Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FdxM5-twjL00LP1GTKnEgBCHuzA.roa
File: FdxM5-twjL00LP1GTKnEgBCHuzA.roa (raw, json)
Hash identifier: N6B/cv3wS8v+4nQc8yeNZcoGVCE+alesJOfnBc/KHXU=
Subject key identifier: 15:DC:4C:E7:EB:70:8C:BD:34:2C:FD:46:4C:A9:C4:80:10:87:BB:30
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CF856B37CB34B2EFB27C33B27E611F488
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FdxM5-twjL00LP1GTKnEgBCHuzA.roa
Signing time: Thu 11 Jan 2024 11:44:40 +0000
ROA not before: Thu 11 Jan 2024 11:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.0.0/22 maxlen: 24
82.115.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 May 2024 02:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:56:b3:7c:b3:4b:2e:fb:27:c3:3b:27:e6:11:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 11 11:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15dc4ce7eb708cbd342cfd464ca9c4801087bb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:c4:d1:4d:82:d3:28:ea:b6:49:0d:6c:a8:
39:b1:fb:a5:6d:18:81:93:1d:86:57:f7:ec:3a:38:
c3:57:d2:ec:66:a6:22:a4:bd:03:3a:9a:46:9e:27:
3f:b7:03:91:21:01:57:f4:13:78:2a:15:8d:af:e6:
3c:f1:32:7d:b0:be:d3:08:b9:dc:c4:ce:5a:34:86:
7a:98:2b:ff:1d:8e:d6:3e:f9:d5:15:45:2b:aa:12:
b7:f9:28:78:88:f8:f5:02:9b:ab:b9:5a:de:c0:fc:
9c:13:5e:cc:db:2a:84:ef:a6:cc:21:a1:cd:5b:c3:
75:61:3a:39:21:b0:d7:4f:bf:19:be:35:82:58:f8:
de:50:ec:75:27:29:40:42:ab:44:75:3d:d7:58:9a:
32:27:05:bf:34:95:a4:45:1f:a5:ad:4f:94:a0:c3:
28:01:48:8f:8b:28:e0:ca:46:d1:02:1f:9b:9c:4d:
88:49:de:ac:ba:3b:47:ca:a5:b1:42:01:ed:3c:fb:
c6:1e:c8:84:43:c2:89:05:21:35:ce:1f:c5:31:29:
4f:b9:a9:b8:d4:0b:75:c6:ac:a3:5a:4e:54:02:fc:
dd:02:aa:7e:e6:79:ca:c7:c6:21:9c:87:de:b8:f0:
a6:82:29:8d:3c:7b:9d:09:0f:b2:82:b3:2e:a7:98:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:4C:E7:EB:70:8C:BD:34:2C:FD:46:4C:A9:C4:80:10:87:BB:30
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FdxM5-twjL00LP1GTKnEgBCHuzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/22
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:1c:0f:1b:8e:e6:4f:ef:6e:15:51:87:56:fc:8c:31:9d:31:
d8:f8:12:7e:4b:09:2e:66:a5:c8:f1:60:23:de:a5:78:60:f2:
07:03:49:12:3a:f9:9e:32:74:54:44:35:15:dc:01:2d:5c:c5:
1e:13:72:a8:62:2a:b9:70:36:97:43:1b:21:be:3a:2b:be:ed:
86:b5:ef:98:0a:71:26:69:4d:70:1a:53:fd:ca:61:e5:f7:73:
17:4b:d3:ff:84:75:cd:88:1b:ee:02:6a:81:be:17:ce:ac:d3:
4c:62:f3:db:d7:e4:b3:08:52:ef:80:fc:1c:b3:21:45:45:f3:
0f:74:87:fe:c2:ef:40:b8:37:e8:11:b1:c4:47:7e:76:d5:49:
4d:9f:2b:71:43:c8:d8:02:e1:4f:94:cf:3b:a8:a9:14:b2:85:
3c:56:a4:54:2b:79:2b:3f:db:67:3f:e7:4a:ce:a3:0e:1e:dc:
6a:df:14:1c:43:60:bb:55:25:d1:35:38:cd:40:ce:d4:34:4e:
b1:f1:a9:39:11:b7:5e:8f:fc:1d:d2:39:b9:43:31:bb:05:d0:
27:6c:d1:92:cc:e6:2b:55:a0:01:65:05:ba:f3:fa:ba:6d:4b:
c8:00:62:8d:ff:ee:b6:ed:b4:1f:b4:89:aa:ca:f7:5d:af:1b:
05:8c:33:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYz4VrN8s0su+yfDOyfmEfSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMTExMTE0NDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRjNGNlN2ViNzA4Y2JkMzQyY2ZkNDY0Y2E5YzQ4MDEwODdiYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTTE0U2C0yjqtkkNbKg5sfulbRiB
kx2GV/fsOjjDV9LsZqYipL0DOppGnic/twORIQFX9BN4KhWNr+Y88TJ9sL7TCLnc
xM5aNIZ6mCv/HY7WPvnVFUUrqhK3+Sh4iPj1ApuruVrewPycE17M2yqE76bMIaHN
W8N1YTo5IbDXT78ZvjWCWPjeUOx1JylAQqtEdT3XWJoyJwW/NJWkRR+lrU+UoMMo
AUiPiyjgykbRAh+bnE2ISd6sujtHyqWxQgHtPPvGHsiEQ8KJBSE1zh/FMSlPuam4
1At1xqyjWk5UAvzdAqp+5nnKx8YhnIfeuPCmgimNPHudCQ+ygrMup5gqGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBXcTOfrcIy9NCz9RkypxIAQh7swMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvRmR4TTUtdHdqTDAwTFAxR1RLbkVnQkNIdXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUnMAAwQB
UnMKMA0GCSqGSIb3DQEBCwUAA4IBAQC1HA8bjuZP724VUYdW/IwxnTHY+BJ+Swku
ZqXI8WAj3qV4YPIHA0kSOvmeMnRURDUV3AEtXMUeE3KoYiq5cDaXQxshvjorvu2G
te+YCnEmaU1wGlP9ymHl93MXS9P/hHXNiBvuAmqBvhfOrNNMYvPb1+SzCFLvgPwc
syFFRfMPdIf+wu9AuDfoEbHER3521UlNnytxQ8jYAuFPlM87qKkUsoU8VqRUK3kr
P9tnP+dKzqMOHtxq3xQcQ2C7VSXRNTjNQM7UNE6x8ak5Ebdej/wd0jm5QzG7BdAn
bNGSzOYrVaABZQW68/q6bUvIAGKN/+627bQftImqyvddrxsFjDOb
-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org