Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F80XWABHxK77vpvjfcwhu7EfcdI.roa
File: F80XWABHxK77vpvjfcwhu7EfcdI.roa (raw, json)
Hash identifier: WpW/LHLgocATzoccy5RYZq/RKs0ujN3FuflJGPNXkNw=
Subject key identifier: 17:CD:17:58:00:47:C4:AE:FB:BE:9B:E3:7D:CC:21:BB:B1:1F:71:D2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DF9A09A5E8DF24B08D8EEA202483BAAEC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F80XWABHxK77vpvjfcwhu7EfcdI.roa
Signing time: Fri 01 Mar 2024 10:47:48 +0000
ROA not before: Fri 01 Mar 2024 10:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.58.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 13:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:a0:9a:5e:8d:f2:4b:08:d8:ee:a2:02:48:3b:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 1 10:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17cd17580047c4aefbbe9be37dcc21bbb11f71d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:b6:80:d4:d0:ef:15:bb:cf:c1:8b:55:83:
4a:70:93:80:02:a7:67:e0:9f:2b:1f:08:04:d2:98:
ba:84:7e:bd:f4:c4:9e:40:e8:4a:18:b3:1c:3f:a2:
76:db:2e:e5:2b:c8:60:96:2c:16:f3:cb:2e:34:4d:
f0:6b:05:12:e7:93:56:b7:7d:77:24:2f:a1:b9:e8:
71:8c:43:53:be:34:62:87:8a:42:d4:9b:95:e2:22:
76:5c:ab:69:06:26:11:1a:cf:a1:af:9a:ba:c7:b3:
94:d5:45:93:4c:06:0f:e1:0d:9e:4c:ea:4c:50:32:
28:23:49:a5:db:11:26:ca:42:30:22:dd:6c:cf:82:
07:5a:66:8b:10:97:c8:c2:2a:0c:d8:21:3d:8d:c2:
38:35:f5:fe:e6:e6:66:33:72:a1:24:2a:18:e9:e0:
80:b9:35:88:38:ce:ef:69:ba:c5:14:b1:7a:0c:a0:
be:f9:9d:5a:6c:14:65:99:88:43:5c:be:e9:3a:a1:
95:27:6a:c2:f5:c9:5f:b1:8b:c0:57:e9:f6:e6:ac:
79:8d:4a:a8:30:5c:e5:9a:85:e7:4b:de:8b:2c:68:
4b:c0:17:85:28:ff:a2:0d:c6:c2:ba:8b:87:a0:b4:
bf:56:7c:93:ff:b3:f4:6c:78:45:8e:ad:53:ad:08:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:17:58:00:47:C4:AE:FB:BE:9B:E3:7D:CC:21:BB:B1:1F:71:D2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F80XWABHxK77vpvjfcwhu7EfcdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:52:f2:ae:73:42:72:3a:13:f3:4d:41:8a:ae:e2:97:b3:e9:
b3:39:60:50:73:35:33:d1:28:71:60:de:80:31:b2:72:11:16:
d1:91:be:64:aa:5b:b1:5c:97:98:73:e2:ed:22:f4:d4:95:54:
36:03:a1:15:bf:e4:54:e7:4b:30:c3:f3:9e:c2:a2:f7:47:e2:
45:76:4b:2a:e2:91:54:9e:41:19:96:b7:7c:6c:72:77:d2:5c:
ff:86:f2:dd:77:5e:f3:ee:5c:9f:a4:2c:9e:ec:c9:ac:1b:ca:
59:22:4c:5a:73:51:92:bd:a3:f3:b0:ea:5e:01:6a:cd:b5:84:
55:b1:1e:ad:d5:63:4a:4b:93:e4:31:7b:67:29:c5:7d:27:18:
f0:ff:7e:53:2c:96:57:b2:a8:b7:43:c0:21:fb:e1:6b:96:56:
7a:97:c8:be:92:6f:a8:a2:f6:7b:03:4f:2c:7f:d4:4f:de:b9:
e6:f0:dd:67:e5:ca:9d:b4:c1:2a:ce:7a:6b:70:71:f4:6d:61:
ac:15:7b:88:ce:96:b5:c8:09:b5:41:4b:e0:55:da:6b:c3:60:
31:2e:78:b6:c9:b1:cc:ec:60:d3:2e:37:3e:f3:91:c9:6a:8e:
00:1b:ec:70:72:7f:2b:0c:fe:d9:78:8d:b4:23:46:23:32:c4:
0e:44:b3:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY35oJpejfJLCNjuogJIO6rsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMzAxMTA0NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2NkMTc1ODAwNDdjNGFlZmJiZTliZTM3ZGNjMjFiYmIxMWY3MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPy2gNTQ7xW7z8GLVYNKcJOAAqdn
4J8rHwgE0pi6hH699MSeQOhKGLMcP6J22y7lK8hgliwW88suNE3wawUS55NWt313
JC+huehxjENTvjRih4pC1JuV4iJ2XKtpBiYRGs+hr5q6x7OU1UWTTAYP4Q2eTOpM
UDIoI0ml2xEmykIwIt1sz4IHWmaLEJfIwioM2CE9jcI4NfX+5uZmM3KhJCoY6eCA
uTWIOM7vabrFFLF6DKC++Z1abBRlmYhDXL7pOqGVJ2rC9clfsYvAV+n25qx5jUqo
MFzlmoXnS96LLGhLwBeFKP+iDcbCuouHoLS/VnyT/7P0bHhFjq1TrQihtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfNF1gAR8Su+76b433MIbuxH3HSMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRjgwWFdBQkh4Szc3dnB2amZjd2h1N0VmY2RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTqRMA0G
CSqGSIb3DQEBCwUAA4IBAQChUvKuc0JyOhPzTUGKruKXs+mzOWBQczUz0ShxYN6A
MbJyERbRkb5kqluxXJeYc+LtIvTUlVQ2A6EVv+RU50sww/OewqL3R+JFdksq4pFU
nkEZlrd8bHJ30lz/hvLdd17z7lyfpCye7MmsG8pZIkxac1GSvaPzsOpeAWrNtYRV
sR6t1WNKS5PkMXtnKcV9Jxjw/35TLJZXsqi3Q8Ah++FrllZ6l8i+km+oovZ7A08s
f9RP3rnm8N1n5cqdtMEqznprcHH0bWGsFXuIzpa1yAm1QUvgVdprw2AxLni2ybHM
7GDTLjc+85HJao4AG+xwcn8rDP7ZeI20I0YjMsQORLND
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org