Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FeVu1CM4JdnZjU37RFE7LKpTiIU.roa
File: FeVu1CM4JdnZjU37RFE7LKpTiIU.roa (raw, json)
Hash identifier: /fJ3liZAFmRru9ytbPEKL61ky7UZNmnfXcRp/RuXNH4=
Subject key identifier: 15:E5:6E:D4:23:38:25:D9:D9:8D:4D:FB:44:51:3B:2C:AA:53:88:85
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0188911ACB1E492D2994916796DD905A5E28
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FeVu1CM4JdnZjU37RFE7LKpTiIU.roa
Signing time: Tue 06 Jun 2023 14:27:12 +0000
ROA not before: Tue 06 Jun 2023 14:27:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9215
IP address blocks: 85.153.180.0/24 maxlen: 24
212.252.64.0/24 maxlen: 24
212.252.67.0/24 maxlen: 24
212.252.65.0/24 maxlen: 24
212.252.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:1a:cb:1e:49:2d:29:94:91:67:96:dd:90:5a:5e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jun 6 14:27:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e56ed4233825d9d98d4dfb44513b2caa538885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:9c:49:cf:d6:f6:ab:6e:c1:30:2f:bf:64:
80:72:34:18:be:72:0d:f6:9d:7d:d2:a1:69:b3:04:
9c:9a:37:79:f4:45:b4:36:1c:26:86:94:d4:84:e2:
73:19:85:59:69:70:76:c7:49:eb:53:93:21:4b:20:
73:e5:34:24:af:2f:60:1a:a6:68:49:6b:ce:9e:bb:
4c:91:de:5e:44:7a:6f:01:ac:bd:fb:b3:04:75:3f:
a2:70:ce:5e:7d:55:f5:4a:f9:b5:b5:5e:fb:04:a0:
69:18:3c:ff:a0:57:fd:76:dd:2e:5b:ff:1d:a8:c8:
be:67:f2:db:fc:c9:7f:69:91:0b:27:0a:26:45:ff:
eb:1a:65:99:75:2e:59:b5:ca:5d:df:b2:01:bc:29:
2f:d6:d3:00:a4:3c:82:2e:f3:6c:50:c3:00:37:3e:
4c:65:d3:1a:61:e8:93:70:4f:e7:2b:aa:5b:16:75:
34:9c:d6:4f:03:bf:47:ee:39:20:75:67:44:0a:09:
52:92:4c:3a:85:2a:0a:34:b2:a6:33:f8:a4:4c:c0:
84:34:b1:e3:78:19:2b:06:e5:58:9f:48:3d:f1:e3:
2e:b2:7e:27:7d:88:15:e1:e7:d2:04:0f:b8:b5:23:
c7:f7:67:28:47:f5:8c:85:95:4e:de:72:54:f8:a5:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:6E:D4:23:38:25:D9:D9:8D:4D:FB:44:51:3B:2C:AA:53:88:85
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FeVu1CM4JdnZjU37RFE7LKpTiIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.180.0/24
212.252.64.0/23
212.252.67.0/24
212.252.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:22:d0:9b:1a:ab:0f:64:5a:fd:73:a1:48:d0:4e:96:3c:99:
ee:72:12:ff:06:b7:38:ce:8d:9f:9b:c9:a0:55:e0:04:fd:12:
ad:84:77:a7:c2:db:19:21:6c:9d:f2:e2:16:df:63:8a:86:2d:
af:38:a6:cb:e1:64:1b:0c:c3:83:98:74:b3:45:df:e1:a9:52:
e9:c6:79:e4:a0:c0:64:70:c4:73:3d:26:8e:74:dd:52:0f:eb:
aa:35:3e:96:9a:8c:73:64:ac:32:86:ce:e3:28:75:14:36:cc:
b9:71:85:55:4c:4a:ca:06:34:20:69:2b:3a:43:4c:21:2d:7d:
f2:5b:de:b5:d9:51:c7:bf:25:9a:fd:9a:49:8e:a6:83:ae:fa:
19:e2:3f:97:d1:c7:48:81:c9:5c:cf:76:0a:84:30:a0:1e:4c:
64:37:12:fa:4f:56:d0:2f:5c:40:82:e0:67:f2:53:99:b5:60:
fa:fc:9d:5b:2a:90:f4:dc:9f:68:46:02:3d:b3:50:19:d1:a2:
cb:84:16:cb:a8:72:4b:12:40:38:b9:cf:b9:f6:3b:e9:a0:1b:
57:b5:95:e0:fc:ca:21:73:4d:14:ba:ef:ca:f8:34:db:0d:38:
26:b9:2d:a5:2a:39:90:04:74:6e:32:6f:7b:e5:36:fa:ae:80:
d4:e2:64:44
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYiRGsseSS0plJFnlt2QWl4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjMwNjA2MTQyNzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWU1NmVkNDIzMzgyNWQ5ZDk4ZDRkZmI0NDUxM2IyY2FhNTM4ODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdKcSc/W9qtuwTAvv2SAcjQYvnIN
9p190qFpswScmjd59EW0NhwmhpTUhOJzGYVZaXB2x0nrU5MhSyBz5TQkry9gGqZo
SWvOnrtMkd5eRHpvAay9+7MEdT+icM5efVX1Svm1tV77BKBpGDz/oFf9dt0uW/8d
qMi+Z/Lb/Ml/aZELJwomRf/rGmWZdS5Ztcpd37IBvCkv1tMApDyCLvNsUMMANz5M
ZdMaYeiTcE/nK6pbFnU0nNZPA79H7jkgdWdECglSkkw6hSoKNLKmM/ikTMCENLHj
eBkrBuVYn0g98eMusn4nfYgV4efSBA+4tSPH92coR/WMhZVO3nJU+KXHSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBXlbtQjOCXZ2Y1N+0RROyyqU4iFMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvRmVWdTFDTTRKZG5aalUzN1JGRTdMS3BUaUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVZm0AwQB
1PxAAwQA1PxDAwQA1PxLMA0GCSqGSIb3DQEBCwUAA4IBAQBqItCbGqsPZFr9c6FI
0E6WPJnuchL/Brc4zo2fm8mgVeAE/RKthHenwtsZIWyd8uIW32OKhi2vOKbL4WQb
DMODmHSzRd/hqVLpxnnkoMBkcMRzPSaOdN1SD+uqNT6WmoxzZKwyhs7jKHUUNsy5
cYVVTErKBjQgaSs6Q0whLX3yW9612VHHvyWa/ZpJjqaDrvoZ4j+X0cdIgclcz3YK
hDCgHkxkNxL6T1bQL1xAguBn8lOZtWD6/J1bKpD03J9oRgI9s1AZ0aLLhBbLqHJL
EkA4uc+59jvpoBtXtZXg/Mohc00Uuu/K+DTbDTgmuS2lKjmQBHRuMm975Tb6roDU
4mRE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org