Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FA5kKQ8Vs96OFxdEOOAeQ-WMhJ0.roa
File: FA5kKQ8Vs96OFxdEOOAeQ-WMhJ0.roa (raw, json)
Hash identifier: igFDDgKniEE9E1no5843FjvFwsPlueQGJ49jNuR+oWg=
Subject key identifier: 14:0E:64:29:0F:15:B3:DE:8E:17:17:44:38:E0:1E:43:E5:8C:84:9D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018ACB4FC50E38DC20F74ACD59CCAE361465
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FA5kKQ8Vs96OFxdEOOAeQ-WMhJ0.roa
Signing time: Mon 25 Sep 2023 07:48:37 +0000
ROA not before: Mon 25 Sep 2023 07:48:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 08:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:4f:c5:0e:38:dc:20:f7:4a:cd:59:cc:ae:36:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 25 07:48:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=140e64290f15b3de8e17174438e01e43e58c849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:40:14:f0:88:c2:64:82:87:c0:d4:b5:4a:
ca:c2:65:82:37:6b:04:8c:5b:76:97:28:de:ec:47:
7d:05:a1:97:e8:6c:a7:8a:e2:f2:59:53:9c:3d:40:
f9:c6:ab:16:bd:cf:ce:cc:60:4a:d2:d9:83:b8:60:
f3:db:15:47:ea:0f:4a:4a:64:59:9e:a2:79:a3:73:
a2:b0:54:eb:ed:31:e4:8e:5f:85:52:e2:a3:8c:4a:
21:1f:a0:f0:5e:e5:79:a8:ed:fd:00:62:23:5d:45:
24:25:19:3a:83:10:62:1e:ce:4f:5e:c5:1d:eb:a9:
a1:b4:d4:f4:ac:01:c4:87:c6:0d:c7:5c:c9:22:63:
04:9b:71:ff:c8:9f:82:5a:16:57:df:d2:d8:c1:e5:
39:f3:9a:27:8d:c8:5d:28:64:5b:ad:8e:b9:8a:48:
55:18:e0:68:ad:6e:5a:a7:83:91:64:ce:9f:ad:59:
8b:68:30:27:c3:fe:51:26:ac:f5:ee:6a:0b:65:37:
db:2d:86:c1:fa:dc:9d:47:e0:db:e5:00:bb:fc:62:
c2:8b:0d:45:d5:02:56:1b:55:11:16:05:f5:5c:91:
e4:41:65:d6:a1:d1:d4:e1:cb:d5:53:d0:80:0a:ce:
61:03:39:04:34:ab:30:37:83:83:0e:9c:02:f5:d0:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:64:29:0F:15:B3:DE:8E:17:17:44:38:E0:1E:43:E5:8C:84:9D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FA5kKQ8Vs96OFxdEOOAeQ-WMhJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3c:45:19:f7:c2:78:19:2e:74:9b:f2:10:15:c0:cd:31:41:
06:61:4e:ef:95:ec:f0:f4:b0:89:3f:98:6c:1c:6c:a2:3d:02:
76:3c:19:09:a9:c6:14:68:62:f1:b0:97:ae:93:2e:3e:d4:b8:
93:1c:2b:a9:f7:bb:79:f7:a1:37:02:c5:e2:97:4b:44:4f:6b:
f4:d5:fa:62:0e:f8:f1:66:b9:ca:c4:ee:96:7d:ef:f4:62:64:
62:d7:d9:ca:54:05:d7:14:2c:aa:a2:67:4b:86:98:dd:bd:ac:
77:14:0b:6b:da:00:9a:34:9f:98:47:e5:f0:19:c9:8a:22:f2:
50:b9:e6:4e:0f:98:c0:79:db:82:66:4b:b7:0f:41:9b:fe:c9:
43:f7:9c:84:27:b4:47:57:02:ce:39:e8:8e:bc:62:da:ac:14:
b9:51:2b:8c:6c:d9:94:04:86:e3:df:8e:cc:1a:c2:a3:4e:a4:
63:f9:16:2c:9b:4f:42:56:fc:c5:65:d1:d8:df:42:ca:14:6d:
88:34:b1:ad:27:fd:f7:1f:b2:b6:ca:84:0f:2b:e2:1d:df:fe:
ae:68:6a:2c:12:d3:6c:b1:8f:91:d0:10:4b:e2:c3:93:19:1d:
89:57:8b:4b:73:87:3d:36:5a:84:b5:68:f7:31:20:19:93:f8:
65:2d:f0:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrLT8UOONwg90rNWcyuNhRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwOTI1MDc0ODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDBlNjQyOTBmMTViM2RlOGUxNzE3NDQzOGUwMWU0M2U1OGM4NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoNAFPCIwmSCh8DUtUrKwmWCN2sE
jFt2lyje7Ed9BaGX6GyniuLyWVOcPUD5xqsWvc/OzGBK0tmDuGDz2xVH6g9KSmRZ
nqJ5o3OisFTr7THkjl+FUuKjjEohH6DwXuV5qO39AGIjXUUkJRk6gxBiHs5PXsUd
66mhtNT0rAHEh8YNx1zJImMEm3H/yJ+CWhZX39LYweU585onjchdKGRbrY65ikhV
GOBorW5ap4ORZM6frVmLaDAnw/5RJqz17moLZTfbLYbB+tydR+Db5QC7/GLCiw1F
1QJWG1URFgX1XJHkQWXWodHU4cvVU9CACs5hAzkENKswN4ODDpwC9dCGlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQOZCkPFbPejhcXRDjgHkPljISdMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRkE1a0tROFZzOTZPRnhkRU9PQWVRLVdNaEowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSOBMA0G
CSqGSIb3DQEBCwUAA4IBAQCHPEUZ98J4GS50m/IQFcDNMUEGYU7vlezw9LCJP5hs
HGyiPQJ2PBkJqcYUaGLxsJeuky4+1LiTHCup97t596E3AsXil0tET2v01fpiDvjx
ZrnKxO6Wfe/0YmRi19nKVAXXFCyqomdLhpjdvax3FAtr2gCaNJ+YR+XwGcmKIvJQ
ueZOD5jAeduCZku3D0Gb/slD95yEJ7RHVwLOOeiOvGLarBS5USuMbNmUBIbj347M
GsKjTqRj+RYsm09CVvzFZdHY30LKFG2INLGtJ/33H7K2yoQPK+Id3/6uaGosEtNs
sY+R0BBL4sOTGR2JV4tLc4c9NlqEtWj3MSAZk/hlLfCt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org