Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/5fpMvZ7dajitOLfgLxii5xWWi0c.roa
File: 5fpMvZ7dajitOLfgLxii5xWWi0c.roa (raw, json)
Hash identifier: 6PRiLf8wPWLJpqOcRvvSX7Kdj6XU9SOqDZxP/Dhp/FI=
Subject key identifier: E5:FA:4C:BD:9E:DD:6A:38:AD:38:B7:E0:2F:18:A2:E7:15:96:8B:47
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 0187093E40EF96353BA355D5857CEF6A9F86
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/5fpMvZ7dajitOLfgLxii5xWWi0c.roa
Signing time: Wed 22 Mar 2023 12:14:47 +0000
ROA not before: Wed 22 Mar 2023 12:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49778
IP address blocks: 193.228.128.0/24 maxlen: 24
2a12:70c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Apr 2023 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:3e:40:ef:96:35:3b:a3:55:d5:85:7c:ef:6a:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Mar 22 12:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5fa4cbd9edd6a38ad38b7e02f18a2e715968b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:8b:4d:e8:d7:02:f9:10:47:1a:f1:d9:c3:
12:7d:3f:53:2f:45:c4:e5:f4:ec:d4:ea:14:82:64:
2d:58:89:08:90:b4:69:93:f2:ce:0a:24:c6:da:5b:
e6:37:95:66:f6:da:e7:6c:66:b1:2a:be:e1:58:e5:
15:f3:54:f3:dc:fe:b0:45:f2:29:98:aa:48:d9:7f:
81:43:b6:fc:95:3c:c8:0c:6d:7b:77:83:3a:b3:d3:
d6:b6:d1:23:ab:56:cc:de:0c:20:c8:91:07:d1:29:
59:32:db:71:5f:e4:55:da:d2:1a:99:04:49:49:0d:
cb:bf:ef:ba:59:90:43:4c:3b:0a:30:43:be:44:d1:
21:c8:d8:ec:43:f4:60:6d:bd:c2:1c:56:c0:c6:e1:
b3:af:67:63:4c:ba:5f:fa:d3:88:b8:14:fe:87:cb:
37:89:cb:12:6f:d8:63:41:14:37:36:89:67:0a:3f:
82:c2:4a:77:d4:6d:dc:b2:c4:a8:bf:49:b9:ab:67:
64:47:e7:6c:36:17:2b:87:33:c0:fe:04:78:cc:b8:
2e:ff:b2:df:de:ce:6a:db:03:8c:34:11:26:28:ed:
2b:1b:0a:c3:a4:d3:1e:88:72:ba:78:f6:88:78:d2:
f0:db:24:04:99:86:1b:ab:5c:e1:09:4a:ef:fc:62:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:4C:BD:9E:DD:6A:38:AD:38:B7:E0:2F:18:A2:E7:15:96:8B:47
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/5fpMvZ7dajitOLfgLxii5xWWi0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.128.0/24
IPv6:
2a12:70c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:eb:c9:e8:a2:02:d1:2f:6c:fa:d1:23:6b:6f:ba:b6:72:5e:
51:7b:e2:11:51:e1:95:e9:9a:5c:c2:40:9b:f4:a1:4e:12:f0:
d3:ba:c2:a0:5b:7c:a6:f3:32:ce:81:9c:d1:42:13:18:54:2f:
a3:39:20:b2:a9:14:29:b0:48:7c:a6:0b:1f:96:53:f4:6c:32:
84:79:4e:2d:bb:1e:82:88:ea:25:4b:fd:f3:fe:d5:fb:a9:6d:
0e:bc:98:c0:70:ef:a0:cb:d7:73:94:89:65:c1:82:b2:76:c4:
51:4f:09:bf:36:b3:07:01:06:3b:c0:6c:d8:78:16:f8:42:ba:
9a:2f:d7:39:03:75:28:bd:6b:9b:b5:d7:3c:cb:f9:4d:d3:0d:
28:0b:1c:01:cd:75:21:62:f2:ea:b3:39:88:67:66:e7:e4:6b:
b7:34:1f:61:79:fc:35:13:be:4a:7b:97:a7:4e:80:8b:97:ec:
5b:55:5c:53:45:66:ea:01:73:a6:c0:a9:71:7b:2e:bb:e9:04:
af:27:4b:50:b7:f9:bb:e7:14:00:38:f2:68:7e:9f:b4:cd:06:
dc:78:f2:70:80:8d:25:bc:31:82:3a:99:b3:1a:16:d9:9b:ca:
5c:7b:0d:af:ed:55:d0:e6:df:e3:21:05:56:52:66:80:f3:e7:
21:82:38:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYcJPkDvljU7o1XVhXzvap+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjMwMzIyMTIxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWZhNGNiZDllZGQ2YTM4YWQzOGI3ZTAyZjE4YTJlNzE1OTY4YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmceLTejXAvkQRxrx2cMSfT9TL0XE
5fTs1OoUgmQtWIkIkLRpk/LOCiTG2lvmN5Vm9trnbGaxKr7hWOUV81Tz3P6wRfIp
mKpI2X+BQ7b8lTzIDG17d4M6s9PWttEjq1bM3gwgyJEH0SlZMttxX+RV2tIamQRJ
SQ3Lv++6WZBDTDsKMEO+RNEhyNjsQ/Rgbb3CHFbAxuGzr2djTLpf+tOIuBT+h8s3
icsSb9hjQRQ3NolnCj+Cwkp31G3cssSov0m5q2dkR+dsNhcrhzPA/gR4zLgu/7Lf
3s5q2wOMNBEmKO0rGwrDpNMeiHK6ePaIeNLw2yQEmYYbq1zhCUrv/GIkawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOX6TL2e3Wo4rTi34C8YoucVlotHMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvNWZwTXZaN2Rhaml0T0xmZ0x4aWk1eFdXaTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAweSAMA0E
AgACMAcDBQMqEnDAMA0GCSqGSIb3DQEBCwUAA4IBAQAL68noogLRL2z60SNrb7q2
cl5Re+IRUeGV6ZpcwkCb9KFOEvDTusKgW3ym8zLOgZzRQhMYVC+jOSCyqRQpsEh8
pgsfllP0bDKEeU4tux6CiOolS/3z/tX7qW0OvJjAcO+gy9dzlIllwYKydsRRTwm/
NrMHAQY7wGzYeBb4QrqaL9c5A3UovWubtdc8y/lN0w0oCxwBzXUhYvLqszmIZ2bn
5Gu3NB9hefw1E75Ke5enToCLl+xbVVxTRWbqAXOmwKlxey676QSvJ0tQt/m75xQA
OPJofp+0zQbcePJwgI0lvDGCOpmzGhbZm8pcew2v7VXQ5t/jIQVWUmaA8+chgjjv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:43 2024 by rpki-client on console-ams.rpki-client.org