Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_gfFJWkWic0QSZ4vHD-VHnv7wP4.roa
File: _gfFJWkWic0QSZ4vHD-VHnv7wP4.roa (raw, json)
Hash identifier: lkcpnXfsoonant5dws8Z4XNyvOY+CVRBunyCw7ZSqbY=
Subject key identifier: FE:07:C5:25:69:16:89:CD:10:49:9E:2F:1C:3F:95:1E:7B:FB:C0:FE
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018E384D2AAF488728872EA118AACD4499AC
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_gfFJWkWic0QSZ4vHD-VHnv7wP4.roa
Signing time: Wed 13 Mar 2024 14:52:45 +0000
ROA not before: Wed 13 Mar 2024 14:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 93.127.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 14:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:4d:2a:af:48:87:28:87:2e:a1:18:aa:cd:44:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 13 14:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe07c525691689cd10499e2f1c3f951e7bfbc0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:46:ba:64:78:ae:8b:98:5d:5f:ee:40:1c:
b4:6b:d4:15:9a:bb:51:3c:c4:f4:e7:a0:db:10:b0:
78:70:00:bf:c2:93:03:60:b4:54:68:5e:af:67:4e:
d4:3e:de:15:91:69:3f:c6:82:ed:bf:55:28:6a:89:
71:a8:15:ee:5a:9f:ce:04:fb:32:08:44:2a:a9:2f:
c9:3e:af:e8:e1:cc:fa:ba:21:bf:6d:e4:26:5e:6e:
d6:b4:92:bf:4d:89:c6:e9:6a:a0:5b:41:6f:d9:13:
18:d5:71:f1:c0:16:bd:cf:52:7a:78:5c:45:8e:42:
8a:0d:06:b3:e0:90:e6:1d:af:da:f1:cc:85:13:9b:
3b:de:07:15:07:6d:d7:05:3b:66:c9:6d:0f:80:b7:
f7:2e:27:78:11:e6:6a:0e:87:b8:81:c3:4d:f3:3c:
f3:cc:01:47:3d:9a:ad:f4:ab:52:bc:24:86:e6:35:
73:9e:fe:58:18:91:87:2e:6c:1a:6e:cc:93:d4:e3:
aa:7c:f3:35:bc:3c:6e:4f:2f:ac:3a:c0:e6:eb:20:
73:f6:81:7a:98:49:30:9b:6e:79:8e:03:8e:55:c2:
4b:71:56:6d:4a:87:68:b0:59:c4:38:b2:4b:ff:67:
2f:19:e4:40:6e:ed:34:bc:08:7e:80:1f:54:fc:56:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:C5:25:69:16:89:CD:10:49:9E:2F:1C:3F:95:1E:7B:FB:C0:FE
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_gfFJWkWic0QSZ4vHD-VHnv7wP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:67:06:31:41:82:ee:fe:3f:5c:5e:6d:0d:6b:66:a7:c6:5d:
ca:d6:d1:0b:45:aa:31:3d:66:77:4e:03:69:c0:1b:52:3d:aa:
bf:e7:03:f2:89:a8:1e:2d:d3:99:d5:22:14:4c:20:5d:f6:bd:
e5:93:7d:42:7e:20:77:f4:b9:a5:28:d3:86:60:55:0c:8a:3d:
d2:1b:0c:ea:57:a8:a8:92:5b:c0:76:50:33:c2:78:27:91:4a:
43:6a:a8:23:eb:f4:76:84:6f:0a:8c:a1:e1:65:9f:f3:cf:c1:
0f:e2:7f:0c:d0:dc:17:17:ce:71:9e:02:bf:35:5c:da:11:63:
af:a4:54:ee:c2:a7:c4:da:f6:00:6e:7b:a0:c0:6f:5b:38:31:
f3:2d:cf:47:3e:52:10:e5:45:af:cb:7c:4b:8c:3c:c4:24:f6:
80:18:b9:4e:0b:ce:2b:34:d4:19:27:c6:da:54:ec:f3:54:6d:
2b:89:a6:54:1c:4a:90:17:ec:d9:57:7a:13:27:06:f4:9a:5a:
47:1f:e1:ea:f7:df:7b:c6:d1:99:d6:d2:e0:29:61:0f:a6:7b:
bb:44:f7:93:4b:30:d6:57:87:bf:67:ba:96:bb:fb:69:d2:3d:
fa:38:2c:37:c6:a2:32:d1:8e:73:87:80:8f:1c:ed:2f:52:24:
3e:e0:fe:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY44TSqvSIcohy6hGKrNRJmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjQwMzEzMTQ1MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTA3YzUyNTY5MTY4OWNkMTA0OTllMmYxYzNmOTUxZTdiZmJjMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC5GumR4rouYXV/uQBy0a9QVmrtR
PMT056DbELB4cAC/wpMDYLRUaF6vZ07UPt4VkWk/xoLtv1UoaolxqBXuWp/OBPsy
CEQqqS/JPq/o4cz6uiG/beQmXm7WtJK/TYnG6WqgW0Fv2RMY1XHxwBa9z1J6eFxF
jkKKDQaz4JDmHa/a8cyFE5s73gcVB23XBTtmyW0PgLf3Lid4EeZqDoe4gcNN8zzz
zAFHPZqt9KtSvCSG5jVznv5YGJGHLmwabsyT1OOqfPM1vDxuTy+sOsDm6yBz9oF6
mEkwm255jgOOVcJLcVZtSodosFnEOLJL/2cvGeRAbu00vAh+gB9U/FaVZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4HxSVpFonNEEmeLxw/lR57+8D+MB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvX2dmRkpXa1dpYzBRU1o0dkhELVZIbnY3d1A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXX+hMA0G
CSqGSIb3DQEBCwUAA4IBAQCQZwYxQYLu/j9cXm0Na2anxl3K1tELRaoxPWZ3TgNp
wBtSPaq/5wPyiageLdOZ1SIUTCBd9r3lk31CfiB39LmlKNOGYFUMij3SGwzqV6io
klvAdlAzwngnkUpDaqgj6/R2hG8KjKHhZZ/zz8EP4n8M0NwXF85xngK/NVzaEWOv
pFTuwqfE2vYAbnugwG9bODHzLc9HPlIQ5UWvy3xLjDzEJPaAGLlOC84rNNQZJ8ba
VOzzVG0riaZUHEqQF+zZV3oTJwb0mlpHH+Hq9997xtGZ1tLgKWEPpnu7RPeTSzDW
V4e/Z7qWu/tp0j36OCw3xqIy0Y5zh4CPHO0vUiQ+4P7h
-----END CERTIFICATE-----
Generated at Mon May 13 18:34:49 2024 by rpki-client on console-ams.rpki-client.org