Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/FmMw0vp_m8mXIdXsZpxVWs8pPts.roa
File: FmMw0vp_m8mXIdXsZpxVWs8pPts.roa (raw, json)
Hash identifier: IThDPK40YJzqcmpMBhW4zhPgONv9OBdidgr5rAZlI7Q=
Subject key identifier: 16:63:30:D2:FA:7F:9B:C9:97:21:D5:EC:66:9C:55:5A:CF:29:3E:DB
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01898D10AD45EFBBF5E8AE651E07F4E352DB
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/FmMw0vp_m8mXIdXsZpxVWs8pPts.roa
Signing time: Tue 25 Jul 2023 12:40:27 +0000
ROA not before: Tue 25 Jul 2023 12:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54548
IP address blocks: 185.132.32.0/22 maxlen: 24
157.97.104.0/24 maxlen: 24
157.97.105.0/24 maxlen: 24
217.160.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:10:ad:45:ef:bb:f5:e8:ae:65:1e:07:f4:e3:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jul 25 12:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=166330d2fa7f9bc99721d5ec669c555acf293edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:d8:97:3a:48:6c:49:10:ad:52:bd:ea:a1:
25:65:08:a4:86:a8:02:95:2d:f4:52:40:77:98:71:
b9:aa:51:74:5e:5b:be:92:e8:fb:8a:db:c4:6c:79:
cd:ba:8a:1c:e5:36:1e:1f:af:f6:a9:c4:7e:36:3d:
25:cc:92:29:1a:d6:c9:ca:15:c0:46:6a:7e:d1:8c:
dd:ef:7e:17:f1:29:1a:1c:b6:e7:02:d3:7b:64:ad:
bd:c2:45:00:f5:84:de:f0:97:a7:42:9a:7a:3c:9f:
6f:e0:36:91:b1:33:3f:dd:e0:ae:3a:7e:f3:f7:cd:
d4:3c:68:8b:c3:a0:5c:dc:5e:c9:be:ff:ed:f9:1e:
72:0e:85:af:88:c2:43:3f:3c:49:be:47:96:52:be:
72:c3:f3:22:d2:45:54:b9:34:74:a8:9d:a4:f2:b0:
0c:fa:d0:1a:58:95:2b:6d:d0:8d:9c:68:e5:04:cf:
52:19:4b:4a:93:2c:5b:4e:57:52:d6:35:42:db:49:
45:d7:26:02:29:1e:41:9b:a3:33:ee:03:d5:48:fe:
32:55:a5:eb:29:a1:bf:12:29:5e:7e:ce:9a:98:65:
1e:d0:58:6d:50:66:8b:27:21:2c:d3:50:92:7e:82:
bb:fc:1a:4f:98:13:ab:db:36:51:03:20:31:28:34:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:30:D2:FA:7F:9B:C9:97:21:D5:EC:66:9C:55:5A:CF:29:3E:DB
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/FmMw0vp_m8mXIdXsZpxVWs8pPts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.104.0/23
185.132.32.0/22
217.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:48:c6:4c:a8:f6:45:dc:a7:ac:80:8c:be:b2:2c:d8:f3:aa:
a9:a3:c0:6e:23:d4:0d:11:d3:d2:5f:ca:19:dd:78:c7:6e:86:
0a:cd:50:f5:36:82:d3:d3:e5:99:9c:73:e5:6e:1c:09:4c:c7:
3f:90:17:61:ee:05:fc:4e:ca:f0:a6:47:22:64:0b:2e:2e:6d:
4c:93:50:ab:b4:96:54:be:b5:24:27:8c:36:40:7c:7d:0e:c2:
dd:8b:a8:e0:b7:22:64:92:ed:b7:84:02:86:27:3f:99:83:41:
71:cc:55:49:b7:19:58:9f:d6:76:da:3d:55:bf:64:d6:62:cd:
a3:8a:c1:cf:75:b9:8e:10:27:dc:f5:66:b0:06:f2:99:da:fa:
dc:fc:87:16:2c:83:93:29:ee:d7:e8:72:bf:d2:93:f2:de:59:
58:92:77:62:8d:d2:54:84:7f:14:87:4d:36:54:69:7a:6b:b5:
58:6c:c5:10:ff:d6:17:75:a5:4e:c1:20:7e:6e:ad:f3:df:71:
3c:85:a8:f9:db:e8:da:c1:ff:ba:70:12:4c:16:83:1c:a2:c6:
a1:a1:88:8b:a1:ef:dc:b9:0b:0f:88:7d:23:fd:b2:ee:57:35:
ce:31:66:c2:95:2f:af:03:d2:19:2a:7e:cd:74:58:df:23:7a:
5b:e0:09:7b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYmNEK1F77v16K5lHgf041LbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjMwNzI1MTI0MDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjYzMzBkMmZhN2Y5YmM5OTcyMWQ1ZWM2NjljNTU1YWNmMjkzZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+nYlzpIbEkQrVK96qElZQikhqgC
lS30UkB3mHG5qlF0Xlu+kuj7itvEbHnNuooc5TYeH6/2qcR+Nj0lzJIpGtbJyhXA
Rmp+0Yzd734X8SkaHLbnAtN7ZK29wkUA9YTe8JenQpp6PJ9v4DaRsTM/3eCuOn7z
983UPGiLw6Bc3F7Jvv/t+R5yDoWviMJDPzxJvkeWUr5yw/Mi0kVUuTR0qJ2k8rAM
+tAaWJUrbdCNnGjlBM9SGUtKkyxbTldS1jVC20lF1yYCKR5Bm6Mz7gPVSP4yVaXr
KaG/Eilefs6amGUe0FhtUGaLJyEs01CSfoK7/BpPmBOr2zZRAyAxKDSoFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBZjMNL6f5vJlyHV7GacVVrPKT7bMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEvRm1NdzB2cF9tOG1YSWRYc1pweFZXczhwUHRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnWFoAwQC
uYQgAwQB2aCWMA0GCSqGSIb3DQEBCwUAA4IBAQCaSMZMqPZF3KesgIy+sizY86qp
o8BuI9QNEdPSX8oZ3XjHboYKzVD1NoLT0+WZnHPlbhwJTMc/kBdh7gX8Tsrwpkci
ZAsuLm1Mk1CrtJZUvrUkJ4w2QHx9DsLdi6jgtyJkku23hAKGJz+Zg0FxzFVJtxlY
n9Z22j1Vv2TWYs2jisHPdbmOECfc9WawBvKZ2vrc/IcWLIOTKe7X6HK/0pPy3llY
kndijdJUhH8Uh002VGl6a7VYbMUQ/9YXdaVOwSB+bq3z33E8haj52+jawf+6cBJM
FoMcosahoYiLoe/cuQsPiH0j/bLuVzXOMWbClS+vA9IZKn7NdFjfI3pb4Al7
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net