Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/7FTCTdpT0QcolWO2z_2T_9h7o9g.roa
File: 7FTCTdpT0QcolWO2z_2T_9h7o9g.roa (raw, json)
Hash identifier: kTilmHhiyuWOYES7esf+X8x/UBw5+DWp5GEaScQ2YzY=
Subject key identifier: EC:54:C2:4D:DA:53:D1:07:28:95:63:B6:CF:FD:93:FF:D8:7B:A3:D8
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 0185711530735E1E8ED2470A35ED90FD479D
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/7FTCTdpT0QcolWO2z_2T_9h7o9g.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42160
IP address blocks: 195.225.222.0/23 maxlen: 23
195.225.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:30:73:5e:1e:8e:d2:47:0a:35:ed:90:fd:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec54c24dda53d107289563b6cffd93ffd87ba3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:cc:53:b9:39:b2:96:48:de:93:a3:f9:05:
fb:9a:16:d0:50:50:27:d4:0f:3e:4d:ab:2d:d1:b5:
e0:23:de:68:1d:8d:d5:11:06:bb:7f:c9:e7:06:f1:
d4:fe:fb:63:4c:bb:70:ee:7c:f5:6f:bb:ce:57:ee:
50:2a:33:cd:40:ff:c6:99:c6:f9:79:ea:6a:6c:27:
9b:e9:77:b1:2f:34:94:49:63:a6:01:5f:53:50:4e:
4b:3e:5e:37:c6:95:27:bb:ec:82:67:bb:b3:a8:37:
f0:f5:8a:08:b1:80:af:65:29:cb:dd:fa:d5:fe:3e:
fa:8e:9a:07:1c:4c:0b:ba:c8:f9:54:05:28:71:e6:
01:78:44:d9:dc:82:df:f8:11:57:69:49:c3:d1:b2:
33:4b:fc:82:82:6e:0e:a4:05:0a:f9:e0:c2:83:0b:
e6:4d:e7:8d:6e:70:45:aa:db:38:3b:8f:ee:71:bb:
89:b8:80:64:3b:c1:9e:20:ae:93:a9:b1:b0:b2:46:
3d:38:43:62:67:57:55:41:33:92:2f:49:f9:a8:56:
12:62:dd:d2:c7:c6:bd:cd:29:47:d6:3e:b9:b5:ca:
83:af:65:ed:03:82:c1:c3:81:d4:60:cc:fd:ae:f4:
30:61:da:97:b2:00:03:b9:be:94:ee:0a:91:0a:0f:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:C2:4D:DA:53:D1:07:28:95:63:B6:CF:FD:93:FF:D8:7B:A3:D8
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/7FTCTdpT0QcolWO2z_2T_9h7o9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.221.0-195.225.223.255
Signature Algorithm: sha256WithRSAEncryption
09:d4:ff:48:3d:1e:91:87:e2:94:3a:b7:4d:13:39:36:79:3b:
41:aa:e9:56:c6:2a:65:51:8b:7b:92:b9:9c:86:78:b7:2e:7e:
7c:9d:62:94:02:c3:f7:35:e5:17:07:40:cb:9f:4f:be:e5:56:
a2:a0:c2:68:5b:be:c1:a7:40:57:3f:2d:d6:dd:7c:90:32:fd:
ae:e8:c3:ef:95:36:d6:82:67:40:69:c1:ac:ca:fd:51:71:47:
6d:d9:f3:86:bf:e5:11:a0:6b:dd:48:fb:b5:0c:5d:04:dd:f0:
75:c0:40:06:8c:cc:ea:d1:ae:41:40:03:c1:3b:7b:b7:28:af:
c1:1a:29:c4:0e:cb:91:69:e2:e3:c4:3c:f8:a3:d8:38:24:00:
2f:c7:64:51:74:e7:cf:b3:24:66:9e:91:79:e8:e3:58:7a:c3:
30:eb:72:c5:be:82:ae:75:27:1c:2e:c6:39:75:7f:e0:bf:f0:
e7:33:4d:59:28:88:f1:d5:67:f4:e3:41:36:aa:d8:c5:97:b9:
6c:21:e1:20:1a:23:51:1d:42:d7:21:8b:36:d9:5c:82:78:83:
d4:10:4c:87:42:01:6b:ad:4a:64:f7:a7:ad:89:63:41:97:1e:
82:6a:fe:59:e7:a1:02:eb:4d:20:80:1f:57:43:9a:ac:96:8a:
3a:f0:40:a4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVxFTBzXh6O0kcKNe2Q/UedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2
ZGNmNzMwHhcNMjMwMTAyMDYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzU0YzI0ZGRhNTNkMTA3Mjg5NTYzYjZjZmZkOTNmZmQ4N2JhM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7MU7k5spZI3pOj+QX7mhbQUFAn
1A8+Tast0bXgI95oHY3VEQa7f8nnBvHU/vtjTLtw7nz1b7vOV+5QKjPNQP/Gmcb5
eepqbCeb6XexLzSUSWOmAV9TUE5LPl43xpUnu+yCZ7uzqDfw9YoIsYCvZSnL3frV
/j76jpoHHEwLusj5VAUoceYBeETZ3ILf+BFXaUnD0bIzS/yCgm4OpAUK+eDCgwvm
TeeNbnBFqts4O4/ucbuJuIBkO8GeIK6TqbGwskY9OENiZ1dVQTOSL0n5qFYSYt3S
x8a9zSlH1j65tcqDr2XtA4LBw4HUYMz9rvQwYdqXsgADub6U7gqRCg919wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOxUwk3aU9EHKJVjts/9k//Ye6PYMB8GA1UdIwQY
MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt
MGE4MzBkMDFhZmQxLzEvN0ZUQ1RkcFQwUWNvbFdPMnpfMlRfOWg3bzlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx
LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD4d0D
BAXD4cAwDQYJKoZIhvcNAQELBQADggEBAAnU/0g9HpGH4pQ6t00TOTZ5O0Gq6VbG
KmVRi3uSuZyGeLcufnydYpQCw/c15RcHQMufT77lVqKgwmhbvsGnQFc/LdbdfJAy
/a7ow++VNtaCZ0BpwazK/VFxR23Z84a/5RGga91I+7UMXQTd8HXAQAaMzOrRrkFA
A8E7e7cor8EaKcQOy5Fp4uPEPPij2DgkAC/HZFF058+zJGaekXno41h6wzDrcsW+
gq51Jxwuxjl1f+C/8OczTVkoiPHVZ/TjQTaq2MWXuWwh4SAaI1EdQtchizbZXIJ4
g9QQTIdCAWutSmT3p62JY0GXHoJq/lnnoQLrTSCAH1dDmqyWijrwQKQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:02 2024 by rpki-client on console-ams.rpki-client.org