Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/fbh_9hTx2c1_FJL3vCqmLO_CahI.roa
File: fbh_9hTx2c1_FJL3vCqmLO_CahI.roa (raw, json)
Hash identifier: UZgn5IKDrkgfr5AolWouHcTdfycJKRCfUyzyDJdsVqI=
Subject key identifier: 7D:B8:7F:F6:14:F1:D9:CD:7F:14:92:F7:BC:2A:A6:2C:EF:C2:6A:12
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018CC2DB08DB47C489B52D0C8BD04ABB28D0
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/fbh_9hTx2c1_FJL3vCqmLO_CahI.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210818
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 19:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:08:db:47:c4:89:b5:2d:0c:8b:d0:4a:bb:28:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7db87ff614f1d9cd7f1492f7bc2aa62cefc26a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:51:90:04:5d:80:78:de:d0:63:f0:77:b8:
32:98:b2:04:c0:1f:8c:d0:aa:d6:ed:8f:bf:b1:36:
b8:ed:a6:3d:88:0c:08:80:60:c0:f5:56:42:a9:a3:
bb:c3:c5:4f:9f:e3:c5:1d:9e:de:e9:28:db:24:fc:
9e:1f:e0:29:d3:bc:25:5c:07:1a:e3:dd:d8:ba:7b:
ae:22:5b:b1:a8:70:03:8e:70:1e:cb:bd:dd:99:fe:
2c:2f:2f:57:05:ab:14:6c:fb:c8:f6:5c:3e:b6:9c:
1a:b4:d3:98:7e:3d:49:60:a8:0f:e4:0c:d5:0c:5e:
70:48:2d:72:cb:c8:70:3e:ce:2e:9f:66:e2:7c:b1:
bc:9d:fc:6f:27:71:94:91:7b:ea:0d:5b:e0:05:2f:
19:63:61:b0:d9:06:0d:ef:2e:6f:3e:b3:f8:54:dd:
fa:cb:80:ed:ce:0f:75:21:e1:f7:b2:0f:03:97:73:
46:ba:e2:9f:00:20:01:96:1a:05:e5:29:e7:07:7d:
93:d5:8d:e3:30:70:b1:ef:b0:00:1e:bd:13:0b:43:
04:e5:61:4d:65:dd:0a:d1:fd:26:cd:d4:30:e5:64:
45:b6:5d:d4:54:3c:53:2e:0c:e8:d4:fe:23:ae:d8:
8a:d1:91:68:78:8d:43:a5:8f:a9:72:a0:5a:a3:97:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B8:7F:F6:14:F1:D9:CD:7F:14:92:F7:BC:2A:A6:2C:EF:C2:6A:12
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/fbh_9hTx2c1_FJL3vCqmLO_CahI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4b:9b:5e:bd:58:db:78:82:41:e2:13:f2:f6:58:c7:59:f2:
b7:a9:74:80:a3:84:dd:a4:6f:50:94:05:50:0d:6c:4a:4f:1e:
f0:cf:2f:9d:5e:8a:0c:b4:33:5e:ab:8c:0f:3f:0b:07:30:1a:
eb:37:78:ab:c1:e9:98:96:0f:ed:6a:fb:75:c5:85:de:dd:7e:
a0:66:60:3d:66:09:48:a8:a6:c1:da:29:81:aa:58:92:8f:a9:
8e:4f:50:b6:c1:51:3e:0c:51:5b:4e:0a:f1:4c:a9:53:5f:7c:
f8:3b:71:83:1e:d1:ce:ae:30:ae:07:d7:de:fe:c4:6e:97:94:
f0:de:a9:4f:eb:89:f7:b4:9b:e9:30:06:e9:c9:62:f7:3f:9b:
9e:00:f8:0f:ed:d1:02:28:d1:ca:6e:71:b5:58:9a:18:55:91:
bb:01:4f:da:f4:8c:84:f2:ba:47:e7:fc:9e:82:31:d5:49:75:
1f:54:4c:02:41:1a:b2:0a:3d:f3:a7:ef:68:f5:bd:2e:80:34:
5b:80:36:21:c2:35:ec:cb:11:3a:a0:d7:1c:12:dd:1a:c4:0a:
50:fb:85:22:3b:a2:c1:e6:08:db:bc:1d:6a:8f:bf:9b:6c:ec:
1e:62:a5:b8:78:2e:da:da:e4:40:c7:74:b1:21:6b:9e:cc:63:
6e:f4:23:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2wjbR8SJtS0Mi9BKuyjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjQwMTAxMDIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGI4N2ZmNjE0ZjFkOWNkN2YxNDkyZjdiYzJhYTYyY2VmYzI2YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+lRkARdgHje0GPwd7gymLIEwB+M
0KrW7Y+/sTa47aY9iAwIgGDA9VZCqaO7w8VPn+PFHZ7e6SjbJPyeH+Ap07wlXAca
493YunuuIluxqHADjnAey73dmf4sLy9XBasUbPvI9lw+tpwatNOYfj1JYKgP5AzV
DF5wSC1yy8hwPs4un2bifLG8nfxvJ3GUkXvqDVvgBS8ZY2Gw2QYN7y5vPrP4VN36
y4Dtzg91IeH3sg8Dl3NGuuKfACABlhoF5SnnB32T1Y3jMHCx77AAHr0TC0ME5WFN
Zd0K0f0mzdQw5WRFtl3UVDxTLgzo1P4jrtiK0ZFoeI1DpY+pcqBao5fgnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH24f/YU8dnNfxSS97wqpizvwmoSMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvZmJoXzloVHgyYzFfRkpMM3ZDcW1MT19DYWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIoMA0G
CSqGSIb3DQEBCwUAA4IBAQAeS5tevVjbeIJB4hPy9ljHWfK3qXSAo4TdpG9QlAVQ
DWxKTx7wzy+dXooMtDNeq4wPPwsHMBrrN3irwemYlg/tavt1xYXe3X6gZmA9ZglI
qKbB2imBqliSj6mOT1C2wVE+DFFbTgrxTKlTX3z4O3GDHtHOrjCuB9fe/sRul5Tw
3qlP64n3tJvpMAbpyWL3P5ueAPgP7dECKNHKbnG1WJoYVZG7AU/a9IyE8rpH5/ye
gjHVSXUfVEwCQRqyCj3zp+9o9b0ugDRbgDYhwjXsyxE6oNccEt0axApQ+4UiO6LB
5gjbvB1qj7+bbOweYqW4eC7a2uRAx3SxIWuezGNu9COJ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:30 2025 by rpki-client