Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FsV_5YAQqhXdcvuJrigs6uiHnmg.roa
File: FsV_5YAQqhXdcvuJrigs6uiHnmg.roa (raw, json)
Hash identifier: XYO5/AaBYpUajEOVUDx5gwFh1MYqB5A5Acw5nAr/tjg=
Subject key identifier: 16:C5:7F:E5:80:10:AA:15:DD:72:FB:89:AE:28:2C:EA:E8:87:9E:68
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B8A699381A8E260B70C16BC341AA8B0C8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FsV_5YAQqhXdcvuJrigs6uiHnmg.roa
Signing time: Wed 01 Nov 2023 10:24:16 +0000
ROA not before: Wed 01 Nov 2023 10:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 185.255.125.0/24 maxlen: 24
185.238.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:69:93:81:a8:e2:60:b7:0c:16:bc:34:1a:a8:b0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 1 10:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c57fe58010aa15dd72fb89ae282ceae8879e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d4:d1:b5:7a:58:64:a6:a5:92:14:30:8e:2e:
84:14:a3:26:17:d9:49:1d:65:14:a5:6d:14:24:e7:
13:0d:8b:40:c7:02:48:99:0b:22:cf:5a:e7:94:1c:
6f:f8:cf:50:16:41:7e:e8:c0:29:3e:0d:04:af:2c:
fe:ea:ac:05:7c:75:93:31:e1:fe:61:b8:c2:9f:c4:
af:60:c1:12:c3:e9:dd:91:0c:f3:4a:55:5a:12:8a:
3d:ea:00:b7:c0:3d:88:63:8e:8d:59:e0:6e:19:66:
99:d9:af:cc:77:5c:f9:cc:31:ab:04:d4:4d:ae:ad:
81:bc:32:94:8e:54:89:4d:35:e8:69:ab:63:88:d2:
50:de:37:7a:25:d6:35:77:16:da:e3:4b:39:61:ce:
56:da:16:ee:9d:f7:3a:df:5c:58:9a:e3:68:1c:a5:
d3:05:d2:b2:e0:64:c3:9b:92:b5:47:01:c3:8a:4d:
81:f2:37:19:e9:6e:a7:7a:ab:05:fe:23:10:3c:e0:
93:57:2f:d8:8a:29:0b:ac:ce:68:bc:7e:97:be:5e:
54:b3:38:14:d2:05:cb:93:a6:61:4b:4c:18:6c:9a:
c2:36:f9:aa:13:c9:e3:37:ad:81:09:e0:cb:0e:c3:
55:1f:f8:45:b0:e9:61:f9:49:b4:63:bf:9f:ca:cb:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:7F:E5:80:10:AA:15:DD:72:FB:89:AE:28:2C:EA:E8:87:9E:68
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FsV_5YAQqhXdcvuJrigs6uiHnmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.231.0/24
185.255.125.0/24
Signature Algorithm: sha256WithRSAEncryption
67:32:ce:1b:f2:0a:6e:ba:b7:96:e0:19:83:d6:e4:c8:8a:8f:
23:7e:76:a6:f3:8a:1a:a7:c3:3c:22:48:60:26:f7:0d:6a:a4:
6e:b1:fb:a7:e8:25:e5:f2:0d:73:aa:d9:c0:2d:30:e1:fa:df:
c2:da:0e:ad:6b:c5:30:9e:15:83:d2:d7:18:d0:78:b7:b1:8d:
0c:01:3d:4b:b2:fc:71:94:59:e1:4b:b8:e1:31:d0:28:60:a8:
71:6b:3f:0a:ac:e9:0a:df:a1:f8:e0:7f:d7:aa:71:ca:aa:ab:
eb:b4:df:c1:e7:6f:fd:76:98:f5:a5:93:e6:4a:b7:a1:26:15:
77:34:43:7a:69:1c:d0:17:71:bc:53:07:74:d6:ce:4c:d3:10:
8c:bd:7c:9f:e0:09:59:49:47:c4:68:d6:e7:95:2c:06:b9:44:
40:75:8a:35:58:2f:1a:aa:a8:2f:4a:29:27:60:f6:12:93:2b:
de:b7:42:6a:2b:19:35:42:fa:93:ab:44:8e:9b:9d:43:31:17:
bc:c9:9a:b7:da:7f:19:ac:0c:fb:ff:6c:26:36:5d:87:23:8b:
dc:c2:b8:08:e7:db:fc:f4:11:90:9a:c7:50:30:c9:55:66:37:
08:36:cb:58:d4:60:e3:ed:08:fb:75:24:59:77:0e:b3:05:72:
99:9c:20:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuKaZOBqOJgtwwWvDQaqLDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMTAxMTAyNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM1N2ZlNTgwMTBhYTE1ZGQ3MmZiODlhZTI4MmNlYWU4ODc5ZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NTRtXpYZKalkhQwji6EFKMmF9lJ
HWUUpW0UJOcTDYtAxwJImQsiz1rnlBxv+M9QFkF+6MApPg0Eryz+6qwFfHWTMeH+
YbjCn8SvYMESw+ndkQzzSlVaEoo96gC3wD2IY46NWeBuGWaZ2a/Md1z5zDGrBNRN
rq2BvDKUjlSJTTXoaatjiNJQ3jd6JdY1dxba40s5Yc5W2hbunfc631xYmuNoHKXT
BdKy4GTDm5K1RwHDik2B8jcZ6W6neqsF/iMQPOCTVy/YiikLrM5ovH6Xvl5UszgU
0gXLk6ZhS0wYbJrCNvmqE8njN62BCeDLDsNVH/hFsOlh+Um0Y7+fystR5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBbFf+WAEKoV3XL7ia4oLOroh55oMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRnNWXzVZQVFxaFhkY3Z1SnJpZ3M2dWlIbm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue7nAwQA
uf99MA0GCSqGSIb3DQEBCwUAA4IBAQBnMs4b8gpuureW4BmD1uTIio8jfnam84oa
p8M8IkhgJvcNaqRusfun6CXl8g1zqtnALTDh+t/C2g6ta8UwnhWD0tcY0Hi3sY0M
AT1LsvxxlFnhS7jhMdAoYKhxaz8KrOkK36H44H/XqnHKqqvrtN/B52/9dpj1pZPm
SrehJhV3NEN6aRzQF3G8Uwd01s5M0xCMvXyf4AlZSUfEaNbnlSwGuURAdYo1WC8a
qqgvSiknYPYSkyvet0JqKxk1QvqTq0SOm51DMRe8yZq32n8ZrAz7/2wmNl2HI4vc
wrgI59v89BGQmsdQMMlVZjcINstY1GDj7Qj7dSRZdw6zBXKZnCBR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org