Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fJvyfBWmmMRNDw5z1T9wdkJGKPs.roa
File: fJvyfBWmmMRNDw5z1T9wdkJGKPs.roa (raw, json)
Hash identifier: HguN8FWUFoPbPJD2x9/P3adWpK+Ynyt0u8fjEFuzcp8=
Subject key identifier: 7C:9B:F2:7C:15:A6:98:C4:4D:0F:0E:73:D5:3F:70:76:42:46:28:FB
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01892AD314CE6203002CD089DB100586D2F4
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fJvyfBWmmMRNDw5z1T9wdkJGKPs.roa
Signing time: Thu 06 Jul 2023 10:50:23 +0000
ROA not before: Thu 06 Jul 2023 10:50:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31420
IP address blocks: 5.104.184.0/21 maxlen: 24
176.241.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:d3:14:ce:62:03:00:2c:d0:89:db:10:05:86:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 6 10:50:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c9bf27c15a698c44d0f0e73d53f7076424628fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:0f:cd:86:47:68:0b:f5:3b:b3:2f:21:62:
2a:2f:ff:df:0b:d9:01:c8:7c:e4:0d:c9:50:fd:71:
86:b9:a3:5e:2b:d0:ba:a3:1b:b3:c7:a9:1d:86:2f:
f0:29:5a:c6:22:02:e5:fa:13:ce:20:4c:ff:1e:ca:
79:88:5f:04:70:2f:6f:bc:6c:60:5a:d6:c3:da:d3:
81:f8:57:9b:bb:88:96:d9:9f:6a:6c:31:c1:1d:bd:
28:b8:a9:9e:8e:36:7d:ce:ec:d6:9e:54:de:08:cf:
c8:a6:dc:e9:9d:c5:d3:19:ef:01:c4:d4:8c:82:23:
9d:ff:b4:3e:e5:9f:97:50:ca:69:a9:e8:6d:cb:fc:
54:61:ff:0a:4e:c2:3b:2a:65:9b:2d:f4:4b:10:24:
82:c3:d4:49:53:6d:f9:9d:68:3b:03:8f:d9:fa:c0:
99:b8:33:c6:25:d1:ee:63:ef:7f:32:19:2e:55:ea:
43:85:3a:bd:df:19:ae:b1:49:99:ec:52:f3:db:19:
08:c8:90:63:35:59:56:6b:eb:c2:6b:ee:11:a6:bc:
bc:ed:5b:c4:57:1f:e5:4e:aa:38:64:49:cc:3c:b1:
1b:67:7a:bd:07:72:3c:fb:e1:3f:65:fb:30:49:05:
d3:d3:a8:6a:30:2c:b8:05:75:41:03:8d:1d:b4:a8:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:F2:7C:15:A6:98:C4:4D:0F:0E:73:D5:3F:70:76:42:46:28:FB
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fJvyfBWmmMRNDw5z1T9wdkJGKPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.184.0/21
176.241.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:91:c7:6d:04:1b:67:ea:6e:42:69:b0:d0:cf:dc:19:ce:b3:
8c:a5:8a:70:83:da:9b:45:43:f0:a6:eb:75:62:fa:5e:f2:06:
37:f4:d4:9c:21:df:68:34:73:05:a1:35:4a:25:52:ec:c2:2d:
9c:eb:ab:b8:a1:1c:cd:02:00:20:40:16:5e:40:28:ab:73:fd:
e6:44:5a:4b:93:5d:03:01:34:a1:bc:11:3b:9d:a0:ce:2a:5d:
75:3a:30:1f:3e:86:69:cc:00:60:e8:13:1f:3f:d5:c1:6c:13:
e9:97:fb:45:43:34:1f:58:3f:d9:2f:80:84:20:25:12:35:44:
84:aa:de:33:1b:24:01:92:12:3a:ca:3d:ee:af:77:f9:b9:c1:
5e:7a:48:18:73:41:79:5f:8c:5d:61:70:ed:5c:31:68:e9:05:
b9:11:96:d5:66:26:74:0e:fc:80:a3:64:f8:60:7d:8f:62:5a:
df:4e:f4:77:10:b9:e9:94:84:61:5c:22:f4:f9:cd:3c:3b:54:
41:b9:63:bd:6e:2e:61:35:b0:86:90:dc:64:36:e0:32:76:ea:
d3:cb:4d:d4:9c:dd:65:9e:0f:13:b3:eb:0a:87:d3:b3:12:f3:
bb:5c:12:a5:c0:aa:30:3a:7e:4c:26:e8:68:02:d4:ee:8c:aa:
70:0c:c6:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkq0xTOYgMALNCJ2xAFhtL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjMwNzA2MTA1MDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzliZjI3YzE1YTY5OGM0NGQwZjBlNzNkNTNmNzA3NjQyNDYyOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t8PzYZHaAv1O7MvIWIqL//fC9kB
yHzkDclQ/XGGuaNeK9C6oxuzx6kdhi/wKVrGIgLl+hPOIEz/Hsp5iF8EcC9vvGxg
WtbD2tOB+Febu4iW2Z9qbDHBHb0ouKmejjZ9zuzWnlTeCM/IptzpncXTGe8BxNSM
giOd/7Q+5Z+XUMppqehty/xUYf8KTsI7KmWbLfRLECSCw9RJU235nWg7A4/Z+sCZ
uDPGJdHuY+9/MhkuVepDhTq93xmusUmZ7FLz2xkIyJBjNVlWa+vCa+4Rpry87VvE
Vx/lTqo4ZEnMPLEbZ3q9B3I8++E/ZfswSQXT06hqMCy4BXVBA40dtKhJqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHyb8nwVppjETQ8Oc9U/cHZCRij7MB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvZkp2eWZCV21tTVJORHc1ejFUOXdka0pHS1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBWi4AwQD
sPGwMA0GCSqGSIb3DQEBCwUAA4IBAQBMkcdtBBtn6m5CabDQz9wZzrOMpYpwg9qb
RUPwput1Yvpe8gY39NScId9oNHMFoTVKJVLswi2c66u4oRzNAgAgQBZeQCirc/3m
RFpLk10DATShvBE7naDOKl11OjAfPoZpzABg6BMfP9XBbBPpl/tFQzQfWD/ZL4CE
ICUSNUSEqt4zGyQBkhI6yj3ur3f5ucFeekgYc0F5X4xdYXDtXDFo6QW5EZbVZiZ0
DvyAo2T4YH2PYlrfTvR3ELnplIRhXCL0+c08O1RBuWO9bi5hNbCGkNxkNuAydurT
y03UnN1lng8Ts+sKh9OzEvO7XBKlwKowOn5MJuhoAtTujKpwDMYk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org