Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/FIbzWEIvcPjRd6t3lcw7l_X2Edg.roa
File: FIbzWEIvcPjRd6t3lcw7l_X2Edg.roa (raw, json)
Hash identifier: wHkEQ42BzDWPkG0wtbOc+26Jka0tF5vVhSq+e+FA15k=
Subject key identifier: 14:86:F3:58:42:2F:70:F8:D1:77:AB:77:95:CC:3B:97:F5:F6:11:D8
Certificate issuer: /CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Certificate serial: 0185734CD79112475F4619304387FB61D3F2
Authority key identifier: AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/FIbzWEIvcPjRd6t3lcw7l_X2Edg.roa
Signing time: Mon 02 Jan 2023 16:24:53 +0000
ROA not before: Mon 02 Jan 2023 16:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51790
IP address blocks: 193.3.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:d7:91:12:47:5f:46:19:30:43:87:fb:61:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Validity
Not Before: Jan 2 16:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1486f358422f70f8d177ab7795cc3b97f5f611d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:fd:40:c0:fe:d9:66:2e:d8:92:c9:87:32:
a7:b8:19:9f:a8:54:56:fa:e0:4c:e4:d4:83:89:e0:
0f:18:6b:3f:a2:b7:d7:ad:02:84:8a:6c:bc:da:39:
fc:cf:05:2b:44:4e:64:a7:67:9f:dc:08:b7:60:31:
29:df:cf:46:eb:73:c7:c0:6f:91:fa:46:59:3f:51:
7b:49:c4:c3:04:b0:a4:f3:c8:3d:21:01:5b:c2:5c:
35:b8:69:71:20:81:68:a2:67:22:e4:9f:e2:b6:16:
fb:b2:c8:e7:39:86:2b:e2:58:e4:1a:d8:a8:e2:d1:
f2:bd:ad:51:1b:1d:f4:b5:7d:62:35:fd:72:ff:e8:
a2:cb:74:b7:43:ba:c8:dc:75:33:f7:29:2c:89:e3:
d1:be:37:44:07:04:60:74:07:f8:b4:b9:79:0e:4f:
68:b8:bf:33:d7:08:61:eb:9e:b7:b1:b3:22:04:38:
c9:5c:51:da:52:4f:05:5a:83:b7:50:ad:ee:6e:18:
15:85:79:93:8f:ab:11:8e:de:66:11:ab:e7:58:df:
12:55:7f:95:60:27:c6:e4:c1:d3:ea:68:05:51:0c:
7b:d7:33:26:59:55:00:84:4f:c4:35:f5:d8:55:cf:
84:78:34:24:51:64:a3:4a:20:79:c0:3f:92:39:2a:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:86:F3:58:42:2F:70:F8:D1:77:AB:77:95:CC:3B:97:F5:F6:11:D8
X509v3 Authority Key Identifier:
keyid:AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/FIbzWEIvcPjRd6t3lcw7l_X2Edg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.59.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2f:d4:ff:45:0e:ec:cd:9a:87:c5:a1:ee:9a:96:8d:00:59:
25:29:62:fe:f7:33:86:3b:d1:c2:54:03:da:6c:a2:de:70:4d:
0d:66:92:65:d1:fc:18:52:af:5e:d7:b8:ea:2e:e0:c0:83:6c:
47:21:e3:14:40:a4:42:ff:ad:80:e8:89:16:a9:e1:54:a3:9b:
27:5f:41:1a:32:51:6c:95:c0:ef:c3:2d:e6:24:90:9c:16:62:
4b:6f:dc:5f:89:a5:10:16:42:76:4c:f4:8a:02:f1:29:b8:05:
2d:72:bc:71:0c:3e:10:c3:ef:d2:1e:8e:3e:4f:ab:e7:1d:ed:
36:7d:99:33:63:b5:40:44:11:9d:b3:37:d3:d0:57:35:34:9c:
4d:05:d9:36:28:2e:6f:f4:cb:38:91:e0:10:fb:f9:bd:d0:f4:
24:c4:72:15:d5:30:d6:5c:37:90:91:10:db:dd:cd:44:da:35:
cb:12:ea:f2:70:7e:42:c5:7c:39:41:ef:a9:a7:bc:31:6a:8f:
76:de:7b:1a:3f:d9:8a:71:07:e2:72:a1:1b:69:d3:e3:89:65:
1b:61:37:65:da:ba:7b:e4:b9:84:97:2e:6c:f0:6b:9a:34:38:
47:12:03:fb:47:fc:d4:61:68:9f:b5:a7:df:c6:a0:d5:61:6f:
4e:c3:9f:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzTNeREkdfRhkwQ4f7YdPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWNiNWE3NTZjZjU0ZjY5NDY0MGMxMWY4ZTBiZDE5YjI3
OTNkYTkwHhcNMjMwMTAyMTYyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDg2ZjM1ODQyMmY3MGY4ZDE3N2FiNzc5NWNjM2I5N2Y1ZjYxMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQX9QMD+2WYu2JLJhzKnuBmfqFRW
+uBM5NSDieAPGGs/orfXrQKEimy82jn8zwUrRE5kp2ef3Ai3YDEp389G63PHwG+R
+kZZP1F7ScTDBLCk88g9IQFbwlw1uGlxIIFoomci5J/ithb7ssjnOYYr4ljkGtio
4tHyva1RGx30tX1iNf1y/+iiy3S3Q7rI3HUz9yksiePRvjdEBwRgdAf4tLl5Dk9o
uL8z1whh6563sbMiBDjJXFHaUk8FWoO3UK3ubhgVhXmTj6sRjt5mEavnWN8SVX+V
YCfG5MHT6mgFUQx71zMmWVUAhE/ENfXYVc+EeDQkUWSjSiB5wD+SOSrCkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSG81hCL3D40Xerd5XMO5f19hHYMB8GA1UdIwQY
MBaAFKyctadWz1T2lGQMEfjgvRmyeT2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp5MXAxYlBWUGFVWkF3Ui1PQzlHYko1UGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNWYyYTktOGZiZS00Mjg2LWJiZGQt
ODI1NjkyNjk1MjExLzEvRklieldFSXZjUGpSZDZ0M2xjdzdsX1gyRWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9mNWYyYTktOGZiZS00Mjg2LWJiZGQtODI1NjkyNjk1MjEx
LzEvckp5MXAxYlBWUGFVWkF3Ui1PQzlHYko1UGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQM7MA0G
CSqGSIb3DQEBCwUAA4IBAQCFL9T/RQ7szZqHxaHumpaNAFklKWL+9zOGO9HCVAPa
bKLecE0NZpJl0fwYUq9e17jqLuDAg2xHIeMUQKRC/62A6IkWqeFUo5snX0EaMlFs
lcDvwy3mJJCcFmJLb9xfiaUQFkJ2TPSKAvEpuAUtcrxxDD4Qw+/SHo4+T6vnHe02
fZkzY7VARBGdszfT0Fc1NJxNBdk2KC5v9Ms4keAQ+/m90PQkxHIV1TDWXDeQkRDb
3c1E2jXLEurycH5CxXw5Qe+pp7wxao923nsaP9mKcQficqEbadPjiWUbYTdl2rp7
5LmEly5s8GuaNDhHEgP7R/zUYWiftaffxqDVYW9Ow59M
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:44 2024 by rpki-client on console-fra.rpki-client.org