Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/FLvrh2p5Gd_EbRBzYHf5p2cbyyk.roa
File: FLvrh2p5Gd_EbRBzYHf5p2cbyyk.roa (raw, json)
Hash identifier: 0+a+NpLiPz0QAad1/XQwSfXyeh0dKTIKx4HtYtVTuQ4=
Subject key identifier: 14:BB:EB:87:6A:79:19:DF:C4:6D:10:73:60:77:F9:A7:67:1B:CB:29
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 0192853E175BC23658E9D073C21BE8744C78
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/FLvrh2p5Gd_EbRBzYHf5p2cbyyk.roa
Signing time: Sun 13 Oct 2024 09:38:11 +0000
ROA not before: Sun 13 Oct 2024 09:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13002
IP address blocks: 194.0.104.0/24 maxlen: 24
213.159.96.0/19 maxlen: 19
213.159.113.0/24 maxlen: 24
213.159.118.0/24 maxlen: 24
213.159.119.0/24 maxlen: 24
213.159.122.0/24 maxlen: 24
213.159.124.0/24 maxlen: 24
213.159.125.0/24 maxlen: 24
213.159.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 10:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:3e:17:5b:c2:36:58:e9:d0:73:c2:1b:e8:74:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Oct 13 09:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14bbeb876a7919dfc46d10736077f9a7671bcb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:63:67:5b:6e:09:f9:02:71:1e:6a:86:1a:
25:1b:88:72:7e:0a:aa:ce:5f:4e:36:39:e0:ab:eb:
fc:60:39:f8:64:d9:dd:aa:6d:f4:72:cc:20:be:70:
bb:7e:dd:c9:c3:44:5c:3c:ca:08:07:a4:de:99:20:
12:ea:f4:34:e4:3d:9d:7d:a1:c5:fe:a1:37:6f:ac:
fb:25:cb:09:62:09:80:65:74:ff:78:12:06:94:d4:
da:a7:bd:ba:71:bd:10:f8:84:c3:2c:79:18:a6:53:
53:5d:8e:9e:e2:34:d8:7d:51:2b:b2:cf:f0:10:d4:
64:26:cb:4d:98:2d:c1:8d:a2:43:1f:13:b6:a6:1b:
aa:fe:a2:2f:ec:73:c4:a3:b6:7c:8d:6a:a9:7b:8c:
de:30:1a:e8:1c:49:f4:d6:32:86:40:9c:f9:72:18:
75:8c:cf:7c:c2:70:eb:01:bb:f6:cb:1e:41:44:83:
35:5f:42:5f:2d:79:67:de:e6:dd:6c:21:dd:fc:9b:
80:41:45:aa:76:6e:25:34:20:e4:61:f5:39:68:0b:
85:04:1f:df:65:5c:5e:03:70:ee:89:c3:c5:08:c5:
e2:d6:f7:f8:ee:66:32:41:17:f5:52:c0:ef:64:ab:
a4:ef:ba:fa:6f:93:2d:1e:15:a5:ec:09:ea:65:4f:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BB:EB:87:6A:79:19:DF:C4:6D:10:73:60:77:F9:A7:67:1B:CB:29
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/FLvrh2p5Gd_EbRBzYHf5p2cbyyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.104.0/24
213.159.96.0/19
Signature Algorithm: sha256WithRSAEncryption
86:1d:11:a0:b0:86:6a:d4:1d:34:89:be:96:d5:61:99:92:44:
ed:49:f1:1d:6d:4c:45:fe:b6:f6:dc:9e:c3:db:9c:5d:71:25:
67:01:74:f4:35:ab:a0:5b:27:51:13:73:91:00:90:3a:a9:3c:
df:26:84:2a:0c:16:b1:a9:25:53:9c:46:c3:5c:8e:25:ba:31:
f9:94:a0:65:bf:a9:10:33:28:95:35:2b:9f:3d:68:f6:cb:5e:
22:7c:93:82:8a:3d:5c:dc:6c:0e:11:ff:a5:b2:b5:5d:0a:fc:
81:45:2c:76:b5:b1:52:5e:c1:86:72:d7:8f:bb:16:eb:fc:70:
c1:06:67:56:d1:8c:14:d5:d3:f5:a5:a0:51:35:85:1e:9b:ad:
c4:dd:30:ad:4b:45:b1:6a:09:70:5f:83:91:b0:b4:ef:9d:29:
01:7c:ab:35:85:25:00:66:4d:cd:90:12:3c:fa:5f:c7:84:fa:
56:dd:f0:c7:89:a8:99:1f:ed:db:1e:a1:de:9c:fd:42:23:b6:
cf:9c:82:80:5a:82:7c:44:d6:39:78:31:41:fa:af:8c:55:be:
c4:ed:28:93:3a:db:1c:e0:ce:2c:8f:c5:f0:95:ea:cc:2a:fe:
40:e9:5a:7e:71:fc:c8:55:8b:83:15:88:b1:04:b1:6f:cb:a5:
83:9f:3e:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKFPhdbwjZY6dBzwhvodEx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNTkxMTQzM2JhMjA2ZjQ1MGFjOWJkMDY1Yzg2Yzk2NjA4
NDAxYzEwHhcNMjQxMDEzMDkzODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGJiZWI4NzZhNzkxOWRmYzQ2ZDEwNzM2MDc3ZjlhNzY3MWJjYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIBjZ1tuCfkCcR5qhholG4hyfgqq
zl9ONjngq+v8YDn4ZNndqm30cswgvnC7ft3Jw0RcPMoIB6TemSAS6vQ05D2dfaHF
/qE3b6z7JcsJYgmAZXT/eBIGlNTap726cb0Q+ITDLHkYplNTXY6e4jTYfVErss/w
ENRkJstNmC3BjaJDHxO2phuq/qIv7HPEo7Z8jWqpe4zeMBroHEn01jKGQJz5chh1
jM98wnDrAbv2yx5BRIM1X0JfLXln3ubdbCHd/JuAQUWqdm4lNCDkYfU5aAuFBB/f
ZVxeA3DuicPFCMXi1vf47mYyQRf1UsDvZKuk77r6b5MtHhWl7AnqZU9TuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBS764dqeRnfxG0Qc2B3+adnG8spMB8GA1UdIwQY
MBaAFMxZEUM7ogb0UKyb0GXIbJZghAHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjBmZGQtNzZhZS00MWYxLTk4YzAt
MmIyNzUwNDM3MTlmLzEvRkx2cmgycDVHZF9FYlJCellIZjVwMmNieXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjBmZGQtNzZhZS00MWYxLTk4YzAtMmIyNzUwNDM3MTlm
LzEvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgBoAwQF
1Z9gMA0GCSqGSIb3DQEBCwUAA4IBAQCGHRGgsIZq1B00ib6W1WGZkkTtSfEdbUxF
/rb23J7D25xdcSVnAXT0NaugWydRE3ORAJA6qTzfJoQqDBaxqSVTnEbDXI4lujH5
lKBlv6kQMyiVNSufPWj2y14ifJOCij1c3GwOEf+lsrVdCvyBRSx2tbFSXsGGcteP
uxbr/HDBBmdW0YwU1dP1paBRNYUem63E3TCtS0WxaglwX4ORsLTvnSkBfKs1hSUA
Zk3NkBI8+l/HhPpW3fDHiaiZH+3bHqHenP1CI7bPnIKAWoJ8RNY5eDFB+q+MVb7E
7SiTOtsc4M4sj8XwlerMKv5A6Vp+cfzIVYuDFYixBLFvy6WDnz6h
-----END CERTIFICATE-----
Generated at Sat Nov 2 12:29:07 2024 by rpki-client on console-ams.rpki-client.org