Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/FZXuYJ0bKU5EKn_PLhfET8CNclU.roa
File: FZXuYJ0bKU5EKn_PLhfET8CNclU.roa (raw, json)
Hash identifier: lktj5aqlrNqPim2cUWIF4TvOPs0H8ecKvgSZTP0pH4w=
Subject key identifier: 15:95:EE:60:9D:1B:29:4E:44:2A:7F:CF:2E:17:C4:4F:C0:8D:72:55
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018E148B0DB7BBB569082334BDA0393F0E63
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/FZXuYJ0bKU5EKn_PLhfET8CNclU.roa
Signing time: Wed 06 Mar 2024 16:14:01 +0000
ROA not before: Wed 06 Mar 2024 16:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15755
IP address blocks: 185.35.21.0/24 maxlen: 24
185.96.168.0/24 maxlen: 24
185.96.171.0/24 maxlen: 24
185.203.32.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:8b:0d:b7:bb:b5:69:08:23:34:bd:a0:39:3f:0e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Mar 6 16:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1595ee609d1b294e442a7fcf2e17c44fc08d7255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f4:d3:5b:8e:f1:bd:8d:09:7a:e2:b0:ad:b7:
65:e2:ce:79:fa:5e:4a:df:0c:02:6c:de:9c:ca:70:
39:57:40:ba:59:37:4d:2f:12:01:aa:b0:6c:1f:69:
bb:ed:6c:66:9d:c6:28:3c:7a:aa:3b:84:b9:19:c6:
5d:5c:e3:f8:64:a4:8b:44:bd:c1:72:cb:bd:6b:d8:
29:4d:fe:be:42:30:6f:a3:ae:f8:2e:ff:48:29:8f:
56:08:de:88:23:9f:fd:9b:a3:e5:3c:89:18:89:e9:
09:f8:1b:aa:05:45:d8:ab:c3:86:54:f7:ce:56:42:
3f:97:a2:3d:fe:2e:e1:9d:8a:62:09:b6:f1:4b:06:
17:af:0e:8b:0d:10:dc:e5:3e:10:fd:b9:7b:c7:78:
1f:63:84:6b:bb:da:49:19:b0:2c:00:e9:1d:9a:44:
7f:84:a5:20:41:e6:7a:65:1c:36:3c:7b:a8:cd:46:
09:97:c7:6d:c1:3f:66:a6:24:c0:3c:b8:5b:95:8d:
9b:26:5b:2b:50:47:ad:b7:28:52:b9:9f:77:51:cb:
31:5c:59:4c:5e:d8:7e:50:34:3d:ba:9f:0d:80:a6:
70:c9:db:a8:a0:1c:02:ec:a7:d2:37:d4:ed:53:ce:
85:32:b9:54:b1:65:28:f9:d0:ce:e8:b4:88:d4:e3:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:EE:60:9D:1B:29:4E:44:2A:7F:CF:2E:17:C4:4F:C0:8D:72:55
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/FZXuYJ0bKU5EKn_PLhfET8CNclU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.21.0/24
185.96.168.0/24
185.96.171.0/24
185.203.32.0/24
185.203.34.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:d4:c3:d0:ab:2f:d8:89:2f:b6:f6:b5:29:80:0d:67:44:16:
80:bc:cf:4d:61:d9:a6:a0:a2:ff:53:26:80:9a:df:16:54:be:
a7:eb:b1:45:80:5a:7e:c9:26:9e:37:dc:2c:09:94:82:2f:0f:
6f:a5:fb:b7:eb:e7:7c:5c:f5:90:21:f5:03:62:c7:c0:ef:75:
f4:d4:2b:ef:16:af:a7:f7:19:58:71:58:71:a7:58:e0:65:3c:
90:f0:42:d6:db:2b:80:a4:51:53:e8:72:57:75:80:6d:72:4e:
d0:61:4b:61:bd:71:27:4d:38:2e:2e:46:99:1e:8f:94:85:0f:
f0:6a:0c:7c:8c:7f:1c:bb:59:0c:79:c1:a5:b5:c7:6c:0d:73:
95:18:05:62:6c:e3:6e:f7:0a:06:f4:14:dd:81:58:02:cd:45:
5b:4f:a1:58:bb:2c:9a:06:71:44:fb:15:7a:ee:de:97:b1:cd:
3a:c5:be:85:42:cd:9b:ce:29:55:46:cf:eb:51:46:cd:e3:41:
7f:9b:65:f2:51:4e:3a:b6:0c:e5:e5:18:e7:78:1d:89:aa:c0:
09:be:05:33:e6:5f:83:b2:3c:73:e4:b6:94:da:9d:7d:53:45:
60:6a:a5:95:7e:5f:61:c9:c6:02:7c:bb:f9:3e:24:b0:b0:09:
0e:ff:db:55
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAY4Uiw23u7VpCCM0vaA5Pw5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjQwMzA2MTYxNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTk1ZWU2MDlkMWIyOTRlNDQyYTdmY2YyZTE3YzQ0ZmMwOGQ3MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPTTW47xvY0JeuKwrbdl4s55+l5K
3wwCbN6cynA5V0C6WTdNLxIBqrBsH2m77WxmncYoPHqqO4S5GcZdXOP4ZKSLRL3B
csu9a9gpTf6+QjBvo674Lv9IKY9WCN6II5/9m6PlPIkYiekJ+BuqBUXYq8OGVPfO
VkI/l6I9/i7hnYpiCbbxSwYXrw6LDRDc5T4Q/bl7x3gfY4Rru9pJGbAsAOkdmkR/
hKUgQeZ6ZRw2PHuozUYJl8dtwT9mpiTAPLhblY2bJlsrUEettyhSuZ93UcsxXFlM
Xth+UDQ9up8NgKZwyduooBwC7KfSN9TtU86FMrlUsWUo+dDO6LSI1ON/lQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBWV7mCdGylORCp/zy4XxE/AjXJVMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvRlpYdVlKMGJLVTVFS25fUExoZkVUOENOY2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAuSMVAwQA
uWCoAwQAuWCrAwQAucsgAwQAucsiMA0EAgACMAcDBQMqCuDAMA0GCSqGSIb3DQEB
CwUAA4IBAQAw1MPQqy/YiS+29rUpgA1nRBaAvM9NYdmmoKL/UyaAmt8WVL6n67FF
gFp+ySaeN9wsCZSCLw9vpfu36+d8XPWQIfUDYsfA73X01CvvFq+n9xlYcVhxp1jg
ZTyQ8ELW2yuApFFT6HJXdYBtck7QYUthvXEnTTguLkaZHo+UhQ/wagx8jH8cu1kM
ecGltcdsDXOVGAVibONu9woG9BTdgVgCzUVbT6FYuyyaBnFE+xV67t6Xsc06xb6F
Qs2bzilVRs/rUUbN40F/m2XyUU46tgzl5RjneB2JqsAJvgUz5l+Dsjxz5LaU2p19
U0VgaqWVfl9hycYCfLv5PiSwsAkO/9tV
-----END CERTIFICATE-----
Generated at Tue Mar 19 14:59:05 2024 by rpki-client on console-fra.rpki-client.org