Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/FTGGgwA8eu6lokuKaVbVEvWUoGg.roa
File: FTGGgwA8eu6lokuKaVbVEvWUoGg.roa (raw, json)
Hash identifier: 5sKGte0IEUzsLHWH+Jy7GsnBmnJqECPsKDqA8X9bxMo=
Subject key identifier: 15:31:86:83:00:3C:7A:EE:A5:A2:4B:8A:69:56:D5:12:F5:94:A0:68
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01856F66E1527E84DAB6DFDF26E4960425ED
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/FTGGgwA8eu6lokuKaVbVEvWUoGg.roa
Signing time: Sun 01 Jan 2023 22:14:50 +0000
ROA not before: Sun 01 Jan 2023 22:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39232
IP address blocks: 217.25.16.0/21 maxlen: 21
217.25.16.0/20 maxlen: 20
217.25.24.0/21 maxlen: 21
185.80.172.0/23 maxlen: 23
185.80.172.0/22 maxlen: 22
185.80.174.0/23 maxlen: 23
109.239.16.0/20 maxlen: 20
109.239.16.0/21 maxlen: 21
37.26.0.0/19 maxlen: 19
37.26.0.0/18 maxlen: 18
109.239.24.0/21 maxlen: 21
37.26.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:e1:52:7e:84:da:b6:df:df:26:e4:96:04:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Jan 1 22:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15318683003c7aeea5a24b8a6956d512f594a068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:13:35:6b:1e:ba:a8:a5:e1:4d:fe:de:4b:
e9:dd:a6:c7:c9:a3:67:06:70:35:fd:39:7b:13:9b:
a3:9e:30:f5:06:67:be:c8:27:69:b6:9f:82:9d:c6:
b2:bc:df:f5:1d:87:0f:50:aa:1b:77:68:f0:b5:67:
cc:8a:cf:7c:45:f0:ca:62:70:36:7b:ac:55:43:c0:
ee:d4:db:ab:41:ce:42:37:c9:52:a7:c0:e6:0c:3b:
bc:57:3f:98:ef:eb:8e:eb:0d:3a:06:5b:6d:9a:65:
5b:81:de:cd:55:e6:6c:4d:2e:ea:70:c3:d9:3d:16:
bb:07:0e:3c:7e:ec:7d:64:56:e0:82:ed:af:44:15:
1a:19:24:ff:21:e5:00:e2:4a:fe:b9:f2:0d:b2:62:
9b:f9:a3:b5:b1:df:80:4c:f0:9b:f5:70:89:d9:d7:
78:fd:e4:0c:b7:19:0d:f8:64:a5:f0:b5:4d:b2:a3:
f4:aa:c5:91:b2:eb:18:89:a6:47:6b:6e:4f:1a:95:
98:2e:57:57:54:4e:c9:f2:30:14:30:54:f1:40:80:
35:e1:cc:aa:b9:e5:bb:49:4b:3e:5a:e0:58:38:0e:
4b:ec:09:f8:4b:61:af:a5:04:a8:a9:0e:73:ca:04:
1e:72:af:b7:a9:8f:4f:38:3d:00:3f:57:a6:3d:8a:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:86:83:00:3C:7A:EE:A5:A2:4B:8A:69:56:D5:12:F5:94:A0:68
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/FTGGgwA8eu6lokuKaVbVEvWUoGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.0.0/18
109.239.16.0/20
185.80.172.0/22
217.25.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:02:80:dd:b6:50:57:59:bd:6a:c0:d4:32:bf:da:76:d5:9e:
35:4c:97:85:3a:b4:2d:c9:88:ce:69:12:d2:1e:5e:2a:85:69:
01:2c:dd:10:02:41:24:19:3c:3b:5a:7c:5e:92:b2:d0:ea:7e:
f7:8c:17:cc:c8:b6:45:92:20:09:48:7e:89:d8:75:24:6d:fc:
68:cf:5f:37:7b:10:75:74:9d:23:6d:d7:17:5d:9e:e8:2a:8e:
49:39:4c:c8:82:f2:dd:c0:f0:dd:de:4e:b2:70:92:fb:fa:5a:
96:1b:d0:b8:d1:60:a8:32:b5:41:3e:da:f0:3b:49:59:9b:00:
0e:07:58:d4:22:fe:77:e5:a3:4c:45:58:95:aa:6c:dd:9b:a6:
c4:a8:6c:82:3f:ad:61:99:72:c8:92:a3:47:0f:5a:15:8c:c9:
e3:73:32:86:1c:f7:57:97:b4:15:b5:b2:12:cf:e8:69:43:ba:
3e:b8:f5:37:4a:47:9e:bd:ea:e4:8c:45:be:a9:3c:2c:83:7f:
68:b5:c1:b0:3f:84:33:db:f5:e9:f2:9d:60:c1:0e:cb:a2:f1:
75:b0:6c:0b:be:37:ed:2b:6a:27:91:e2:c1:c8:3b:39:77:84:
9d:ae:45:1f:8e:63:5c:b7:1d:54:f9:bc:b2:99:00:e8:20:0c:
93:4d:58:79
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVvZuFSfoTatt/fJuSWBCXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzk2M2QxYTExZDAwZDM4NGFkZWRmOWJiODZlNTM4NDlh
OWIxOGMwHhcNMjMwMTAxMjIxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTMxODY4MzAwM2M3YWVlYTVhMjRiOGE2OTU2ZDUxMmY1OTRhMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPkTNWseuqil4U3+3kvp3abHyaNn
BnA1/Tl7E5ujnjD1Bme+yCdptp+CncayvN/1HYcPUKobd2jwtWfMis98RfDKYnA2
e6xVQ8Du1NurQc5CN8lSp8DmDDu8Vz+Y7+uO6w06BlttmmVbgd7NVeZsTS7qcMPZ
PRa7Bw48fux9ZFbggu2vRBUaGST/IeUA4kr+ufINsmKb+aO1sd+ATPCb9XCJ2dd4
/eQMtxkN+GSl8LVNsqP0qsWRsusYiaZHa25PGpWYLldXVE7J8jAUMFTxQIA14cyq
ueW7SUs+WuBYOA5L7An4S2GvpQSoqQ5zygQecq+3qY9POD0AP1emPYriNwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBUxhoMAPHrupaJLimlW1RL1lKBoMB8GA1UdIwQY
MBaAFKPJY9GhHQDThK3t+buG5ThJqbGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mYzUyYTAtZTBmNy00ODBiLWJhN2Qt
MTA0MmVhOGUzYmZiLzEvRlRHR2d3QThldTZsb2t1S2FWYlZFdldVb0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mYzUyYTAtZTBmNy00ODBiLWJhN2QtMTA0MmVhOGUzYmZi
LzEvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGJRoAAwQE
be8QAwQCuVCsAwQE2RkQMA0GCSqGSIb3DQEBCwUAA4IBAQANAoDdtlBXWb1qwNQy
v9p21Z41TJeFOrQtyYjOaRLSHl4qhWkBLN0QAkEkGTw7WnxekrLQ6n73jBfMyLZF
kiAJSH6J2HUkbfxoz183exB1dJ0jbdcXXZ7oKo5JOUzIgvLdwPDd3k6ycJL7+lqW
G9C40WCoMrVBPtrwO0lZmwAOB1jUIv535aNMRViVqmzdm6bEqGyCP61hmXLIkqNH
D1oVjMnjczKGHPdXl7QVtbISz+hpQ7o+uPU3SkeeverkjEW+qTwsg39otcGwP4Qz
2/Xp8p1gwQ7LovF1sGwLvjftK2onkeLByDs5d4SdrkUfjmNctx1U+byymQDoIAyT
TVh5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:23 2024 by rpki-client on console-fra.rpki-client.org