Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/FuvBy2pBQI7ORWe60Ma9giyr1JY.roa
File: FuvBy2pBQI7ORWe60Ma9giyr1JY.roa (raw, json)
Hash identifier: GCW3xDTHqOLKrlDo8Y2U+/CcfTM2aMOL2tlK1gdlZd0=
Subject key identifier: 16:EB:C1:CB:6A:41:40:8E:CE:45:67:BA:D0:C6:BD:82:2C:AB:D4:96
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 018AD00DC26534B9DB2ED87A91C7DB578D4A
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/FuvBy2pBQI7ORWe60Ma9giyr1JY.roa
Signing time: Tue 26 Sep 2023 05:54:37 +0000
ROA not before: Tue 26 Sep 2023 05:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1547
IP address blocks: 37.26.128.0/20 maxlen: 20
95.153.64.0/19 maxlen: 19
185.10.20.0/22 maxlen: 22
77.235.96.0/19 maxlen: 19
77.235.96.0/20 maxlen: 20
217.19.211.0/24 maxlen: 24
217.19.212.0/24 maxlen: 24
217.19.209.0/24 maxlen: 24
217.19.210.0/24 maxlen: 24
217.19.208.0/24 maxlen: 24
217.19.208.0/20 maxlen: 20
217.19.213.0/24 maxlen: 24
217.19.219.0/24 maxlen: 24
217.19.218.0/24 maxlen: 24
217.19.216.0/24 maxlen: 24
217.19.217.0/24 maxlen: 24
217.19.214.0/24 maxlen: 24
217.19.215.0/24 maxlen: 24
217.19.223.0/24 maxlen: 24
77.235.112.0/20 maxlen: 20
217.19.221.0/24 maxlen: 24
217.19.222.0/24 maxlen: 24
217.19.220.0/24 maxlen: 24
95.153.64.0/18 maxlen: 18
95.153.96.0/19 maxlen: 19
80.94.246.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.240.0/20 maxlen: 20
62.221.64.0/18 maxlen: 18
80.94.243.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
31.31.0.0/19 maxlen: 19
80.94.254.0/24 maxlen: 24
62.221.96.0/19 maxlen: 19
80.94.240.0/24 maxlen: 24
62.221.64.0/19 maxlen: 19
2a03:f680::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Sep 2023 10:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:0d:c2:65:34:b9:db:2e:d8:7a:91:c7:db:57:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Sep 26 05:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ebc1cb6a41408ece4567bad0c6bd822cabd496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:2c:15:20:be:29:23:d5:34:d1:88:93:fb:
eb:66:6c:02:0f:16:62:74:1f:d0:b9:73:95:a3:18:
47:f6:0b:40:3e:19:e5:91:b7:7d:a9:08:71:5e:b4:
c4:c1:1c:cd:90:3f:3c:1b:43:76:4b:2b:d6:6a:29:
42:a8:09:a3:9b:c2:89:55:5b:08:e2:aa:fb:08:65:
45:57:3f:8a:ef:4a:c5:a9:da:a2:97:a5:23:19:c2:
86:e6:d8:8f:90:38:62:c1:49:d5:38:38:5a:14:54:
67:4f:6f:8a:d0:25:7e:d4:f3:81:a3:37:2f:65:00:
8a:4a:16:c2:fb:fe:a9:ec:2a:b4:4e:9f:49:ed:44:
f6:d8:ad:27:a1:12:8d:dc:8b:43:fb:a8:c7:50:18:
32:ca:29:3a:c1:1c:5b:1f:64:56:32:fc:13:52:d0:
08:f1:b7:33:3b:87:c0:12:ae:2c:61:5d:58:0c:8b:
84:66:69:ae:54:18:89:ed:85:a2:74:23:58:30:54:
16:6c:76:1d:03:1b:87:fb:0e:79:70:9e:47:6c:f8:
37:ea:29:b0:6c:98:36:27:ca:fe:ea:cd:d5:23:02:
fa:ea:82:a3:6d:2f:30:48:b5:00:d7:13:85:40:1a:
70:fe:0b:a1:bc:b3:a3:26:e4:da:73:8d:be:dc:69:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:C1:CB:6A:41:40:8E:CE:45:67:BA:D0:C6:BD:82:2C:AB:D4:96
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/FuvBy2pBQI7ORWe60Ma9giyr1JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
4c:c3:d9:dd:ae:9e:1c:6d:1a:98:c3:38:23:91:22:48:00:1a:
75:c0:90:d4:5c:df:08:e2:0a:16:20:16:cf:bb:ff:c2:76:0f:
15:37:f3:5f:6c:95:18:4a:60:33:e0:d3:e9:f4:f4:2a:d1:c8:
b9:97:ed:72:d9:9f:be:17:69:05:b5:9c:d5:6c:5c:98:c8:76:
7d:04:e1:3b:36:39:6c:57:9b:34:df:4d:bf:dd:50:ee:8b:7f:
ae:2b:3b:06:a0:bd:cd:09:27:71:80:92:5e:44:04:11:e4:d4:
92:bc:ca:b7:65:9c:f5:be:ee:5b:0b:93:66:9d:cc:d5:62:e6:
bc:ac:5f:2f:18:97:ea:a0:9f:1b:98:4d:08:78:b7:50:78:af:
91:87:56:ea:77:a9:4c:90:9f:c7:d7:aa:b0:2b:96:4b:1d:b4:
16:31:ac:d1:16:ea:c7:ca:82:b3:1c:26:2e:80:54:c4:bc:91:
68:2f:5b:87:11:15:d9:e9:19:09:9b:8a:43:61:c2:e1:5c:31:
18:9c:d1:24:d2:10:da:b2:b4:29:8f:80:8d:ba:2e:ec:60:b0:
8d:f9:ac:da:d3:62:b0:ff:06:39:b9:4f:a1:b3:e7:b7:47:64:
84:04:0f:0e:28:b0:9b:37:59:26:e3:0c:28:61:b3:71:94:57:
35:bd:64:5c
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYrQDcJlNLnbLth6kcfbV41KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmUyMmNjMTU4NTllZDRhMDc4NGJmZDA4NTg0YjNjOGZi
MjlmOWEwHhcNMjMwOTI2MDU1NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmViYzFjYjZhNDE0MDhlY2U0NTY3YmFkMGM2YmQ4MjJjYWJkNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxAsFSC+KSPVNNGIk/vrZmwCDxZi
dB/QuXOVoxhH9gtAPhnlkbd9qQhxXrTEwRzNkD88G0N2SyvWailCqAmjm8KJVVsI
4qr7CGVFVz+K70rFqdqil6UjGcKG5tiPkDhiwUnVODhaFFRnT2+K0CV+1POBozcv
ZQCKShbC+/6p7Cq0Tp9J7UT22K0noRKN3ItD+6jHUBgyyik6wRxbH2RWMvwTUtAI
8bczO4fAEq4sYV1YDIuEZmmuVBiJ7YWidCNYMFQWbHYdAxuH+w55cJ5HbPg36imw
bJg2J8r+6s3VIwL66oKjbS8wSLUA1xOFQBpw/guhvLOjJuTac42+3GldmQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFBbrwctqQUCOzkVnutDGvYIsq9SWMB8GA1UdIwQY
MBaAFP4uIswVhZ7UoHhL/QhYSzyPsp+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQt
ODA2MGM1MDNkODZlLzEvRnV2QnkycEJRSTdPUldlNjBNYTlnaXlyMUpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQtODA2MGM1MDNkODZl
LzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQFHx8AAwQE
JRqAAwQGPt1AAwQFTetgAwQEUF7wAwQGX5lAAwQCuQoUAwQE2RPQMA0EAgACMAcD
BQAqA/aAMA0GCSqGSIb3DQEBCwUAA4IBAQBMw9ndrp4cbRqYwzgjkSJIABp1wJDU
XN8I4goWIBbPu//Cdg8VN/NfbJUYSmAz4NPp9PQq0ci5l+1y2Z++F2kFtZzVbFyY
yHZ9BOE7NjlsV5s0302/3VDui3+uKzsGoL3NCSdxgJJeRAQR5NSSvMq3ZZz1vu5b
C5NmnczVYua8rF8vGJfqoJ8bmE0IeLdQeK+Rh1bqd6lMkJ/H16qwK5ZLHbQWMazR
FurHyoKzHCYugFTEvJFoL1uHERXZ6RkJm4pDYcLhXDEYnNEk0hDasrQpj4CNui7s
YLCN+aza02Kw/wY5uU+hs+e3R2SEBA8OKLCbN1km4wwoYbNxlFc1vWRc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:51 2024 by rpki-client on console-ams.rpki-client.org