Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fwkd_pETTl8xQs_D5O9nVnOYFvY.roa
File: fwkd_pETTl8xQs_D5O9nVnOYFvY.roa (raw, json)
Hash identifier: yqWq2HUOJeZdNo/V7FfnSWFtglnF9++c/y8W0UV4CYU=
Subject key identifier: 7F:09:1D:FE:91:13:4E:5F:31:42:CF:C3:E4:EF:67:56:73:98:16:F6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018D77F5D7907266A1E7621F14542BEDB0E4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fwkd_pETTl8xQs_D5O9nVnOYFvY.roa
Signing time: Mon 05 Feb 2024 06:30:16 +0000
ROA not before: Mon 05 Feb 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 84.32.26.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 13:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:f5:d7:90:72:66:a1:e7:62:1f:14:54:2b:ed:b0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 5 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f091dfe91134e5f3142cfc3e4ef6756739816f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:12:33:6b:f3:1f:cc:8c:3d:b9:50:3a:42:
f2:6a:42:56:53:18:d3:37:ca:9c:bf:dc:4d:a4:82:
77:ac:c8:aa:c3:3b:95:85:8f:5f:65:eb:06:c9:4f:
b6:07:54:7c:8c:37:2d:29:e3:de:89:85:e2:11:97:
52:bd:ed:ff:d7:20:89:e1:a6:e2:31:30:0b:f0:1c:
77:7c:91:7b:33:e4:bf:50:68:20:1b:f2:7b:8f:04:
9f:48:6e:ca:ae:65:99:42:07:f7:2a:b7:f1:09:03:
42:1a:98:d6:d6:a3:7c:e7:83:95:1f:f4:40:aa:10:
5b:6a:15:34:c0:41:a5:dd:05:88:c4:e1:9d:f3:3a:
ab:ce:0d:e6:05:16:67:38:ff:12:3b:12:d3:18:be:
c4:35:25:29:24:e5:c1:fe:26:c3:aa:0c:21:05:e6:
c9:4a:6d:4b:8c:75:b2:7e:c5:a9:ed:ab:2e:fb:aa:
30:6e:73:c8:f1:27:19:df:02:2e:3a:02:7e:dc:ba:
28:c3:30:4b:44:12:e3:f3:61:9d:af:7c:b0:08:83:
f3:06:76:0f:c5:07:88:7a:87:c8:db:71:42:fc:8a:
9b:d1:c0:cf:e5:b1:3a:56:4a:99:2d:11:3c:8d:b9:
24:78:4d:26:da:67:dd:4d:86:ef:7f:f7:94:8c:91:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:1D:FE:91:13:4E:5F:31:42:CF:C3:E4:EF:67:56:73:98:16:F6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fwkd_pETTl8xQs_D5O9nVnOYFvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.39.0/24
84.32.66.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
32:83:f2:88:ee:40:63:01:f2:95:d8:d0:44:0e:50:c9:dd:c8:
e6:47:b2:a7:02:24:c1:55:e8:ac:0c:9f:d8:23:99:c8:1f:a3:
c8:02:82:6d:2b:ab:d3:79:d1:e5:8d:06:4a:ab:b4:d3:30:c9:
43:03:41:4b:74:c4:75:5a:79:e5:bd:b6:d8:7e:05:a1:66:e6:
8d:74:5e:19:b7:c0:d3:e1:cd:a1:91:da:40:44:da:69:c8:8b:
2f:3c:a8:56:10:51:c1:02:84:a2:4d:c9:3c:8b:ae:e5:ba:e7:
ba:85:7b:6d:2e:4e:ad:62:59:5e:4e:24:e3:12:df:00:64:f2:
47:62:c9:d9:0b:c3:31:b6:89:4c:69:6b:1b:74:41:67:65:d5:
15:c8:26:e7:f2:db:7a:03:e0:77:90:2f:e1:fd:ed:d9:3c:74:
3c:f6:cc:1f:7a:35:53:cc:43:76:c5:44:dd:6e:67:88:d1:f9:
c4:4f:6d:ff:74:96:f0:d8:14:8a:30:72:45:5c:2d:62:35:24:
8a:03:23:8f:2c:83:3e:37:7c:49:2c:54:76:7a:50:aa:8d:e7:
4c:4c:5d:1e:dd:a8:b2:80:72:c1:64:93:a6:1d:b8:27:fd:66:
3e:7f:e5:ba:75:57:0b:85:f0:67:48:b4:00:84:e5:9a:a5:72:
bb:4a:17:05
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY139deQcmah52IfFFQr7bDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMjA1MDYzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjA5MWRmZTkxMTM0ZTVmMzE0MmNmYzNlNGVmNjc1NjczOTgxNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jsSM2vzH8yMPblQOkLyakJWUxjT
N8qcv9xNpIJ3rMiqwzuVhY9fZesGyU+2B1R8jDctKePeiYXiEZdSve3/1yCJ4abi
MTAL8Bx3fJF7M+S/UGggG/J7jwSfSG7KrmWZQgf3KrfxCQNCGpjW1qN854OVH/RA
qhBbahU0wEGl3QWIxOGd8zqrzg3mBRZnOP8SOxLTGL7ENSUpJOXB/ibDqgwhBebJ
Sm1LjHWyfsWp7asu+6owbnPI8ScZ3wIuOgJ+3LoowzBLRBLj82Gdr3ywCIPzBnYP
xQeIeofI23FC/Iqb0cDP5bE6VkqZLRE8jbkkeE0m2mfdTYbvf/eUjJGC9QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH8JHf6RE05fMULPw+TvZ1ZzmBb2MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZndrZF9wRVRUbDh4UXNfRDVPOW5Wbk9ZRnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCAaAwQA
VCAnAwQAVCBCAwQAWNjFMA0GCSqGSIb3DQEBCwUAA4IBAQAyg/KI7kBjAfKV2NBE
DlDJ3cjmR7KnAiTBVeisDJ/YI5nIH6PIAoJtK6vTedHljQZKq7TTMMlDA0FLdMR1
WnnlvbbYfgWhZuaNdF4Zt8DT4c2hkdpARNppyIsvPKhWEFHBAoSiTck8i67luue6
hXttLk6tYlleTiTjEt8AZPJHYsnZC8MxtolMaWsbdEFnZdUVyCbn8tt6A+B3kC/h
/e3ZPHQ89swfejVTzEN2xUTdbmeI0fnET23/dJbw2BSKMHJFXC1iNSSKAyOPLIM+
N3xJLFR2elCqjedMTF0e3aiygHLBZJOmHbgn/WY+f+W6dVcLhfBnSLQAhOWapXK7
ShcF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org