BgI5IdX1jkEf9fVJ7x70U.roa
Signing time: Mon 02 Jan 2023 16:14:48 +0000
ROA not before: Mon 02 Jan 2023 16:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59771
IP address blocks: 193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
2001:678:39c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:9c:23:1b:7c:83:fb:ee:40:f2:cd:be:04:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: Jan 2 16:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da5166fa06023921d5f58e411ff5f549ef1ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:3c:4d:69:e9:2d:0d:ed:f0:33:de:b6:8e:
80:8d:db:30:2e:f3:a2:41:7b:13:6a:ae:3b:02:9e:
5d:df:47:a4:8e:23:26:8c:ac:c0:ba:64:bd:2c:85:
b7:6f:b1:f9:03:bc:ba:f3:fd:a8:ba:56:34:7a:53:
6a:99:f7:38:ae:b5:95:5e:46:8e:72:20:d9:30:a0:
e0:01:68:1b:e1:aa:14:98:a7:1f:3b:24:bc:a8:56:
6a:dd:c2:01:d1:a7:ef:8a:6b:a8:f0:4b:34:42:e6:
d8:85:5e:50:6e:20:53:3a:f4:d8:19:b0:9a:8c:0e:
09:34:07:1b:53:13:89:33:1c:c5:10:09:78:28:b0:
0b:25:af:40:f8:0d:50:f9:5d:67:d9:7b:90:6a:06:
ee:24:46:c6:db:7e:51:71:69:67:83:18:a9:bf:24:
56:47:66:be:8b:98:b9:cf:5f:08:d8:1f:c1:e2:67:
2f:d5:ec:32:c2:a5:5f:cd:65:72:61:9e:14:f3:86:
44:6e:64:e3:b5:dd:30:58:7b:84:33:ac:32:e6:86:
7e:80:89:0b:13:5e:3d:03:c0:46:df:f7:14:c2:fa:
90:d6:bb:1a:5c:ac:78:1a:e0:9a:31:30:7d:11:99:
ed:f2:cd:60:3b:fe:73:ca:12:30:3d:6f:9d:68:04:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:16:6F:A0:60:23:92:1D:5F:58:E4:11:FF:5F:54:9E:F1:EF:45
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/faUWb6BgI5IdX1jkEf9fVJ7x70U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
77:cb:bd:6d:d1:a4:48:cb:70:c5:40:35:2c:7f:38:a6:c8:3b:
4f:7a:50:78:aa:3e:ca:34:d0:80:e7:a3:7f:85:67:00:a2:18:
9b:1e:df:02:39:88:ab:e2:fe:2c:cb:30:9e:5c:8a:d8:7a:3b:
a5:8d:63:b2:55:6c:fb:a6:f7:26:66:ea:55:c0:c7:f6:ad:43:
2a:b7:be:fa:8f:59:1c:60:81:7c:df:38:c1:5a:19:f5:06:cf:
48:12:a3:ac:02:78:ad:5a:de:f7:ab:ae:ed:47:83:18:d0:ac:
59:38:1d:cf:38:08:47:de:77:84:d4:b3:18:11:47:73:0f:ef:
9b:d5:19:56:5c:d6:7d:53:77:7e:53:d4:17:2d:63:ec:26:74:
80:42:d0:1a:57:e8:a8:13:ca:1f:54:76:8a:67:eb:d6:b9:27:
1f:73:86:23:c6:0d:42:67:da:8d:01:d7:ea:2c:f5:fb:e1:0e:
b2:48:ec:08:e2:1f:ec:9f:d2:a7:e4:49:40:90:ee:9b:d4:c4:
be:e3:38:b1:63:2b:f4:84:19:ff:fa:55:1e:3e:2b:a0:62:ef:
94:56:5f:47:17:88:d7:0d:b4:15:83:ce:a4:06:20:16:b9:f1:
e2:b9:55:95:77:b2:fa:0c:2a:cd:34:d6:3c:8b:1f:1b:a3:e7:
08:f6:94:34
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVzQ5wjG3yD++5A8s2+BLYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDU4MTc2N2FmNDU3OWU0NGRhOTc3YjEwODJkOTRiM2M3
YjkyOTgwHhcNMjMwMTAyMTYxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGE1MTY2ZmEwNjAyMzkyMWQ1ZjU4ZTQxMWZmNWY1NDllZjFlZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudg8TWnpLQ3t8DPeto6AjdswLvOi
QXsTaq47Ap5d30ekjiMmjKzAumS9LIW3b7H5A7y68/2oulY0elNqmfc4rrWVXkaO
ciDZMKDgAWgb4aoUmKcfOyS8qFZq3cIB0afvimuo8Es0QubYhV5QbiBTOvTYGbCa
jA4JNAcbUxOJMxzFEAl4KLALJa9A+A1Q+V1n2XuQagbuJEbG235RcWlngxipvyRW
R2a+i5i5z18I2B/B4mcv1ewywqVfzWVyYZ4U84ZEbmTjtd0wWHuEM6wy5oZ+gIkL
E149A8BG3/cUwvqQ1rsaXKx4GuCaMTB9EZnt8s1gO/5zyhIwPW+daAScrwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFH2lFm+gYCOSHV9Y5BH/X1Se8e9FMB8GA1UdIwQY
MBaAFO4FgXZ69FeeRNqXexCC2Us8e5KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMt
NmRiYmEyYjFkY2E3LzEvZmFVV2I2QmdJNUlkWDFqa0VmOWZWSjd4NzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMtNmRiYmEyYjFkY2E3
LzEvN2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwWl3AwQA
w1XgMA8EAgACMAkDBwAgAQZ4A5wwDQYJKoZIhvcNAQELBQADggEBAHfLvW3RpEjL
cMVANSx/OKbIO096UHiqPso00IDno3+FZwCiGJse3wI5iKvi/izLMJ5cith6O6WN
Y7JVbPum9yZm6lXAx/atQyq3vvqPWRxggXzfOMFaGfUGz0gSo6wCeK1a3verru1H
gxjQrFk4Hc84CEfed4TUsxgRR3MP75vVGVZc1n1Td35T1BctY+wmdIBC0BpX6KgT
yh9Udopn69a5Jx9zhiPGDUJn2o0B1+os9fvhDrJI7AjiH+yf0qfkSUCQ7pvUxL7j
OLFjK/SEGf/6VR4+K6Bi75RWX0cXiNcNtBWDzqQGIBa58eK5VZV3svoMKs001jyL
Hxuj5wj2lDQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:04 2024 by rpki-client on console-ams.rpki-client.org