Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/FGnFneH8t9v1ED5vXzXiDELP7nk.roa
File: FGnFneH8t9v1ED5vXzXiDELP7nk.roa (raw, json)
Hash identifier: CxIYC4zIxj7nan96dSI7DddGrlV/iP0Fo1KGKOEnp90=
Subject key identifier: 14:69:C5:9D:E1:FC:B7:DB:F5:10:3E:6F:5F:35:E2:0C:42:CF:EE:79
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 018BEB88A0347085A72C53611CE7AD2EAB19
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/FGnFneH8t9v1ED5vXzXiDELP7nk.roa
Signing time: Mon 20 Nov 2023 07:01:21 +0000
ROA not before: Mon 20 Nov 2023 07:01:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208336
IP address blocks: 193.17.53.0/24 maxlen: 24
193.203.110.0/24 maxlen: 24
193.203.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:88:a0:34:70:85:a7:2c:53:61:1c:e7:ad:2e:ab:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Nov 20 07:01:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1469c59de1fcb7dbf5103e6f5f35e20c42cfee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:55:07:be:d8:0f:16:3a:98:c7:e2:e5:9b:
28:58:68:38:eb:a1:e7:d2:e1:85:fe:d5:b0:5f:8c:
11:11:52:84:e8:49:b9:a5:d5:fa:98:43:d5:14:38:
93:69:21:12:7a:a9:30:b2:cd:86:10:54:c2:39:17:
36:05:5d:43:07:14:b3:7b:69:8c:41:46:97:ce:4f:
2c:56:0d:16:17:09:d2:ec:93:15:dd:2f:0b:98:4e:
ae:fa:62:b4:5b:31:3a:97:29:28:74:73:3d:27:d2:
2b:87:d1:20:88:46:ba:e7:16:d9:d5:03:fb:07:a3:
ca:bb:44:c7:40:d4:0f:e6:6e:8f:52:dc:08:4f:81:
68:45:64:29:60:0e:94:6c:bf:e2:76:03:36:8a:04:
ea:1f:cd:24:a9:94:82:ca:7e:85:6d:31:26:91:82:
35:10:b4:9a:5b:25:45:59:29:48:9c:cf:ed:35:87:
a4:c1:d4:90:13:48:de:f4:df:73:03:1c:94:a6:28:
99:7c:52:eb:f1:6c:6f:d9:8b:01:8e:84:9c:dc:ad:
90:b6:38:dd:15:72:b2:e2:05:70:f3:3a:42:a2:82:
fc:bc:bf:a9:c1:8b:41:b8:26:5b:a6:57:d0:a0:44:
da:d6:30:71:74:db:ef:2a:02:48:7b:ed:53:b1:fe:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:C5:9D:E1:FC:B7:DB:F5:10:3E:6F:5F:35:E2:0C:42:CF:EE:79
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/FGnFneH8t9v1ED5vXzXiDELP7nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.53.0/24
193.203.24.0/24
193.203.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:58:25:bf:16:a9:e2:36:94:01:25:6c:cb:a1:3e:98:a7:39:
4d:9f:af:f0:12:3f:73:70:f6:00:ed:df:3b:c6:06:ba:32:22:
fe:12:af:f3:4c:15:61:68:0b:54:b9:6e:9b:fe:0c:76:0e:f0:
75:87:e3:6d:82:00:06:22:86:5b:ee:6d:af:33:ad:4e:5e:31:
d7:60:f1:31:37:42:ab:71:bc:bb:69:b2:24:d7:6f:ce:ea:22:
9d:99:88:64:a3:d3:79:a0:73:d9:f1:57:cd:98:a0:6d:27:c5:
17:8e:ee:6e:f6:b7:a0:64:f9:2e:e5:d3:73:e9:23:cd:4e:2c:
be:54:c9:30:e4:59:17:dc:0e:b7:78:3e:54:5f:41:3f:03:79:
46:30:25:0b:76:56:cc:82:b0:6d:33:1a:4c:08:0a:aa:cd:99:
1f:92:7f:af:b0:fb:4d:cb:06:fd:57:01:35:95:ef:ea:f7:5f:
e7:44:9a:77:5d:23:7f:9b:d2:3b:d3:c4:42:a2:b6:e8:9f:de:
83:d4:0f:22:ab:04:5f:cb:6f:0e:83:b8:49:da:36:92:ef:a0:
43:e5:d9:48:e9:de:70:65:ec:2d:bb:f5:ea:a6:3d:f2:fa:b6:
71:ea:0e:3e:4a:e1:7a:f4:7d:a3:2d:ea:1e:be:6a:9b:ec:15:
be:a5:33:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvriKA0cIWnLFNhHOetLqsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2
OWU0ZmMwHhcNMjMxMTIwMDcwMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDY5YzU5ZGUxZmNiN2RiZjUxMDNlNmY1ZjM1ZTIwYzQyY2ZlZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQdVB77YDxY6mMfi5ZsoWGg466Hn
0uGF/tWwX4wREVKE6Em5pdX6mEPVFDiTaSESeqkwss2GEFTCORc2BV1DBxSze2mM
QUaXzk8sVg0WFwnS7JMV3S8LmE6u+mK0WzE6lykodHM9J9Irh9EgiEa65xbZ1QP7
B6PKu0THQNQP5m6PUtwIT4FoRWQpYA6UbL/idgM2igTqH80kqZSCyn6FbTEmkYI1
ELSaWyVFWSlInM/tNYekwdSQE0je9N9zAxyUpiiZfFLr8Wxv2YsBjoSc3K2Qtjjd
FXKy4gVw8zpCooL8vL+pwYtBuCZbplfQoETa1jBxdNvvKgJIe+1Tsf5o+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBRpxZ3h/Lfb9RA+b1814gxCz+55MB8GA1UdIwQY
MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt
MDlkYmQwOGNiZTJkLzEvRkduRm5lSDh0OXYxRUQ1dlh6WGlERUxQN25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk
LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRE1AwQA
wcsYAwQAwctuMA0GCSqGSIb3DQEBCwUAA4IBAQA6WCW/FqniNpQBJWzLoT6YpzlN
n6/wEj9zcPYA7d87xga6MiL+Eq/zTBVhaAtUuW6b/gx2DvB1h+NtggAGIoZb7m2v
M61OXjHXYPExN0Krcby7abIk12/O6iKdmYhko9N5oHPZ8VfNmKBtJ8UXju5u9reg
ZPku5dNz6SPNTiy+VMkw5FkX3A63eD5UX0E/A3lGMCULdlbMgrBtMxpMCAqqzZkf
kn+vsPtNywb9VwE1le/q91/nRJp3XSN/m9I708RCorbon96D1A8iqwRfy28Og7hJ
2jaS76BD5dlI6d5wZewtu/Xqpj3y+rZx6g4+SuF69H2jLeoevmqb7BW+pTPU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:32 2024 by rpki-client on console-fra.rpki-client.org