Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FwNvLTtLuZSu-dO1A-GxISaDi88.roa
File: FwNvLTtLuZSu-dO1A-GxISaDi88.roa (raw, json)
Hash identifier: qfg0DT+ftyhMVBCWVG7tX1H3MzYlcdyVKbbwdHp6pWg=
Subject key identifier: 17:03:6F:2D:3B:4B:B9:94:AE:F9:D3:B5:03:E1:B1:21:26:83:8B:CF
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019229F97B118F2D7EF58A80ADB7C4B7620B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FwNvLTtLuZSu-dO1A-GxISaDi88.roa
Signing time: Wed 25 Sep 2024 16:17:48 +0000
ROA not before: Wed 25 Sep 2024 16:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 46.38.155.0/24 maxlen: 24
185.143.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 13:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:f9:7b:11:8f:2d:7e:f5:8a:80:ad:b7:c4:b7:62:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 25 16:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17036f2d3b4bb994aef9d3b503e1b12126838bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:f6:0f:bf:c3:6e:d9:53:91:92:f8:5b:90:
63:06:18:c7:28:48:77:9d:7f:67:ec:35:dd:6a:90:
8a:9d:a1:d7:96:f9:66:58:da:c0:24:50:1b:f5:7e:
60:1f:76:60:6a:c2:6d:c6:95:16:00:f3:62:b5:b4:
a6:21:1a:ff:b6:80:37:63:da:81:72:4c:1d:04:69:
ec:d4:6a:9a:a8:ec:02:c4:4a:5a:d2:0e:a3:df:a6:
70:f3:8e:34:53:57:16:24:59:ad:1d:47:44:c3:f8:
6e:cf:a1:b7:9c:1f:41:20:16:21:3a:fd:23:28:b7:
7a:56:48:31:c4:fa:cb:c0:78:c5:2c:7e:90:d4:52:
cf:24:d1:fc:6d:c7:26:44:55:3c:52:d1:0c:aa:4e:
5f:e2:01:4b:7d:ac:f0:94:66:1c:bc:d7:b5:70:50:
55:c7:16:40:f3:52:d8:8f:89:37:cb:ca:ab:75:bb:
e5:e2:03:40:f2:56:b4:f9:0b:b4:5d:7d:de:65:72:
77:30:43:17:e7:3d:d8:4a:90:fe:20:8f:2c:e2:90:
39:78:05:a6:7e:d9:80:bf:12:f4:ee:00:04:db:86:
f7:6d:d3:50:c7:77:30:b7:92:bb:21:80:73:d5:ff:
a8:f3:61:2e:c4:1c:a8:71:90:f1:53:54:7e:f0:18:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:6F:2D:3B:4B:B9:94:AE:F9:D3:B5:03:E1:B1:21:26:83:8B:CF
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/FwNvLTtLuZSu-dO1A-GxISaDi88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.155.0/24
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
22:11:80:b4:a5:9a:0b:7d:ea:65:e0:be:69:8f:49:f5:db:cf:
43:22:68:3d:e7:1d:85:50:6c:24:14:b9:f5:c6:d3:ce:d1:8f:
51:49:56:60:be:56:8a:7d:29:1a:d7:2c:b0:20:89:62:b7:6f:
25:42:d2:e0:03:2b:7b:58:e2:65:50:92:bb:7e:36:6f:48:4b:
93:9c:f6:dd:36:cb:12:bc:11:30:0f:50:dd:17:c3:1e:c5:73:
c5:91:e7:6c:94:0c:60:0f:94:5c:66:07:82:92:ba:b0:d4:de:
51:dc:fb:e6:55:ed:89:fa:70:16:3c:34:86:6e:d2:85:4d:b6:
d1:c4:f9:37:25:4c:d5:7e:a5:0d:2e:df:0c:67:1a:b7:72:6e:
b4:39:2e:27:33:56:76:a4:3f:22:d5:dd:66:06:32:e9:72:13:
50:93:12:45:a4:28:a3:24:3f:aa:8b:c7:2c:ba:2b:20:b8:d7:
07:4b:fd:2f:e6:69:d5:7c:32:ca:a3:b5:5c:5f:10:b7:6f:86:
e1:00:42:16:e3:86:17:ce:77:c4:13:31:04:6f:ef:73:77:08:
9a:c6:77:35:7e:42:b7:ab:9f:78:ef:9c:90:df:f1:94:8a:f4:
24:e3:bb:31:30:7a:1a:9d:11:e2:38:1f:bd:01:96:f0:61:37:
df:37:20:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIp+XsRjy1+9YqArbfEt2ILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwOTI1MTYxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzAzNmYyZDNiNGJiOTk0YWVmOWQzYjUwM2UxYjEyMTI2ODM4YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNn2D7/DbtlTkZL4W5BjBhjHKEh3
nX9n7DXdapCKnaHXlvlmWNrAJFAb9X5gH3ZgasJtxpUWAPNitbSmIRr/toA3Y9qB
ckwdBGns1GqaqOwCxEpa0g6j36Zw8440U1cWJFmtHUdEw/huz6G3nB9BIBYhOv0j
KLd6VkgxxPrLwHjFLH6Q1FLPJNH8bccmRFU8UtEMqk5f4gFLfazwlGYcvNe1cFBV
xxZA81LYj4k3y8qrdbvl4gNA8la0+Qu0XX3eZXJ3MEMX5z3YSpD+II8s4pA5eAWm
ftmAvxL07gAE24b3bdNQx3cwt5K7IYBz1f+o82EuxByocZDxU1R+8BguiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBcDby07S7mUrvnTtQPhsSEmg4vPMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvRndOdkxUdEx1WlN1LWRPMUEtR3hJU2FEaTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiabAwQA
uY9IMA0GCSqGSIb3DQEBCwUAA4IBAQAiEYC0pZoLfepl4L5pj0n1289DImg95x2F
UGwkFLn1xtPO0Y9RSVZgvlaKfSka1yywIIlit28lQtLgAyt7WOJlUJK7fjZvSEuT
nPbdNssSvBEwD1DdF8MexXPFkedslAxgD5RcZgeCkrqw1N5R3PvmVe2J+nAWPDSG
btKFTbbRxPk3JUzVfqUNLt8MZxq3cm60OS4nM1Z2pD8i1d1mBjLpchNQkxJFpCij
JD+qi8csuisguNcHS/0v5mnVfDLKo7VcXxC3b4bhAEIW44YXznfEEzEEb+9zdwia
xnc1fkK3q59475yQ3/GUivQk47sxMHoanRHiOB+9AZbwYTffNyAe
-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:27 2024 by rpki-client on console-ams.rpki-client.org