Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/FWIfnp8K_Jf238c_YspTDDvK7GE.roa
File: FWIfnp8K_Jf238c_YspTDDvK7GE.roa (raw, json)
Hash identifier: ze+LbUObx1irkVfnoYevuMIiL3viOXa4+Br4uaV3eR4=
Subject key identifier: 15:62:1F:9E:9F:0A:FC:97:F6:DF:C7:3F:62:CA:53:0C:3B:CA:EC:61
Certificate issuer: /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial: 01856DDD3054B128AFB2D990CFA2124E7BB7
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/FWIfnp8K_Jf238c_YspTDDvK7GE.roa
Signing time: Sun 01 Jan 2023 15:04:50 +0000
ROA not before: Sun 01 Jan 2023 15:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21032
IP address blocks: 185.159.208.0/22 maxlen: 22
195.85.202.0/24 maxlen: 24
80.78.160.0/20 maxlen: 20
80.78.176.0/20 maxlen: 20
193.109.138.0/23 maxlen: 23
89.145.0.0/18 maxlen: 18
2a02:5d0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Dec 2023 20:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:30:54:b1:28:af:b2:d9:90:cf:a2:12:4e:7b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Validity
Not Before: Jan 1 15:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15621f9e9f0afc97f6dfc73f62ca530c3bcaec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:9d:c6:0e:19:40:1b:b6:36:27:9d:e4:ca:
3b:e2:8f:ec:94:1c:d6:b1:17:66:6c:0c:2a:b8:7f:
be:97:df:00:18:dd:19:61:a7:f7:01:bc:8d:b8:5c:
98:52:23:33:b6:71:87:32:c3:a0:48:f5:13:1a:11:
fc:7f:55:21:d5:b4:a7:bc:fc:a7:09:f4:a4:b5:a8:
f8:ab:cc:07:49:85:7c:70:de:24:94:e5:ea:c6:e9:
ce:cf:42:0b:0e:25:ad:14:d6:4b:37:40:c7:49:ca:
93:85:9d:14:ae:c4:60:f1:15:fd:6e:52:bc:c9:59:
70:a0:b5:63:a0:2f:4d:28:35:61:50:f9:25:67:64:
32:57:ab:6a:ac:e1:89:5c:6f:f0:9a:0d:0e:01:c6:
7c:96:d4:86:c0:73:73:d8:5b:ba:e0:ec:80:86:46:
7e:2e:9f:53:61:b1:d9:68:87:af:9b:5f:fe:5a:30:
8f:29:d3:ae:c9:bb:58:aa:b7:77:53:73:f5:f7:59:
bc:72:f0:05:06:8a:1a:48:78:95:63:3e:98:47:3b:
e9:7d:42:85:3b:cc:3c:18:0a:c7:db:50:c3:df:84:
82:c1:f0:0a:b4:7d:75:f1:45:d6:11:4c:55:c4:11:
02:4e:5c:e0:0d:5e:18:01:58:c2:47:54:a9:ec:b8:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:1F:9E:9F:0A:FC:97:F6:DF:C7:3F:62:CA:53:0C:3B:CA:EC:61
X509v3 Authority Key Identifier:
keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/FWIfnp8K_Jf238c_YspTDDvK7GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.160.0/19
89.145.0.0/18
185.159.208.0/22
193.109.138.0/23
195.85.202.0/24
IPv6:
2a02:5d0::/29
Signature Algorithm: sha256WithRSAEncryption
06:e4:df:db:c8:ef:b5:15:fe:cd:71:a1:8a:45:3d:94:2b:70:
e1:a1:3b:3d:3b:96:7a:f9:d0:1d:35:5b:c3:3a:03:88:07:9a:
27:0e:99:31:7d:80:72:a6:bc:32:e8:8f:d5:81:95:e9:8a:50:
8e:2e:c0:47:26:39:60:05:36:6a:87:62:fd:0f:38:57:5e:cf:
10:3a:af:2c:62:26:36:70:6d:9d:09:9a:ad:bf:0d:15:11:bf:
7b:af:28:c2:62:d8:c5:77:d9:35:b5:83:4d:d7:80:3a:a3:8b:
5b:f6:16:6c:95:e8:70:a2:9b:0a:24:4d:4f:9c:ce:cc:d1:fa:
9b:0a:46:6f:d3:d7:be:93:77:88:68:40:c1:d1:04:0c:02:41:
2f:5c:f3:57:ef:3c:3e:d3:72:ae:c8:28:33:f2:af:b5:57:82:
c7:73:61:24:32:11:00:03:60:3d:43:da:1e:db:e5:aa:7b:ba:
3d:df:45:c2:1d:a2:17:f2:81:d7:3d:0a:22:73:05:60:d7:01:
d5:eb:2a:07:fa:e8:67:2d:41:9d:19:52:88:03:e3:50:b8:ea:
5c:63:cb:0c:8c:2a:25:4b:88:10:f6:c8:87:63:fc:c4:e8:42:
fc:3c:c1:5f:68:fa:5d:69:08:0a:e6:b9:63:e7:05:9c:f7:ff:
55:3f:ae:84
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYVt3TBUsSivstmQz6ISTnu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MDZlYzljZjFkZWFiZjlkNmNkNWY4ODkxYmI4MmQ1NmY5
MWQ2NzgwHhcNMjMwMTAxMTUwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTYyMWY5ZTlmMGFmYzk3ZjZkZmM3M2Y2MmNhNTMwYzNiY2FlYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13edxg4ZQBu2Nied5Mo74o/slBzW
sRdmbAwquH++l98AGN0ZYaf3AbyNuFyYUiMztnGHMsOgSPUTGhH8f1Uh1bSnvPyn
CfSktaj4q8wHSYV8cN4klOXqxunOz0ILDiWtFNZLN0DHScqThZ0UrsRg8RX9blK8
yVlwoLVjoC9NKDVhUPklZ2QyV6tqrOGJXG/wmg0OAcZ8ltSGwHNz2Fu64OyAhkZ+
Lp9TYbHZaIevm1/+WjCPKdOuybtYqrd3U3P191m8cvAFBooaSHiVYz6YRzvpfUKF
O8w8GArH21DD34SCwfAKtH118UXWEUxVxBECTlzgDV4YAVjCR1Sp7LgLwQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFBViH56fCvyX9t/HP2LKUww7yuxhMB8GA1UdIwQY
MBaAFPgG7Jzx3qv51s1fiJG7gtVvkdZ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BYnNuUEhlcV9uV3pWLUlrYnVDMVctUjFuZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDQwNGY1LWUxMGMtNDE5MC05Mjcw
LWFjMGE4NGEyN2Q1My8xL0ZXSWZucDhLX0pmMjM4Y19Zc3BURER2SzdHRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGEvNDQwNGY1LWUxMGMtNDE5MC05MjcwLWFjMGE4NGEyN2Q1
My8xLzEtQWJzblBIZXFfbld6Vi1Ja2J1QzFXLVIxbmcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAVQTqAD
BAZZkQADBAK5n9ADBAHBbYoDBADDVcowDQQCAAIwBwMFAyoCBdAwDQYJKoZIhvcN
AQELBQADggEBAAbk39vI77UV/s1xoYpFPZQrcOGhOz07lnr50B01W8M6A4gHmicO
mTF9gHKmvDLoj9WBlemKUI4uwEcmOWAFNmqHYv0POFdezxA6ryxiJjZwbZ0Jmq2/
DRURv3uvKMJi2MV32TW1g03XgDqji1v2FmyV6HCimwokTU+czszR+psKRm/T176T
d4hoQMHRBAwCQS9c81fvPD7Tcq7IKDPyr7VXgsdzYSQyEQADYD1D2h7b5ap7uj3f
RcIdohfygdc9CiJzBWDXAdXrKgf66GctQZ0ZUogD41C46lxjywyMKiVLiBD2yIdj
/MToQvw8wV9o+l1pCArmuWPnBZz3/1U/roQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:10 2024 by rpki-client on console-ams.rpki-client.org