Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/FeP4-X3C9oMUML5JOzoa5w5Zlag.roa
File: FeP4-X3C9oMUML5JOzoa5w5Zlag.roa (raw, json)
Hash identifier: /Qa2KWdXJ6Rs/3NteEi5kSs1Zuv99v68K5yclq6Tz7Q=
Subject key identifier: 15:E3:F8:F9:7D:C2:F6:83:14:30:BE:49:3B:3A:1A:E7:0E:59:95:A8
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 018570B0A1A7EB2D79420E1179322646D59C
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/FeP4-X3C9oMUML5JOzoa5w5Zlag.roa
Signing time: Mon 02 Jan 2023 04:15:01 +0000
ROA not before: Mon 02 Jan 2023 04:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49409
IP address blocks: 185.179.246.0/24 maxlen: 24
2a10:4d40::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:a1:a7:eb:2d:79:42:0e:11:79:32:26:46:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Jan 2 04:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e3f8f97dc2f6831430be493b3a1ae70e5995a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:1d:83:7a:cf:65:70:28:30:54:02:15:9c:
4e:bb:1e:16:76:cc:0b:d2:1d:12:e1:d3:36:17:59:
38:75:cb:f8:33:32:34:08:a5:74:f3:46:74:ce:97:
a8:b1:a6:c0:f6:1b:a7:ed:bd:59:82:a2:35:ea:af:
aa:81:28:bb:43:da:12:ae:1a:ed:d3:0e:49:db:a0:
c0:5c:44:3e:5a:00:ad:ca:54:d3:15:27:77:60:1d:
4a:2e:a2:2d:c7:ff:3f:1a:03:0b:6a:39:84:05:eb:
16:a0:f0:bc:7d:57:42:39:d5:91:ae:7b:31:1b:37:
7f:81:2f:bf:ec:e7:28:ca:41:15:ff:39:ee:b8:00:
7a:cb:bb:b8:35:1c:33:7b:52:c6:9e:88:6c:10:cd:
47:66:fd:1b:d6:b0:dc:01:02:0c:13:b8:98:3e:65:
85:52:31:4b:03:b5:97:10:40:ba:83:a0:8f:d9:fb:
56:42:d1:00:19:ef:dc:72:bf:20:27:4e:25:ec:2a:
78:77:15:f5:bd:ab:6d:73:8f:60:ad:d4:91:c2:6f:
ef:b2:7d:87:35:e4:3b:67:a0:a4:4b:f0:48:15:08:
0c:31:f5:e6:86:d0:2f:f0:29:3c:5b:1d:95:72:2f:
3d:34:04:4a:4d:88:cc:94:32:1d:28:d9:f9:e7:ea:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:F8:F9:7D:C2:F6:83:14:30:BE:49:3B:3A:1A:E7:0E:59:95:A8
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/FeP4-X3C9oMUML5JOzoa5w5Zlag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.246.0/24
IPv6:
2a10:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
86:41:fb:6c:b4:af:a4:21:2e:e5:47:a4:d4:b0:3b:83:ba:f3:
9e:32:70:1a:d8:71:13:48:a5:59:98:98:c4:34:bf:8e:2e:89:
10:0b:3f:d3:8c:72:03:57:cb:9a:b3:fd:d3:6e:86:d5:8a:ef:
f0:0b:b3:46:8a:d2:65:c6:22:2e:74:9e:4b:2e:9f:70:d4:c1:
61:2d:12:d0:10:65:26:b5:89:d0:9f:a2:a9:d6:a9:85:2d:d9:
0e:32:b0:20:2c:90:9e:93:18:3b:3e:6a:25:59:bd:66:a5:3f:
24:9e:8b:5c:cb:ab:af:d6:61:f8:c0:67:5a:78:87:58:5e:c8:
35:94:9a:c7:7b:68:66:91:bc:8a:df:37:41:e3:a7:6c:4f:3d:
35:8f:f6:3a:a9:3a:36:d0:53:32:89:38:5c:17:43:19:41:18:
d3:f7:60:e4:1b:ab:0c:ec:d5:fb:18:b9:68:23:13:69:b9:65:
63:cb:be:3f:37:b8:13:3c:35:9e:b4:cc:bf:bc:11:2c:32:be:
60:7c:3f:de:1e:3e:c1:d1:b2:87:be:77:b5:43:e0:06:dd:e0:
99:a7:5c:0c:e8:6b:a5:c3:7d:db:2a:5f:94:d1:13:0c:38:f5:
c3:5a:9b:82:96:76:65:2f:d3:4d:53:e1:64:22:25:c7:23:c1:
92:28:0e:2d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwsKGn6y15Qg4ReTImRtWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx
NWFmYTcwHhcNMjMwMTAyMDQxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWUzZjhmOTdkYzJmNjgzMTQzMGJlNDkzYjNhMWFlNzBlNTk5NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0sdg3rPZXAoMFQCFZxOux4WdswL
0h0S4dM2F1k4dcv4MzI0CKV080Z0zpeosabA9hun7b1ZgqI16q+qgSi7Q9oSrhrt
0w5J26DAXEQ+WgCtylTTFSd3YB1KLqItx/8/GgMLajmEBesWoPC8fVdCOdWRrnsx
Gzd/gS+/7OcoykEV/znuuAB6y7u4NRwze1LGnohsEM1HZv0b1rDcAQIME7iYPmWF
UjFLA7WXEEC6g6CP2ftWQtEAGe/ccr8gJ04l7Cp4dxX1vattc49grdSRwm/vsn2H
NeQ7Z6CkS/BIFQgMMfXmhtAv8Ck8Wx2Vci89NARKTYjMlDIdKNn55+rTNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBXj+Pl9wvaDFDC+STs6GucOWZWoMB8GA1UdIwQY
MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt
M2NiZTFhZjNiODJjLzEvRmVQNC1YM0M5b01VTUw1Sk96b2E1dzVabGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj
LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubP2MA0E
AgACMAcDBQMqEE1AMA0GCSqGSIb3DQEBCwUAA4IBAQCGQftstK+kIS7lR6TUsDuD
uvOeMnAa2HETSKVZmJjENL+OLokQCz/TjHIDV8uas/3TbobViu/wC7NGitJlxiIu
dJ5LLp9w1MFhLRLQEGUmtYnQn6Kp1qmFLdkOMrAgLJCekxg7PmolWb1mpT8knotc
y6uv1mH4wGdaeIdYXsg1lJrHe2hmkbyK3zdB46dsTz01j/Y6qTo20FMyiThcF0MZ
QRjT92DkG6sM7NX7GLloIxNpuWVjy74/N7gTPDWetMy/vBEsMr5gfD/eHj7B0bKH
vne1Q+AG3eCZp1wM6Gulw33bKl+U0RMMOPXDWpuClnZlL9NNU+FkIiXHI8GSKA4t
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:21 2024 by rpki-client on console-ams.rpki-client.org