Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FI5ZgJQK6RzGrJrlQE5LGywCGWY.roa
File: FI5ZgJQK6RzGrJrlQE5LGywCGWY.roa (raw, json)
Hash identifier: m9+0y9GNGL4GXHcEoom0KzXtW3dcEN7tzpP3w/3cLgY=
Subject key identifier: 14:8E:59:80:94:0A:E9:1C:C6:AC:9A:E5:40:4E:4B:1B:2C:02:19:66
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188B6D922E6F18477C95DE034325455CF09
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FI5ZgJQK6RzGrJrlQE5LGywCGWY.roa
Signing time: Tue 13 Jun 2023 22:21:03 +0000
ROA not before: Tue 13 Jun 2023 22:21:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132244
IP address blocks: 46.37.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:d9:22:e6:f1:84:77:c9:5d:e0:34:32:54:55:cf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 13 22:21:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=148e5980940ae91cc6ac9ae5404e4b1b2c021966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:9a:20:41:87:da:6f:17:72:9a:33:d6:5a:
d7:6e:32:02:dc:f9:3d:b7:92:34:62:ce:ca:19:8a:
13:45:bd:eb:70:f7:a2:10:1c:4f:96:60:71:d6:c0:
91:a5:4e:84:9f:78:23:21:64:12:8f:29:b5:2c:4a:
e4:85:4f:dc:28:d6:0f:b8:cf:12:93:78:78:da:8e:
4c:e8:92:fd:bd:5f:0a:26:6d:37:66:b6:0c:ae:a7:
a9:0e:69:59:99:9b:c9:72:1b:57:fe:b8:32:83:ef:
1c:e6:5b:bf:e6:92:7a:ef:01:12:12:93:56:92:b2:
53:6e:88:1c:de:62:a9:90:e8:48:30:8d:fd:39:dd:
9d:a6:d7:37:a0:91:72:40:6d:d8:2a:d1:cb:07:ff:
da:3c:50:1b:67:0c:df:5b:b6:1f:86:eb:e1:89:17:
f7:41:eb:ce:5c:a6:08:21:81:fd:bd:4f:7d:6e:25:
90:e0:df:51:fa:00:5c:f0:79:70:ae:dc:5b:43:aa:
79:6d:02:1f:a1:52:90:04:e9:db:f5:af:f2:cd:3c:
fc:ef:62:ad:01:04:84:07:26:d4:83:b5:ca:e2:27:
86:e5:5e:38:c9:b8:37:48:05:c9:23:60:39:bd:d5:
04:1f:68:25:19:2f:87:63:73:60:17:e7:20:a8:b0:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:59:80:94:0A:E9:1C:C6:AC:9A:E5:40:4E:4B:1B:2C:02:19:66
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FI5ZgJQK6RzGrJrlQE5LGywCGWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fd:e9:61:57:63:8a:cf:61:40:ab:0b:01:74:cb:6b:15:d2:
37:c8:6d:c3:2a:28:1a:68:ee:a2:80:8e:5a:92:70:9b:79:17:
95:66:57:e1:53:f6:83:c1:1f:12:8f:28:5d:73:96:06:cf:ea:
67:5c:2b:bb:72:94:b3:ba:dd:31:4f:be:d4:dc:52:e1:ce:e7:
9a:58:af:0c:6d:8c:8f:1c:2b:ae:9f:1a:ee:5f:fe:9f:5f:9a:
83:11:0e:90:ee:c7:1e:57:a5:bd:bd:ff:5f:89:6d:0e:cf:1a:
68:0f:10:73:58:26:e2:c7:c4:96:3f:27:53:a5:50:da:d4:d4:
4d:32:20:2c:d2:ad:b3:ec:97:00:22:41:89:fc:45:53:df:b8:
37:2a:93:23:b7:2b:6f:bb:f4:1f:cd:f1:20:fb:d0:85:94:77:
d1:a7:2d:37:44:31:70:a4:dc:2a:58:3b:69:da:12:5f:c1:cf:
2c:34:07:5e:d3:b6:b0:7c:21:e9:b8:f8:36:3f:45:83:f6:16:
02:f8:f8:05:5d:fa:2f:32:44:d7:1e:80:40:0e:d1:d8:5b:d0:
c2:0d:83:ca:a7:93:c6:00:b7:8c:82:c3:00:bb:0f:a1:e0:c7:
65:a5:0a:11:36:59:3d:49:a0:b9:e4:dc:41:f3:0d:33:a6:dc:
f9:7a:c7:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi22SLm8YR3yV3gNDJUVc8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNjEzMjIyMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDhlNTk4MDk0MGFlOTFjYzZhYzlhZTU0MDRlNGIxYjJjMDIxOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDmaIEGH2m8Xcpoz1lrXbjIC3Pk9
t5I0Ys7KGYoTRb3rcPeiEBxPlmBx1sCRpU6En3gjIWQSjym1LErkhU/cKNYPuM8S
k3h42o5M6JL9vV8KJm03ZrYMrqepDmlZmZvJchtX/rgyg+8c5lu/5pJ67wESEpNW
krJTbogc3mKpkOhIMI39Od2dptc3oJFyQG3YKtHLB//aPFAbZwzfW7YfhuvhiRf3
QevOXKYIIYH9vU99biWQ4N9R+gBc8HlwrtxbQ6p5bQIfoVKQBOnb9a/yzTz872Kt
AQSEBybUg7XK4ieG5V44ybg3SAXJI2A5vdUEH2glGS+HY3NgF+cgqLDCVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSOWYCUCukcxqya5UBOSxssAhlmMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvRkk1WmdKUUs2UnpHckpybFFFNUxHeXdDR1dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVhMA0G
CSqGSIb3DQEBCwUAA4IBAQA0/elhV2OKz2FAqwsBdMtrFdI3yG3DKigaaO6igI5a
knCbeReVZlfhU/aDwR8Sjyhdc5YGz+pnXCu7cpSzut0xT77U3FLhzueaWK8MbYyP
HCuunxruX/6fX5qDEQ6Q7sceV6W9vf9fiW0OzxpoDxBzWCbix8SWPydTpVDa1NRN
MiAs0q2z7JcAIkGJ/EVT37g3KpMjtytvu/QfzfEg+9CFlHfRpy03RDFwpNwqWDtp
2hJfwc8sNAde07awfCHpuPg2P0WD9hYC+PgFXfovMkTXHoBADtHYW9DCDYPKp5PG
ALeMgsMAuw+h4MdlpQoRNlk9SaC55NxB8w0zptz5esdz
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org