Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/FjpoKkWm_p1tlJCcB7n3aeiozp8.roa
File: FjpoKkWm_p1tlJCcB7n3aeiozp8.roa (raw, json)
Hash identifier: GUCkcCScEVgokHQKI6tvUzQ2HZoekfgGztib0EZ84QE=
Subject key identifier: 16:3A:68:2A:45:A6:FE:9D:6D:94:90:9C:07:B9:F7:69:E8:A8:CE:9F
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 01856C1CBFE93590C6438392CC056C63B399
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/FjpoKkWm_p1tlJCcB7n3aeiozp8.roa
Signing time: Sun 01 Jan 2023 06:55:01 +0000
ROA not before: Sun 01 Jan 2023 06:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29447
IP address blocks: 83.158.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:bf:e9:35:90:c6:43:83:92:cc:05:6c:63:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 1 06:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=163a682a45a6fe9d6d94909c07b9f769e8a8ce9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:ff:51:90:06:28:c1:22:fb:7a:17:00:d1:
19:07:e8:47:9d:f8:ef:13:cc:70:70:e9:0c:d4:18:
eb:d9:e3:ae:21:6a:18:59:43:e5:c2:ac:7f:f5:85:
f4:12:73:57:2b:99:b3:4c:b7:77:a0:58:45:81:32:
0c:6b:20:17:58:4f:e7:2c:5f:9a:c5:f8:4a:d1:8c:
99:82:52:e0:44:a1:41:06:f3:1f:49:79:f7:3c:af:
0b:e1:e4:5e:e8:d8:42:d2:2c:08:8a:14:60:c8:07:
ab:44:18:63:dd:48:a4:b5:35:4a:19:8a:28:fd:0e:
f5:0f:28:90:ea:9c:17:5d:66:83:f9:1a:e2:6a:a2:
2c:0c:3a:a8:f4:06:59:0e:ca:07:80:2d:a7:cb:52:
b3:7f:5d:36:64:37:d3:23:1c:33:e2:54:49:0b:b5:
14:f9:70:92:b9:46:b8:6e:03:b7:e2:ce:5d:6b:4f:
a9:a6:07:f2:6c:82:e3:99:c5:f9:8a:8b:86:00:91:
e3:61:1f:7b:3e:36:2f:33:42:a2:e8:01:7a:f5:e0:
d2:3b:30:93:37:05:cc:d9:89:cb:f8:01:b2:cb:57:
df:12:56:b7:45:74:3b:9b:55:c8:29:94:04:7f:fb:
8e:10:ba:77:84:1c:e3:57:81:1b:48:f3:16:a0:d3:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:68:2A:45:A6:FE:9D:6D:94:90:9C:07:B9:F7:69:E8:A8:CE:9F
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/FjpoKkWm_p1tlJCcB7n3aeiozp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:1c:2c:b4:72:f4:30:37:12:2d:46:34:c8:8a:13:47:02:7e:
68:6c:52:df:46:de:87:7a:cb:63:e8:29:f7:05:ee:8e:07:03:
c4:9d:df:f2:d9:a6:a6:57:70:4a:cd:dc:86:00:9e:53:99:85:
07:27:71:39:55:d9:ba:0b:59:a2:24:84:28:ac:cc:a2:34:ac:
59:0e:70:0a:f2:c9:0c:f7:05:a0:31:c5:2b:a9:48:cc:dd:95:
34:a2:28:09:bf:ef:54:d1:1d:a7:61:41:19:50:3f:81:d7:93:
a1:55:be:8d:54:a8:c5:80:53:84:bf:d2:bc:87:b2:70:06:49:
5a:24:ac:e3:b7:ab:ab:1b:7d:56:82:69:3b:8f:22:5a:ce:13:
f4:a0:e5:be:f3:4f:82:9f:0c:21:7d:57:d7:7e:d1:d2:19:9e:
99:3c:6a:b7:6f:37:7e:3c:c7:ce:c1:a4:0a:4b:86:40:a1:af:
9e:0e:16:1b:77:f7:98:fb:92:88:94:c4:cd:c7:de:2f:c4:6f:
3f:f0:78:5a:e1:ec:f1:b2:a8:01:9d:5c:bc:8a:7c:7a:df:48:
0b:75:89:41:7d:27:3d:83:6f:52:8e:16:42:1c:c2:2d:c8:9e:
4e:bc:ac:88:50:81:18:68:06:d6:eb:e4:f6:79:12:a2:c1:ac:
62:ea:b0:8d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVsHL/pNZDGQ4OSzAVsY7OZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy
Y2RlMTcwHhcNMjMwMTAxMDY1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjNhNjgyYTQ1YTZmZTlkNmQ5NDkwOWMwN2I5Zjc2OWU4YThjZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJD/UZAGKMEi+3oXANEZB+hHnfjv
E8xwcOkM1Bjr2eOuIWoYWUPlwqx/9YX0EnNXK5mzTLd3oFhFgTIMayAXWE/nLF+a
xfhK0YyZglLgRKFBBvMfSXn3PK8L4eRe6NhC0iwIihRgyAerRBhj3UiktTVKGYoo
/Q71DyiQ6pwXXWaD+RriaqIsDDqo9AZZDsoHgC2ny1Kzf102ZDfTIxwz4lRJC7UU
+XCSuUa4bgO34s5da0+ppgfybILjmcX5iouGAJHjYR97PjYvM0Ki6AF69eDSOzCT
NwXM2YnL+AGyy1ffEla3RXQ7m1XIKZQEf/uOELp3hBzjV4EbSPMWoNNRsQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBY6aCpFpv6dbZSQnAe592noqM6fMB8GA1UdIwQY
MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz
LTRhZmQ4MjU0YWU0My8xL0ZqcG9La1dtX3AxdGxKQ2NCN24zYWVpb3pwOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUzLTRhZmQ4MjU0YWU0
My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBTnjAN
BgkqhkiG9w0BAQsFAAOCAQEAmhwstHL0MDcSLUY0yIoTRwJ+aGxS30beh3rLY+gp
9wXujgcDxJ3f8tmmpldwSs3chgCeU5mFBydxOVXZugtZoiSEKKzMojSsWQ5wCvLJ
DPcFoDHFK6lIzN2VNKIoCb/vVNEdp2FBGVA/gdeToVW+jVSoxYBThL/SvIeycAZJ
WiSs47erqxt9VoJpO48iWs4T9KDlvvNPgp8MIX1X137R0hmemTxqt283fjzHzsGk
CkuGQKGvng4WG3f3mPuSiJTEzcfeL8RvP/B4WuHs8bKoAZ1cvIp8et9IC3WJQX0n
PYNvUo4WQhzCLcieTrysiFCBGGgG1uvk9nkSosGsYuqwjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:16 2024 by rpki-client on console-fra.rpki-client.org