Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/fwyIm90KFcRy1_kNhr1C2EzjwnM.roa
File: fwyIm90KFcRy1_kNhr1C2EzjwnM.roa (raw, json)
Hash identifier: 6ybfYzObrU054wlaJM6HX8VyN2uvP2pOWTOE+iZFFBI=
Subject key identifier: 7F:0C:88:9B:DD:0A:15:C4:72:D7:F9:0D:86:BD:42:D8:4C:E3:C2:73
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018FB8D0CD1F8F8DF4B35E90D51A9D7CAB23
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/fwyIm90KFcRy1_kNhr1C2EzjwnM.roa
Signing time: Mon 27 May 2024 06:50:42 +0000
ROA not before: Mon 27 May 2024 06:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 45.129.242.0/24 maxlen: 24
91.230.47.0/24 maxlen: 24
185.131.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 06:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:d0:cd:1f:8f:8d:f4:b3:5e:90:d5:1a:9d:7c:ab:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: May 27 06:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f0c889bdd0a15c472d7f90d86bd42d84ce3c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:93:36:07:c9:61:b4:61:fe:6f:96:75:bd:
35:82:e7:22:af:7d:09:7c:98:c7:cb:86:8e:50:ef:
5f:62:b3:80:67:e0:50:b6:71:7a:88:49:bb:ab:f0:
18:56:6c:e0:a0:4f:5a:4e:18:25:17:90:a0:17:61:
be:c3:27:00:fb:5a:5d:20:e5:49:46:b5:af:24:e3:
3b:24:93:fb:d2:6a:ee:26:2d:00:62:cf:7a:08:b5:
48:3f:d2:be:90:fd:9a:c9:bb:4e:4d:0f:84:3f:30:
59:51:f9:5f:53:ec:c3:7a:3a:96:c9:eb:e9:fa:cc:
6b:e7:1e:96:7f:c4:99:2d:b9:89:a0:35:84:11:a5:
c1:0d:d9:54:88:29:b6:c3:91:4a:b1:d2:5a:a7:3a:
a7:e1:6c:1e:03:8e:e5:52:41:da:11:68:0f:7b:d4:
3c:a3:c2:d1:15:27:29:f1:2c:eb:cd:37:f6:d6:36:
1e:f6:95:12:c7:eb:d2:fe:69:3d:16:06:70:bf:ff:
f8:9e:63:40:d9:17:85:e7:16:36:f2:19:2f:46:ea:
53:b5:78:20:a1:1f:a3:2c:f9:6a:29:46:6f:8f:c2:
19:0c:8d:a4:84:d6:d4:f4:6b:e8:f8:e9:09:66:73:
3f:c2:4d:93:b2:41:28:3e:a0:77:0f:7c:8d:6c:f9:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0C:88:9B:DD:0A:15:C4:72:D7:F9:0D:86:BD:42:D8:4C:E3:C2:73
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/fwyIm90KFcRy1_kNhr1C2EzjwnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.242.0/24
91.230.47.0/24
185.131.207.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e2:14:97:05:65:d5:b4:2d:92:96:99:4a:2e:43:cf:0d:76:
c1:6d:61:5c:66:3b:50:a5:3d:5e:3d:04:32:f8:3a:f3:67:34:
09:d4:5d:65:dd:d8:72:d1:ae:c0:64:fb:ea:e3:38:df:f3:5e:
18:1d:8e:ea:2a:07:c8:b0:6b:f3:86:0a:4a:30:33:75:d1:15:
6e:aa:f0:99:aa:66:b0:16:2b:41:87:5a:a3:31:92:1d:cd:93:
46:40:c4:69:d7:23:82:33:69:fd:06:75:f6:d6:d3:28:ac:4b:
0c:f6:89:f3:e9:96:d7:e9:cc:5a:7e:a7:67:dc:90:d0:39:2e:
52:81:85:b9:80:0c:df:5a:41:a8:19:cc:b2:3e:e7:53:1d:30:
97:d1:f4:a2:f8:73:a8:87:4e:76:ed:a4:32:00:1e:27:de:9e:
83:00:68:25:ba:7f:d3:c5:b6:b5:52:9e:1e:53:54:e2:c0:92:
45:7f:06:af:5e:e7:7b:01:36:45:97:be:44:8d:79:6d:38:ca:
48:ec:30:02:9f:6e:4f:40:52:90:8d:c8:cf:ee:42:18:bb:68:
28:73:d7:74:e1:6a:85:5d:10:18:d3:3b:af:cc:e5:6e:bd:18:
4d:6a:a0:40:7e:b5:aa:7e:8a:c1:82:fa:e9:67:93:18:5a:58:
0b:7d:02:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY+40M0fj430s16Q1RqdfKsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh
N2U1NjYwHhcNMjQwNTI3MDY1MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjBjODg5YmRkMGExNWM0NzJkN2Y5MGQ4NmJkNDJkODRjZTNjMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSSTNgfJYbRh/m+Wdb01gucir30J
fJjHy4aOUO9fYrOAZ+BQtnF6iEm7q/AYVmzgoE9aThglF5CgF2G+wycA+1pdIOVJ
RrWvJOM7JJP70mruJi0AYs96CLVIP9K+kP2aybtOTQ+EPzBZUflfU+zDejqWyevp
+sxr5x6Wf8SZLbmJoDWEEaXBDdlUiCm2w5FKsdJapzqn4WweA47lUkHaEWgPe9Q8
o8LRFScp8SzrzTf21jYe9pUSx+vS/mk9FgZwv//4nmNA2ReF5xY28hkvRupTtXgg
oR+jLPlqKUZvj8IZDI2khNbU9Gvo+OkJZnM/wk2TskEoPqB3D3yNbPlQSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH8MiJvdChXEctf5DYa9QthM48JzMB8GA1UdIwQY
MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt
OTRlZmJmNWNlY2Q0LzEvZnd5SW05MEtGY1J5MV9rTmhyMUMyRXpqd25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0
LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYHyAwQA
W+YvAwQAuYPPMA0GCSqGSIb3DQEBCwUAA4IBAQA14hSXBWXVtC2SlplKLkPPDXbB
bWFcZjtQpT1ePQQy+DrzZzQJ1F1l3dhy0a7AZPvq4zjf814YHY7qKgfIsGvzhgpK
MDN10RVuqvCZqmawFitBh1qjMZIdzZNGQMRp1yOCM2n9BnX21tMorEsM9onz6ZbX
6cxafqdn3JDQOS5SgYW5gAzfWkGoGcyyPudTHTCX0fSi+HOoh0527aQyAB4n3p6D
AGglun/Txba1Up4eU1TiwJJFfwavXud7ATZFl75EjXltOMpI7DACn25PQFKQjcjP
7kIYu2goc9d04WqFXRAY0zuvzOVuvRhNaqBAfrWqforBgvrpZ5MYWlgLfQIH
-----END CERTIFICATE-----
Generated at Fri Jun 7 08:51:47 2024 by rpki-client on console-ams.rpki-client.org