Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/fi6ujFefSv_4sTPc13FegnmiVDk.roa
File: fi6ujFefSv_4sTPc13FegnmiVDk.roa (raw, json)
Hash identifier: LV38J9ucWG7eWlug6I38NlfjrQyggix0ILDiwLu2i5M=
Subject key identifier: 7E:2E:AE:8C:57:9F:4A:FF:F8:B1:33:DC:D7:71:5E:82:79:A2:54:39
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 018CC500252D914EC60D541151D804B1DED9
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/fi6ujFefSv_4sTPc13FegnmiVDk.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43734
IP address blocks: 109.235.80.0/21 maxlen: 21
78.24.240.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:25:2d:91:4e:c6:0d:54:11:51:d8:04:b1:de:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e2eae8c579f4afff8b133dcd7715e8279a25439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:47:7d:f3:0a:18:63:ca:34:97:8b:f4:88:
de:0e:48:66:99:3d:d6:55:c7:e0:7c:b7:54:9b:a3:
eb:70:dc:a9:bf:3c:2d:21:e7:8f:6b:04:71:32:49:
fb:f8:22:08:61:86:1e:ae:b5:5f:36:f1:3e:8a:13:
91:c9:b0:83:b2:16:cc:b9:3a:75:6a:b2:bb:c0:89:
af:b0:7a:e8:a8:52:55:92:65:1a:c8:ed:90:b4:5f:
61:c4:f4:0b:fa:bd:eb:91:9f:d4:0a:e9:4a:09:1b:
09:b8:6c:73:61:e0:7e:3e:01:13:9d:49:6f:76:55:
7a:44:f5:84:5f:c4:0b:3d:5a:c7:99:19:c5:51:b2:
22:d9:5d:a4:1a:45:99:b8:87:0a:db:bc:cf:55:73:
dd:96:a4:2c:ce:ca:94:64:f5:7b:16:8b:88:e7:60:
41:84:1b:b8:2b:8d:40:1a:9c:1e:0d:71:1f:54:8f:
52:9b:a3:2d:73:47:9f:f2:89:12:b4:d0:3d:f2:00:
5c:bb:f7:ae:4e:67:d3:2b:bb:83:68:c6:72:92:cc:
24:41:ff:5a:f6:d7:c7:7c:0a:97:49:f9:a8:fe:95:
7a:8e:3f:0e:b1:ad:2e:6b:cf:fc:f0:74:9a:21:99:
89:db:73:27:65:ef:17:95:16:bd:98:16:1b:c3:83:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:AE:8C:57:9F:4A:FF:F8:B1:33:DC:D7:71:5E:82:79:A2:54:39
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/fi6ujFefSv_4sTPc13FegnmiVDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.240.0/21
109.235.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ab:23:5f:e8:85:db:2c:22:c3:45:f2:02:69:e2:66:00:ee:
19:50:9b:90:a3:cc:bc:b4:6c:a6:69:38:37:ef:29:4e:ce:d9:
50:6a:69:0a:42:73:d4:e6:75:92:52:d6:5c:39:c1:41:a0:1b:
ff:d4:12:cd:44:8a:01:bd:8b:28:65:18:91:50:1d:89:93:40:
20:23:38:95:3a:fa:6b:65:0b:e4:70:85:d2:96:ef:35:61:21:
2f:35:c4:e5:1c:31:cf:5c:96:cf:be:04:a1:11:a6:85:64:9b:
cb:e6:e4:90:9e:e0:1b:aa:52:b6:2b:a0:f1:27:91:c3:6b:0c:
05:b4:be:7c:8b:a1:e8:96:2c:ac:60:91:f9:dd:01:26:08:04:
17:26:f4:a7:7a:74:0d:51:2f:d9:ae:4d:04:c4:1a:ef:8c:97:
ca:58:5c:22:57:e3:6a:0c:7f:2e:22:45:88:a3:65:0f:46:a0:
b0:0a:5a:97:57:db:ae:66:f1:ec:64:da:0e:51:b1:f5:37:63:
79:92:5f:bb:f9:71:ec:5e:98:88:df:91:ec:fa:64:0b:65:92:
6a:50:8d:ca:d2:9a:c1:34:ad:88:b9:be:98:88:38:b0:1c:d4:
0d:20:6b:f0:1f:a5:cd:f9:51:47:aa:b7:51:92:20:2e:f4:a8:
99:b9:3e:82
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFACUtkU7GDVQRUdgEsd7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy
MmUyNzgwHhcNMjQwMTAxMTIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTJlYWU4YzU3OWY0YWZmZjhiMTMzZGNkNzcxNWU4Mjc5YTI1NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj1HffMKGGPKNJeL9IjeDkhmmT3W
VcfgfLdUm6PrcNypvzwtIeePawRxMkn7+CIIYYYerrVfNvE+ihORybCDshbMuTp1
arK7wImvsHroqFJVkmUayO2QtF9hxPQL+r3rkZ/UCulKCRsJuGxzYeB+PgETnUlv
dlV6RPWEX8QLPVrHmRnFUbIi2V2kGkWZuIcK27zPVXPdlqQszsqUZPV7FouI52BB
hBu4K41AGpweDXEfVI9Sm6Mtc0ef8okStNA98gBcu/euTmfTK7uDaMZykswkQf9a
9tfHfAqXSfmo/pV6jj8Osa0ua8/88HSaIZmJ23MnZe8XlRa9mBYbw4NkCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH4uroxXn0r/+LEz3NdxXoJ5olQ5MB8GA1UdIwQY
MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt
OWJlYmY3ZGNjMWE2LzEvZmk2dWpGZWZTdl80c1RQYzEzRmVnbm1pVkRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2
LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDThjwAwQD
betQMA0GCSqGSIb3DQEBCwUAA4IBAQBPqyNf6IXbLCLDRfICaeJmAO4ZUJuQo8y8
tGymaTg37ylOztlQamkKQnPU5nWSUtZcOcFBoBv/1BLNRIoBvYsoZRiRUB2Jk0Ag
IziVOvprZQvkcIXSlu81YSEvNcTlHDHPXJbPvgShEaaFZJvL5uSQnuAbqlK2K6Dx
J5HDawwFtL58i6HoliysYJH53QEmCAQXJvSnenQNUS/Zrk0ExBrvjJfKWFwiV+Nq
DH8uIkWIo2UPRqCwClqXV9uuZvHsZNoOUbH1N2N5kl+7+XHsXpiI35Hs+mQLZZJq
UI3K0prBNK2Iub6YiDiwHNQNIGvwH6XN+VFHqrdRkiAu9KiZuT6C
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:03 2025 by rpki-client