Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/FdUyCEMzNlIWrbU-FOrBi38Ytvo.roa
File: FdUyCEMzNlIWrbU-FOrBi38Ytvo.roa (raw, json)
Hash identifier: xOp3J9Hq/CSy33qC2qo7e8zHQa6l0m89qlZvc6BSH0Q=
Subject key identifier: 15:D5:32:08:43:33:36:52:16:AD:B5:3E:14:EA:C1:8B:7F:18:B6:FA
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 018E2DD82A2576B079C2EEA32855B120DF30
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/FdUyCEMzNlIWrbU-FOrBi38Ytvo.roa
Signing time: Mon 11 Mar 2024 14:08:45 +0000
ROA not before: Mon 11 Mar 2024 14:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206296
IP address blocks: 45.65.104.0/21 maxlen: 21
80.240.184.0/22 maxlen: 22
185.189.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 10:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:d8:2a:25:76:b0:79:c2:ee:a3:28:55:b1:20:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Mar 11 14:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15d532084333365216adb53e14eac18b7f18b6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:b4:02:e7:9d:12:0b:0c:f9:eb:c5:96:60:
7e:98:d9:fa:1b:df:20:cc:4d:1a:29:e1:44:38:8c:
3b:75:3e:f4:cc:0e:9e:7b:c1:7e:0c:0e:58:43:f1:
e8:60:44:96:87:f0:fe:37:cc:dd:ef:a3:46:68:90:
97:d4:69:b0:4c:e0:6a:d6:39:af:c0:03:06:c3:e0:
cd:2e:4b:57:37:01:3f:f5:f5:76:6f:b3:a9:ab:52:
73:e1:70:91:f5:7f:b5:2a:cb:26:65:52:49:b2:3b:
96:25:2a:b4:7d:f1:2c:9c:4d:d5:6e:e5:64:e4:b2:
60:b4:d2:f1:54:e6:88:c0:13:e9:3c:f0:38:44:c6:
fc:ad:e4:5c:71:6a:80:48:9a:a1:63:13:52:5c:b3:
1d:b3:53:2b:c0:0e:bd:47:b3:0d:3b:55:c4:ec:a5:
77:32:30:cf:a7:05:6c:92:9f:ce:cb:7a:b3:22:cc:
61:32:99:aa:cd:3c:4c:03:72:ce:25:10:9a:29:75:
3e:ca:f0:e6:b6:15:f2:4c:9f:19:ac:80:f4:15:81:
40:c3:ec:a0:91:2c:4c:29:4c:8e:b6:76:2d:a9:a4:
b4:53:20:9d:8a:c2:0c:5c:a5:34:a5:ed:9b:3f:4f:
0a:0e:55:7a:8d:1e:1c:ba:27:2e:bf:4f:9b:ad:c7:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D5:32:08:43:33:36:52:16:AD:B5:3E:14:EA:C1:8B:7F:18:B6:FA
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/FdUyCEMzNlIWrbU-FOrBi38Ytvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.104.0/21
80.240.184.0/22
185.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
91:c1:63:13:6f:ec:32:af:16:35:5d:48:b8:ca:33:17:75:36:
04:80:1b:8d:c6:27:4e:af:ab:d1:e1:9d:c1:33:ca:8f:98:60:
d3:cf:ca:2e:c4:8b:b9:8b:ae:06:7c:b0:41:b9:49:bc:96:0a:
86:8d:b8:d8:da:6a:68:30:4e:23:7d:df:e2:3d:9d:4b:08:6b:
43:ee:0e:3e:ef:7d:ee:1e:ba:3a:86:cf:7d:d8:b7:ed:a2:18:
c6:eb:e4:d8:e0:f7:da:dd:35:bb:9b:8e:06:56:c6:08:e9:ab:
83:06:f5:33:80:2e:ec:9c:3b:66:62:ee:53:90:99:74:14:59:
56:ee:ad:7d:4f:3e:11:3f:f6:0d:10:8e:db:5f:17:1b:04:d7:
7d:21:28:01:12:f8:20:d3:ef:9f:dd:fb:fd:6a:6a:34:46:59:
ab:0a:70:27:34:d2:6d:28:a7:7e:9d:d5:1d:35:32:de:92:61:
f2:d2:39:9d:20:2f:37:73:21:fd:97:f7:01:18:e5:fa:05:ea:
c8:14:f5:e3:e4:b3:34:24:ce:2f:be:66:02:d8:c4:01:7b:be:
31:c1:45:bf:93:b7:2d:17:20:9a:52:4d:c5:73:aa:6d:a5:e1:
ba:31:bb:b9:c0:81:64:8b:a3:df:91:7c:59:8c:63:9c:36:41:
ba:fc:df:6d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY4t2ColdrB5wu6jKFWxIN8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjQwMzExMTQwODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWQ1MzIwODQzMzMzNjUyMTZhZGI1M2UxNGVhYzE4YjdmMThiNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxa0AuedEgsM+evFlmB+mNn6G98g
zE0aKeFEOIw7dT70zA6ee8F+DA5YQ/HoYESWh/D+N8zd76NGaJCX1GmwTOBq1jmv
wAMGw+DNLktXNwE/9fV2b7Opq1Jz4XCR9X+1KssmZVJJsjuWJSq0ffEsnE3VbuVk
5LJgtNLxVOaIwBPpPPA4RMb8reRccWqASJqhYxNSXLMds1MrwA69R7MNO1XE7KV3
MjDPpwVskp/Oy3qzIsxhMpmqzTxMA3LOJRCaKXU+yvDmthXyTJ8ZrID0FYFAw+yg
kSxMKUyOtnYtqaS0UyCdisIMXKU0pe2bP08KDlV6jR4cuicuv0+brceMIwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBXVMghDMzZSFq21PhTqwYt/GLb6MB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEvRmRVeUNFTXpObElXcmJVLUZPckJpMzhZdHZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLUFoAwQC
UPC4AwQCub0UMA0GCSqGSIb3DQEBCwUAA4IBAQCRwWMTb+wyrxY1XUi4yjMXdTYE
gBuNxidOr6vR4Z3BM8qPmGDTz8ouxIu5i64GfLBBuUm8lgqGjbjY2mpoME4jfd/i
PZ1LCGtD7g4+733uHro6hs992LftohjG6+TY4Pfa3TW7m44GVsYI6auDBvUzgC7s
nDtmYu5TkJl0FFlW7q19Tz4RP/YNEI7bXxcbBNd9ISgBEvgg0++f3fv9amo0Rlmr
CnAnNNJtKKd+ndUdNTLekmHy0jmdIC83cyH9l/cBGOX6BerIFPXj5LM0JM4vvmYC
2MQBe74xwUW/k7ctFyCaUk3Fc6ptpeG6Mbu5wIFki6PfkXxZjGOcNkG6/N9t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:56 2024 by rpki-client on console-fra.rpki-client.org