Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/fpTRSn1u8VRNE7JVrdxJF4Denlc.roa
File: fpTRSn1u8VRNE7JVrdxJF4Denlc.roa (raw, json)
Hash identifier: f5ck0E+lfbmO8742oCGH66htW5/v/ohwXjylc94fkCE=
Subject key identifier: 7E:94:D1:4A:7D:6E:F1:54:4D:13:B2:55:AD:DC:49:17:80:DE:9E:57
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 01856F4B49A454555892BA1FC29F7AD16652
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/fpTRSn1u8VRNE7JVrdxJF4Denlc.roa
Signing time: Sun 01 Jan 2023 21:44:43 +0000
ROA not before: Sun 01 Jan 2023 21:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209898
IP address blocks: 185.155.30.0/24 maxlen: 24
185.155.31.0/24 maxlen: 24
185.155.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 07:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:49:a4:54:55:58:92:ba:1f:c2:9f:7a:d1:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 21:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e94d14a7d6ef1544d13b255addc491780de9e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:d5:44:c8:5d:97:33:df:94:73:b6:6f:30:
f9:52:80:c0:a6:b9:13:82:c7:c6:1f:92:04:66:18:
12:6e:ae:97:ce:ed:44:72:21:2f:0c:14:81:f8:16:
11:cd:28:0e:0c:10:9b:88:06:ae:fe:7f:e3:4a:da:
db:e8:7c:01:55:fd:42:43:cc:c1:91:5a:24:db:3b:
fa:40:a9:78:76:b8:88:0f:ca:67:27:23:dd:a8:18:
07:bf:f6:a1:e6:9b:5f:47:e7:26:a3:2a:5d:b0:2b:
46:13:11:da:f1:03:6c:11:ca:7c:dd:94:5b:a0:09:
90:ca:be:83:38:12:e8:6a:49:44:38:30:3d:df:b4:
b5:21:0d:06:23:76:6f:cd:20:91:be:79:38:14:73:
7f:3e:1c:a6:63:55:e6:5c:4e:75:51:61:d8:65:f4:
f7:7d:53:54:2e:c5:52:69:e2:35:85:d1:22:eb:28:
d0:f9:36:58:e7:ef:71:33:68:b8:dc:34:6b:72:e3:
d8:97:c6:a1:f1:12:1d:6c:cd:82:c8:7c:c2:66:bd:
57:2f:e8:fe:fd:05:6f:45:d5:ff:41:79:8a:e7:94:
25:41:22:4f:90:13:8d:e0:03:33:08:66:53:06:c3:
f2:d3:31:ba:21:0d:3e:00:36:89:57:0e:22:2a:86:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:D1:4A:7D:6E:F1:54:4D:13:B2:55:AD:DC:49:17:80:DE:9E:57
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/fpTRSn1u8VRNE7JVrdxJF4Denlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0-185.155.31.255
Signature Algorithm: sha256WithRSAEncryption
20:e3:95:b9:c5:c0:00:bf:0f:c8:6a:10:c6:a7:fe:2c:b8:86:
ef:39:0c:4e:d8:bd:88:e5:df:4b:cf:76:29:c9:f6:0b:71:d9:
53:3a:09:9c:a2:30:64:d8:4a:9f:b0:bb:be:96:a8:48:25:e9:
ae:fd:41:22:08:6b:1f:a6:62:aa:f1:bd:6a:1c:30:ee:a5:d2:
81:c5:1e:8f:7b:d0:fa:c3:df:4c:78:64:91:8a:00:e7:94:8f:
48:c7:39:e4:8e:44:79:cb:12:ca:53:93:31:cb:03:71:84:16:
49:4f:b1:f5:6b:79:55:d1:48:eb:40:7f:07:26:73:57:0d:d1:
50:23:23:dd:c4:19:be:c4:c5:4e:05:fe:13:72:8a:45:85:c2:
8c:19:f8:b9:28:53:2d:c4:b4:57:cb:d9:3d:9e:2f:b5:5c:39:
97:5c:3f:31:0e:81:30:a1:de:cc:bd:33:48:4a:a3:8f:38:11:
ad:d8:8d:df:d7:7d:b2:36:66:e9:0e:d6:87:e9:7a:0f:5e:89:
65:8c:26:f1:7f:ed:b1:aa:d7:49:e7:c7:f5:e7:0a:bc:75:f6:
49:dd:8c:c6:28:49:b0:b8:10:76:65:a8:4c:5b:c3:f7:60:9d:
64:dd:66:6c:19:75:5e:b8:6d:0d:28:39:88:ac:83:c7:48:ab:
42:97:73:8b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvS0mkVFVYkrofwp960WZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTg5OGJmNDIwOTI0Zjk3NmI1YWU0NTExMDhiOWU2YTAx
ZmM3ZGMwHhcNMjMwMTAxMjE0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk0ZDE0YTdkNmVmMTU0NGQxM2IyNTVhZGRjNDkxNzgwZGU5ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfnVRMhdlzPflHO2bzD5UoDAprkT
gsfGH5IEZhgSbq6Xzu1EciEvDBSB+BYRzSgODBCbiAau/n/jStrb6HwBVf1CQ8zB
kVok2zv6QKl4driID8pnJyPdqBgHv/ah5ptfR+cmoypdsCtGExHa8QNsEcp83ZRb
oAmQyr6DOBLoaklEODA937S1IQ0GI3ZvzSCRvnk4FHN/PhymY1XmXE51UWHYZfT3
fVNULsVSaeI1hdEi6yjQ+TZY5+9xM2i43DRrcuPYl8ah8RIdbM2CyHzCZr1XL+j+
/QVvRdX/QXmK55QlQSJPkBON4AMzCGZTBsPy0zG6IQ0+ADaJVw4iKoaT4wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFH6U0Up9bvFUTROyVa3cSReA3p5XMB8GA1UdIwQY
MBaAFFfomL9CCST5drWuRREIueagH8fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2Yt
NzEzYjQxNjg4NzA2LzEvZnBUUlNuMXU4VlJORTdKVnJkeEpGNERlbmxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2YtNzEzYjQxNjg4NzA2
LzEvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5mx0D
BAW5mwAwDQYJKoZIhvcNAQELBQADggEBACDjlbnFwAC/D8hqEMan/iy4hu85DE7Y
vYjl30vPdinJ9gtx2VM6CZyiMGTYSp+wu76WqEgl6a79QSIIax+mYqrxvWocMO6l
0oHFHo970PrD30x4ZJGKAOeUj0jHOeSORHnLEspTkzHLA3GEFklPsfVreVXRSOtA
fwcmc1cN0VAjI93EGb7ExU4F/hNyikWFwowZ+LkoUy3EtFfL2T2eL7VcOZdcPzEO
gTCh3sy9M0hKo484Ea3Yjd/XfbI2ZukO1ofpeg9eiWWMJvF/7bGq10nnx/XnCrx1
9kndjMYoSbC4EHZlqExbw/dgnWTdZmwZdV64bQ0oOYisg8dIq0KXc4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:25 2024 by rpki-client on console-fra.rpki-client.org