Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FTOd_Q6ArZVeeEeSS4gxbz_UT38.roa
File: FTOd_Q6ArZVeeEeSS4gxbz_UT38.roa (raw, json)
Hash identifier: fWz6NrbqL3GeqH+d6qKpsM/SH5uVeatUAZdLicoeeMo=
Subject key identifier: 15:33:9D:FD:0E:80:AD:95:5E:78:47:92:4B:88:31:6F:3F:D4:4F:7F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186D5A0D6D49C090ECD31B8B60FF47ADC96
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FTOd_Q6ArZVeeEeSS4gxbz_UT38.roa
Signing time: Sun 12 Mar 2023 11:42:13 +0000
ROA not before: Sun 12 Mar 2023 11:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:a0:d6:d4:9c:09:0e:cd:31:b8:b6:0f:f4:7a:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 12 11:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15339dfd0e80ad955e7847924b88316f3fd44f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:44:5a:dc:f4:38:95:9a:36:57:04:7b:c7:
18:b5:9d:68:11:c6:d7:d0:34:80:89:ec:df:c6:f6:
7a:45:8a:55:91:15:15:e8:47:c4:d6:70:5c:ba:72:
13:cf:fe:4a:31:8f:a0:10:ff:88:d4:13:6c:9d:58:
9d:60:a7:be:aa:c4:82:d4:59:2d:b1:69:5d:14:18:
f5:b7:de:6d:d5:d7:01:bd:bc:e6:11:cf:f4:cd:4e:
a3:3d:95:28:81:15:61:08:f4:57:14:bb:51:0a:fb:
1c:a0:eb:8c:51:40:78:ee:cc:6e:d9:ed:91:b3:0b:
25:c2:46:ac:c8:76:19:c9:a0:be:35:00:fe:56:df:
b7:b8:40:85:21:fc:e1:92:8c:b3:1a:e6:7b:5e:c8:
45:88:3b:8e:ab:53:10:10:74:63:a4:30:f7:0d:e1:
8e:a1:64:e7:ce:03:d5:04:3d:da:b6:bf:c4:79:ea:
40:8c:43:32:44:e6:7c:1c:45:62:eb:29:12:33:c4:
85:3c:93:15:80:fb:92:16:89:01:d7:6c:4a:7a:73:
7f:61:c8:17:6b:e7:53:84:02:fa:72:91:d6:02:86:
d7:e0:59:5b:75:21:82:9f:cb:8d:74:5f:2e:a8:5d:
3e:e7:2b:e5:0d:1e:ba:5b:23:9e:e3:40:02:54:d4:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:9D:FD:0E:80:AD:95:5E:78:47:92:4B:88:31:6F:3F:D4:4F:7F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FTOd_Q6ArZVeeEeSS4gxbz_UT38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.100.0/24
89.34.202.0/24
89.34.219.0/24
89.35.129.0-89.35.131.255
93.114.244.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:19:88:80:75:9e:e1:75:95:e9:6e:3d:de:d1:33:3f:4d:34:
c5:56:ec:9d:fa:13:76:14:64:e5:82:91:72:c3:8c:55:4a:7b:
95:c9:53:97:01:78:cd:33:c7:82:0a:90:0f:db:6c:6f:2f:4e:
b5:9a:1f:ea:7d:f4:ac:7d:2f:02:6b:58:28:86:de:91:3b:9d:
cd:81:b1:41:c7:d7:db:8d:b4:bd:e2:15:ab:7e:7e:d6:6b:93:
65:72:5f:df:c2:d6:71:77:7d:55:22:b5:da:b9:4e:64:50:40:
92:e7:d8:21:17:dd:39:c6:58:bd:21:dd:b4:3d:02:f6:be:1b:
e7:14:74:5d:bb:8e:6e:7d:79:3d:6e:6c:30:db:fa:69:87:97:
de:db:e7:af:1f:6b:11:b7:51:45:63:7e:29:de:72:ff:de:8a:
e4:96:9d:6c:51:02:32:f0:87:2d:1b:a9:59:72:bc:b2:6e:b2:
b2:5d:44:56:be:10:a6:d9:01:5d:05:46:46:63:1b:2a:62:bb:
f7:c1:24:dc:f6:27:d4:19:c4:6b:7d:3c:8f:80:de:76:6d:ee:
42:b1:77:d8:81:55:c4:ef:d8:28:b8:73:4f:be:48:e5:43:a1:
d3:be:5e:ab:cf:30:b0:65:26:74:80:16:a8:6d:51:63:3e:53:
5d:72:16:35
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYbVoNbUnAkOzTG4tg/0etyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwMzEyMTE0MjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTMzOWRmZDBlODBhZDk1NWU3ODQ3OTI0Yjg4MzE2ZjNmZDQ0ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4JEWtz0OJWaNlcEe8cYtZ1oEcbX
0DSAiezfxvZ6RYpVkRUV6EfE1nBcunITz/5KMY+gEP+I1BNsnVidYKe+qsSC1Fkt
sWldFBj1t95t1dcBvbzmEc/0zU6jPZUogRVhCPRXFLtRCvscoOuMUUB47sxu2e2R
swslwkasyHYZyaC+NQD+Vt+3uECFIfzhkoyzGuZ7XshFiDuOq1MQEHRjpDD3DeGO
oWTnzgPVBD3atr/EeepAjEMyROZ8HEVi6ykSM8SFPJMVgPuSFokB12xKenN/YcgX
a+dThAL6cpHWAobX4FlbdSGCn8uNdF8uqF0+5yvlDR66WyOe40ACVNTWbwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFBUznf0OgK2VXnhHkkuIMW8/1E9/MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRlRPZF9RNkFyWlZlZUVlU1M0Z3hiel9VVDM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAPsCYAwQA
TVFkAwQAWSLKAwQAWSLbMAwDBABZI4EDBAJZI4ADBABdcvQDBAC5cPkDBAG88Ygw
DQYJKoZIhvcNAQELBQADggEBAIsZiIB1nuF1leluPd7RMz9NNMVW7J36E3YUZOWC
kXLDjFVKe5XJU5cBeM0zx4IKkA/bbG8vTrWaH+p99Kx9LwJrWCiG3pE7nc2BsUHH
19uNtL3iFat+ftZrk2VyX9/C1nF3fVUitdq5TmRQQJLn2CEX3TnGWL0h3bQ9Ava+
G+cUdF27jm59eT1ubDDb+mmHl97b568faxG3UUVjfinecv/eiuSWnWxRAjLwhy0b
qVlyvLJusrJdRFa+EKbZAV0FRkZjGypiu/fBJNz2J9QZxGt9PI+A3nZt7kKxd9iB
VcTv2Ci4c0++SOVDodO+XqvPMLBlJnSAFqhtUWM+U11yFjU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org