Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/FPBVuSXpFZwytKeXDLr1rlfNby4.roa
File: FPBVuSXpFZwytKeXDLr1rlfNby4.roa (raw, json)
Hash identifier: exumuxKipBdT1Y4mc2/qid6lKVr/Ui0X6GcFJqUIUqc=
Subject key identifier: 14:F0:55:B9:25:E9:15:9C:32:B4:A7:97:0C:BA:F5:AE:57:CD:6F:2E
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 0185701EDD966FC92D0ACC3ECC38512673CF
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/FPBVuSXpFZwytKeXDLr1rlfNby4.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30882
IP address blocks: 79.171.240.0/24 maxlen: 24
79.171.244.0/24 maxlen: 24
79.171.241.0/24 maxlen: 24
79.171.245.0/24 maxlen: 24
79.171.242.0/24 maxlen: 24
79.171.246.0/23 maxlen: 23
79.171.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 06:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:dd:96:6f:c9:2d:0a:cc:3e:cc:38:51:26:73:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f055b925e9159c32b4a7970cbaf5ae57cd6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:b1:0c:f3:d4:c3:0d:50:1f:96:73:9c:b5:
49:6c:3e:c5:b3:08:dd:df:c4:30:94:95:4e:d3:5d:
93:9f:48:75:cf:da:b0:9d:8c:f9:c8:11:12:6b:c7:
04:64:14:bc:20:6a:97:c2:50:0d:9c:a5:9c:5d:ce:
bb:7a:c9:bb:1d:f9:0f:57:9c:1d:3a:fb:03:c2:26:
60:47:2b:4b:26:86:2e:07:ce:f7:87:13:2f:9e:fd:
7a:ab:28:d4:0c:11:75:22:92:f2:66:e9:a1:69:e4:
63:fb:7b:30:67:72:f0:5c:63:1d:9f:84:a4:a8:08:
17:15:e2:72:35:c9:75:e1:41:d6:bc:e8:db:0c:64:
27:8b:9c:39:c1:9b:32:78:07:53:a5:1f:a3:83:0f:
90:70:bf:70:b4:67:08:58:06:25:df:04:81:33:fb:
ae:49:8b:a6:e7:5c:6a:7d:c7:00:69:95:ca:03:69:
c7:68:9a:3c:12:e8:ab:42:46:73:e7:7f:95:3d:10:
c3:86:ae:13:fb:3a:87:7d:f3:96:47:f8:d3:7c:65:
3e:68:2f:bd:65:6d:51:89:8a:49:e3:a5:3f:78:c9:
38:30:c0:92:63:cf:d5:7a:47:23:e7:ef:08:a8:bf:
ab:b5:a1:35:9d:80:08:d3:51:64:d5:bd:fa:38:15:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:55:B9:25:E9:15:9C:32:B4:A7:97:0C:BA:F5:AE:57:CD:6F:2E
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/FPBVuSXpFZwytKeXDLr1rlfNby4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.240.0/21
Signature Algorithm: sha256WithRSAEncryption
72:2a:97:47:11:e2:92:ef:83:a7:ff:53:af:91:f4:53:fe:37:
00:82:d5:ac:d8:d7:f6:48:a4:4c:2c:cf:86:21:1c:15:8b:55:
d0:07:8d:53:b2:b2:d9:69:30:9e:3d:c8:59:66:22:f1:c4:f1:
f1:a0:da:86:ed:01:e1:3c:e1:b9:2f:b2:d9:af:3f:1c:21:55:
cb:c5:d1:a6:38:ae:4d:52:3b:9d:ee:47:63:88:21:f7:fb:1f:
bf:a8:c5:ab:1d:be:15:34:55:76:fb:5d:67:9f:49:29:ba:35:
53:43:cd:fd:ba:a0:ba:39:3e:b3:9b:5d:a5:f6:1d:02:8f:97:
fc:93:5c:54:b2:e6:2f:c4:a3:82:ed:3c:13:7a:39:be:11:75:
48:cb:85:e7:2d:81:90:72:e3:3e:56:c3:11:26:ac:1e:3b:0f:
fc:9c:ce:fe:ff:2c:77:8e:a1:f7:6b:8f:37:b7:46:60:f2:38:
7d:3b:24:d1:ad:2e:2d:91:0d:79:e1:73:e5:f8:a2:91:aa:99:
41:40:fa:23:c9:6b:ad:e8:ff:98:a8:33:65:5f:44:89:27:34:
bb:32:45:71:57:31:3e:c2:83:06:2d:04:3f:2d:6c:eb:62:4a:
e0:0b:bb:26:fa:10:1e:01:e7:cd:96:96:68:84:d9:ee:3c:09:
86:c1:21:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwHt2Wb8ktCsw+zDhRJnPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx
NTBlM2MwHhcNMjMwMTAyMDEzNTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGYwNTViOTI1ZTkxNTljMzJiNGE3OTcwY2JhZjVhZTU3Y2Q2ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5GxDPPUww1QH5ZznLVJbD7Fswjd
38QwlJVO012Tn0h1z9qwnYz5yBESa8cEZBS8IGqXwlANnKWcXc67esm7HfkPV5wd
OvsDwiZgRytLJoYuB873hxMvnv16qyjUDBF1IpLyZumhaeRj+3swZ3LwXGMdn4Sk
qAgXFeJyNcl14UHWvOjbDGQni5w5wZsyeAdTpR+jgw+QcL9wtGcIWAYl3wSBM/uu
SYum51xqfccAaZXKA2nHaJo8EuirQkZz53+VPRDDhq4T+zqHffOWR/jTfGU+aC+9
ZW1RiYpJ46U/eMk4MMCSY8/Vekcj5+8IqL+rtaE1nYAI01Fk1b36OBV0bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTwVbkl6RWcMrSnlwy69a5XzW8uMB8GA1UdIwQY
MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt
MTE4MjQ0MDZiZDVkLzEvRlBCVnVTWHBGWnd5dEtlWERMcjFybGZOYnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk
LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT6vwMA0G
CSqGSIb3DQEBCwUAA4IBAQByKpdHEeKS74On/1OvkfRT/jcAgtWs2Nf2SKRMLM+G
IRwVi1XQB41TsrLZaTCePchZZiLxxPHxoNqG7QHhPOG5L7LZrz8cIVXLxdGmOK5N
Ujud7kdjiCH3+x+/qMWrHb4VNFV2+11nn0kpujVTQ839uqC6OT6zm12l9h0Cj5f8
k1xUsuYvxKOC7TwTejm+EXVIy4XnLYGQcuM+VsMRJqweOw/8nM7+/yx3jqH3a483
t0Zg8jh9OyTRrS4tkQ154XPl+KKRqplBQPojyWut6P+YqDNlX0SJJzS7MkVxVzE+
woMGLQQ/LWzrYkrgC7sm+hAeAefNlpZohNnuPAmGwSHH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:32 2024 by rpki-client on console-fra.rpki-client.org