Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/F5Rxm_Argm5j36RluNiqdzH-XLY.roa
File: F5Rxm_Argm5j36RluNiqdzH-XLY.roa (raw, json)
Hash identifier: tnCQDznqSC1D77qvj6T+di7LWWlhB7zfpZZs+bwjFLM=
Subject key identifier: 17:94:71:9B:F0:2B:82:6E:63:DF:A4:65:B8:D8:AA:77:31:FE:5C:B6
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01867F67898632E8D16213BE2346EC4FF90F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/F5Rxm_Argm5j36RluNiqdzH-XLY.roa
Signing time: Thu 23 Feb 2023 17:52:17 +0000
ROA not before: Thu 23 Feb 2023 17:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 213.170.222.0/24 maxlen: 24
185.71.147.0/24 maxlen: 24
185.71.146.0/24 maxlen: 24
185.73.217.0/24 maxlen: 24
185.73.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:67:89:86:32:e8:d1:62:13:be:23:46:ec:4f:f9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 23 17:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1794719bf02b826e63dfa465b8d8aa7731fe5cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:28:07:13:c3:70:31:29:59:61:b7:00:fa:
0a:a2:23:1e:ec:de:10:14:38:c7:e5:27:13:0e:aa:
d1:1d:e9:93:1e:d5:71:8a:a0:a5:e9:96:c1:c6:c9:
da:3c:fb:8a:87:21:7a:dc:c2:5b:fb:69:e3:98:fd:
60:4f:c6:79:b7:50:a1:b3:b7:17:4d:ea:4e:ad:d3:
b1:4d:4c:81:63:fd:57:5f:39:04:18:4e:35:37:6e:
9d:ca:43:c1:24:4f:2f:c6:7b:19:fa:0c:1c:9d:ba:
4a:fd:eb:a4:36:f2:2f:e5:e7:5a:51:b3:f2:bc:cb:
9f:5b:a5:41:fe:ee:3e:1b:60:73:d6:c9:4b:05:63:
86:3a:44:ce:c6:af:0e:c5:58:94:16:00:b9:d5:1c:
f5:59:d4:ec:cf:dd:8a:53:88:12:f9:f0:98:bb:48:
b4:c1:ae:92:a4:50:9a:11:c5:3e:ed:da:48:d1:e3:
63:f3:7a:e9:70:9e:a3:4d:f7:ca:b0:73:d9:3e:d6:
5b:8c:90:27:4d:9f:6a:cd:0f:97:ce:3b:cf:78:1f:
d4:6a:ea:aa:79:b7:59:96:15:0a:c7:d9:a4:a9:b0:
56:a0:9e:0e:e2:dc:19:70:b1:5f:fb:f1:1e:52:fa:
55:07:e0:95:9b:77:d7:20:93:89:e4:f6:5b:be:11:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:71:9B:F0:2B:82:6E:63:DF:A4:65:B8:D8:AA:77:31:FE:5C:B6
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/F5Rxm_Argm5j36RluNiqdzH-XLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.146.0/23
185.73.216.0/23
213.170.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3a:f6:d7:69:6a:31:a1:12:ac:47:03:4c:80:41:48:81:5f:
6d:a2:25:eb:f8:03:70:b6:1f:93:d2:05:86:93:4d:d4:a2:42:
40:58:b4:5d:c1:56:59:6b:ee:6f:a6:f3:e6:64:63:88:03:1d:
d8:71:9f:e0:1e:96:6c:35:ad:5d:9a:29:6d:35:7f:6b:68:2b:
a2:ab:e6:5d:66:9a:cb:af:68:69:30:a7:2c:73:70:48:73:45:
8f:6f:de:87:19:3d:da:f2:6d:97:18:04:0a:bd:fa:29:6b:f9:
e8:98:e0:3a:73:11:03:8d:45:cd:80:b8:a6:ca:ec:b7:ea:da:
4d:6e:85:43:da:40:33:31:ea:80:94:1b:4b:6a:ed:c6:93:7c:
89:8c:74:54:e9:c7:a1:c0:26:31:8c:73:3e:70:d4:77:ab:6e:
fd:a1:c3:9d:d0:41:c8:60:b7:5e:f8:d0:ed:17:01:83:ae:7e:
6c:42:28:14:37:fc:28:f1:fb:1e:ae:eb:8b:5c:73:fd:5c:e4:
f1:0a:59:d7:4a:95:3c:f8:82:7a:49:51:04:73:71:33:70:47:
45:9a:f3:f7:5c:59:8e:c4:c8:67:e9:59:4b:98:55:42:c6:bc:
2b:96:fd:b9:06:b7:4c:54:c6:4e:68:da:76:50:5a:fe:b4:cd:
4a:45:c0:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZ/Z4mGMujRYhO+I0bsT/kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjMwMjIzMTc1MjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzk0NzE5YmYwMmI4MjZlNjNkZmE0NjViOGQ4YWE3NzMxZmU1Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyQoBxPDcDEpWWG3APoKoiMe7N4Q
FDjH5ScTDqrRHemTHtVxiqCl6ZbBxsnaPPuKhyF63MJb+2njmP1gT8Z5t1Chs7cX
TepOrdOxTUyBY/1XXzkEGE41N26dykPBJE8vxnsZ+gwcnbpK/eukNvIv5edaUbPy
vMufW6VB/u4+G2Bz1slLBWOGOkTOxq8OxViUFgC51Rz1WdTsz92KU4gS+fCYu0i0
wa6SpFCaEcU+7dpI0eNj83rpcJ6jTffKsHPZPtZbjJAnTZ9qzQ+XzjvPeB/Uauqq
ebdZlhUKx9mkqbBWoJ4O4twZcLFf+/EeUvpVB+CVm3fXIJOJ5PZbvhHKcQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBeUcZvwK4JuY9+kZbjYqncx/ly2MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvRjVSeG1fQXJnbTVqMzZSbHVOaXFkekgtWExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuUeSAwQB
uUnYAwQA1areMA0GCSqGSIb3DQEBCwUAA4IBAQCOOvbXaWoxoRKsRwNMgEFIgV9t
oiXr+ANwth+T0gWGk03UokJAWLRdwVZZa+5vpvPmZGOIAx3YcZ/gHpZsNa1dmilt
NX9raCuiq+ZdZprLr2hpMKcsc3BIc0WPb96HGT3a8m2XGAQKvfopa/nomOA6cxED
jUXNgLimyuy36tpNboVD2kAzMeqAlBtLau3Gk3yJjHRU6cehwCYxjHM+cNR3q279
ocOd0EHIYLde+NDtFwGDrn5sQigUN/wo8fseruuLXHP9XOTxClnXSpU8+IJ6SVEE
c3EzcEdFmvP3XFmOxMhn6VlLmFVCxrwrlv25BrdMVMZOaNp2UFr+tM1KRcBj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org