Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/T7y5WkIk94ZEbukJDDgynosGFOw.roa
File: T7y5WkIk94ZEbukJDDgynosGFOw.roa (raw, json)
Hash identifier: eB6smk1+GVVBLmlQXi7vJRdznrkbFHas+dd1E4QRnAw=
Subject key identifier: 4F:BC:B9:5A:42:24:F7:86:44:6E:E9:09:0C:38:32:9E:8B:06:14:EC
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 018A97F6D32F7D21A5F9F086A1AFC91D39A6
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/T7y5WkIk94ZEbukJDDgynosGFOw.roa
Signing time: Fri 15 Sep 2023 08:30:50 +0000
ROA not before: Fri 15 Sep 2023 08:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60550
IP address blocks: 194.124.204.0/22 maxlen: 24
2a13:b240::/29 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:f6:d3:2f:7d:21:a5:f9:f0:86:a1:af:c9:1d:39:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Sep 15 08:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fbcb95a4224f786446ee9090c38329e8b0614ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:85:d5:33:6f:cd:53:f0:92:e5:4a:95:97:
40:c4:96:c7:25:b1:ef:bf:9a:23:b1:c1:37:59:0a:
87:04:e0:8b:41:c2:84:54:20:06:0b:33:e4:8a:03:
7c:3c:b7:37:07:e6:d6:ec:a5:48:0a:f4:4e:6b:5b:
e1:c9:7f:3b:b4:62:c1:6a:3a:7c:76:c0:cc:10:59:
e7:8c:78:ad:87:c1:64:7e:eb:0a:14:7c:6c:39:5c:
69:39:3a:8f:06:2e:62:4a:09:f5:50:69:55:e3:e9:
41:c9:a4:b2:3d:03:bc:15:f3:04:8d:9f:08:80:eb:
8e:7e:fc:aa:c1:a8:a2:89:a9:cd:9f:fe:d1:d4:5e:
fc:84:3b:5a:7e:fb:83:ad:23:46:96:a0:b6:d8:a3:
a6:e2:2d:f3:3c:2e:d0:e9:1e:47:b2:21:1d:dd:19:
6d:47:fb:84:e6:c8:69:c6:60:b4:8a:86:03:1c:6a:
98:83:b3:20:9d:c2:40:ce:11:ae:ad:d5:3d:00:d4:
76:91:de:ca:f3:55:cd:5d:c2:de:4c:75:4b:83:f1:
2b:d9:19:82:d0:5f:59:72:ed:40:05:1b:d5:5c:bb:
a7:4c:1c:c1:a0:06:20:3a:ad:17:10:86:c0:78:40:
23:b2:9c:22:7a:65:45:63:93:3b:ab:ce:f0:39:9c:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:B9:5A:42:24:F7:86:44:6E:E9:09:0C:38:32:9E:8B:06:14:EC
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/T7y5WkIk94ZEbukJDDgynosGFOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.204.0/22
IPv6:
2a13:b240::/29
Signature Algorithm: sha256WithRSAEncryption
03:90:cf:67:b2:e1:49:2c:f7:46:b6:1d:bc:03:15:73:c1:a7:
0e:59:52:0e:12:05:68:94:1d:32:45:26:74:11:ef:1f:73:63:
92:62:f8:08:be:cf:f2:d4:0d:5e:78:60:e9:cb:2e:f5:a8:c9:
12:22:35:90:01:4d:de:8f:74:76:26:a3:37:59:5d:3d:f1:98:
78:9d:c6:a6:ea:bb:70:8c:35:fc:df:82:65:ab:f7:d2:bc:12:
51:8f:b1:25:ae:1d:2f:ee:99:28:61:bc:1d:a5:6c:ec:b3:29:
a1:b6:06:71:5b:a2:4b:cb:6a:94:a6:cb:45:b0:b8:74:76:fe:
b2:98:b1:b6:4f:b6:bf:4e:08:07:19:00:35:3c:69:0f:a5:9e:
b7:54:a6:a1:f6:fd:18:6b:c1:fa:7c:40:a9:83:f7:0d:c4:44:
41:c4:55:a1:e6:34:fb:03:0c:f4:37:e1:a6:87:5c:9b:c3:6c:
1e:be:f6:aa:08:11:46:6d:b2:16:53:3d:5c:09:83:a6:a5:55:
5f:d4:30:bd:ff:42:b1:3a:58:de:dd:29:a4:8f:61:81:35:8f:
2f:0c:e8:ba:46:37:3f:06:8d:0a:02:dc:bb:4d:4d:11:10:b3:
75:83:6f:bf:c9:6b:8e:1d:0f:f1:d3:21:7a:3e:10:42:36:ed:
62:58:2f:6f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYqX9tMvfSGl+fCGoa/JHTmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2ZhZmRiODZkMzhmMzdiZjBjMjZkM2YyNzMxZmRlZjZi
MTRlNGEwHhcNMjMwOTE1MDgzMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmJjYjk1YTQyMjRmNzg2NDQ2ZWU5MDkwYzM4MzI5ZThiMDYxNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbWF1TNvzVPwkuVKlZdAxJbHJbHv
v5ojscE3WQqHBOCLQcKEVCAGCzPkigN8PLc3B+bW7KVICvROa1vhyX87tGLBajp8
dsDMEFnnjHith8FkfusKFHxsOVxpOTqPBi5iSgn1UGlV4+lByaSyPQO8FfMEjZ8I
gOuOfvyqwaiiianNn/7R1F78hDtafvuDrSNGlqC22KOm4i3zPC7Q6R5HsiEd3Rlt
R/uE5shpxmC0ioYDHGqYg7MgncJAzhGurdU9ANR2kd7K81XNXcLeTHVLg/Er2RmC
0F9Zcu1ABRvVXLunTBzBoAYgOq0XEIbAeEAjspwiemVFY5M7q87wOZxerQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE+8uVpCJPeGRG7pCQw4Mp6LBhTsMB8GA1UdIwQY
MBaAFLB/r9uG0483vwwm0/JzH972sU5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2Qt
NDkzOGI4ZDBjM2RlLzEvVDd5NVdrSWs5NFpFYnVrSkREZ3lub3NHRk93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2QtNDkzOGI4ZDBjM2Rl
LzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwnzMMA0E
AgACMAcDBQMqE7JAMA0GCSqGSIb3DQEBCwUAA4IBAQADkM9nsuFJLPdGth28AxVz
wacOWVIOEgVolB0yRSZ0Ee8fc2OSYvgIvs/y1A1eeGDpyy71qMkSIjWQAU3ej3R2
JqM3WV098Zh4ncam6rtwjDX834Jlq/fSvBJRj7Elrh0v7pkoYbwdpWzssymhtgZx
W6JLy2qUpstFsLh0dv6ymLG2T7a/TggHGQA1PGkPpZ63VKah9v0Ya8H6fECpg/cN
xERBxFWh5jT7Awz0N+Gmh1ybw2wevvaqCBFGbbIWUz1cCYOmpVVf1DC9/0KxOlje
3Smkj2GBNY8vDOi6Rjc/Bo0KAty7TU0RELN1g2+/yWuOHQ/x0yF6PhBCNu1iWC9v
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:33 2024 by rpki-client on console-fra.rpki-client.org