Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/FQ9GEv4umx1N8IwyzJ0x7K-Apak.roa
File: FQ9GEv4umx1N8IwyzJ0x7K-Apak.roa (raw, json)
Hash identifier: DrlPpIZNMzCXGLDCtfXFMuICks1qoK03OXm71dpa7Xw=
Subject key identifier: 15:0F:46:12:FE:2E:9B:1D:4D:F0:8C:32:CC:9D:31:EC:AF:80:A5:A9
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 018C2254560C3BDECCEE05E0FABF642A9BD9
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/FQ9GEv4umx1N8IwyzJ0x7K-Apak.roa
Signing time: Thu 30 Nov 2023 22:23:21 +0000
ROA not before: Thu 30 Nov 2023 22:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.37.132.0/24 maxlen: 24
178.212.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:54:56:0c:3b:de:cc:ee:05:e0:fa:bf:64:2a:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Nov 30 22:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=150f4612fe2e9b1d4df08c32cc9d31ecaf80a5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:57:f4:1d:4a:42:68:fa:6b:29:b3:27:72:
1b:cb:98:e1:34:d5:1d:dd:5b:92:04:83:e0:76:8c:
08:6e:4f:c2:91:09:f0:fd:f7:5c:78:ba:c3:bc:e7:
b8:59:14:15:d6:57:7b:58:12:65:98:5e:fb:59:24:
fb:07:96:dc:3a:01:0b:b9:f2:d0:9f:38:3c:54:6b:
70:7f:e9:94:1a:02:c4:34:f2:6a:1a:5c:3d:3f:97:
23:5c:96:96:69:0e:95:47:f1:61:6e:fa:fa:a9:47:
e5:9a:e6:ca:3b:4e:72:f6:0f:de:0d:15:e4:ed:3f:
67:37:f6:5e:6e:b4:84:2a:4c:59:98:8b:7f:74:bb:
b2:ac:7c:94:d5:2b:fa:37:a5:cb:5e:24:37:ca:ad:
0b:d4:b1:77:ba:68:7c:20:6f:f0:14:29:e2:ca:de:
f9:36:31:a8:91:34:99:b7:75:11:ae:44:74:d7:2d:
77:cf:bc:4a:28:fb:22:d6:02:90:20:16:88:bb:27:
60:42:0b:23:54:8a:79:b2:47:62:a8:13:32:17:39:
c0:4e:d1:1e:75:81:7a:9c:49:34:18:b3:05:da:55:
57:c9:84:a5:81:9a:1d:87:7e:b8:3b:6d:0b:67:84:
85:c5:29:0f:33:82:ae:60:1c:28:29:5f:ef:a0:95:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:46:12:FE:2E:9B:1D:4D:F0:8C:32:CC:9D:31:EC:AF:80:A5:A9
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/FQ9GEv4umx1N8IwyzJ0x7K-Apak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.92.0/24
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5e:98:d7:87:5a:3c:f7:1f:4c:b3:f2:b1:67:a2:16:c8:d8:
a3:c8:7f:b5:85:ee:4f:80:3b:f1:ce:ec:b4:7e:48:e2:aa:d9:
f7:74:c9:09:2d:64:a4:94:ee:1a:c4:7f:7d:f8:e2:fe:c5:28:
47:fc:cd:24:11:39:e6:cf:ec:5b:04:e7:c9:d6:92:71:dd:68:
7a:5c:53:0c:0e:ac:2f:3d:6c:e3:a0:1a:a6:06:9b:2f:a1:a5:
38:b2:d8:d3:d3:7f:79:37:26:4a:45:a8:52:f8:56:6b:cb:a1:
6d:88:8e:05:16:6e:73:0b:6e:9d:ad:cd:ce:8a:de:2d:bf:c2:
25:85:d6:20:7d:72:48:73:86:be:a6:0e:11:16:bc:81:5c:d7:
9e:15:72:ab:58:03:3e:fd:c3:24:9a:c2:39:69:64:76:44:10:
08:51:5f:b0:7c:c8:5d:d5:47:34:a1:2e:35:9c:1c:76:a8:2a:
fc:90:86:77:59:7e:4e:bb:b3:a4:1b:47:33:8e:e1:a8:65:7e:
44:ea:e2:c5:2d:28:43:2d:d0:64:00:6f:d6:7c:b8:8a:cc:4c:
20:c6:42:72:71:32:67:b9:a5:c7:af:74:bc:01:cb:bc:08:26:
18:06:4f:63:ea:65:a3:d7:2e:dc:66:13:fd:1c:31:4a:b5:1b:
28:34:a8:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwiVFYMO97M7gXg+r9kKpvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl
ZGMwYTcwHhcNMjMxMTMwMjIyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTBmNDYxMmZlMmU5YjFkNGRmMDhjMzJjYzlkMzFlY2FmODBhNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuFX9B1KQmj6aymzJ3Iby5jhNNUd
3VuSBIPgdowIbk/CkQnw/fdceLrDvOe4WRQV1ld7WBJlmF77WST7B5bcOgELufLQ
nzg8VGtwf+mUGgLENPJqGlw9P5cjXJaWaQ6VR/Fhbvr6qUflmubKO05y9g/eDRXk
7T9nN/ZebrSEKkxZmIt/dLuyrHyU1Sv6N6XLXiQ3yq0L1LF3umh8IG/wFCniyt75
NjGokTSZt3URrkR01y13z7xKKPsi1gKQIBaIuydgQgsjVIp5skdiqBMyFznATtEe
dYF6nEk0GLMF2lVXyYSlgZodh364O20LZ4SFxSkPM4KuYBwoKV/voJUYDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBUPRhL+LpsdTfCMMsydMeyvgKWpMB8GA1UdIwQY
MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt
Y2U2OTU1Njc2MWJkLzEvRlE5R0V2NHVteDFOOEl3eXpKMHg3Sy1BcGFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk
LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstRcAwQA
wSWEMA0GCSqGSIb3DQEBCwUAA4IBAQBtXpjXh1o89x9Ms/KxZ6IWyNijyH+1he5P
gDvxzuy0fkjiqtn3dMkJLWSklO4axH99+OL+xShH/M0kETnmz+xbBOfJ1pJx3Wh6
XFMMDqwvPWzjoBqmBpsvoaU4stjT0395NyZKRahS+FZry6FtiI4FFm5zC26drc3O
it4tv8IlhdYgfXJIc4a+pg4RFryBXNeeFXKrWAM+/cMkmsI5aWR2RBAIUV+wfMhd
1Uc0oS41nBx2qCr8kIZ3WX5Ou7OkG0czjuGoZX5E6uLFLShDLdBkAG/WfLiKzEwg
xkJycTJnuaXHr3S8Acu8CCYYBk9j6mWj1y7cZhP9HDFKtRsoNKg9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org