Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FXX2W1c7aQe6MEZfx7arJ9k9EVQ.roa
File: FXX2W1c7aQe6MEZfx7arJ9k9EVQ.roa (raw, json)
Hash identifier: ptynE1ju2tdfyydIjwzw4nhfhskfstwK5l2YGYlHXN0=
Subject key identifier: 15:75:F6:5B:57:3B:69:07:BA:30:46:5F:C7:B6:AB:27:D9:3D:11:54
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143F7513A9DCF8E230DA0AA862EFE36
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FXX2W1c7aQe6MEZfx7arJ9k9EVQ.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138156
IP address blocks: 82.152.7.0/24 maxlen: 24
89.213.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 10:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f7:51:3a:9d:cf:8e:23:0d:a0:aa:86:2e:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1575f65b573b6907ba30465fc7b6ab27d93d1154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:c7:7a:17:bb:27:73:e5:d9:72:98:ee:c8:
2f:ab:0e:34:49:eb:c5:a7:b2:b2:f9:f9:ac:d7:cc:
27:4a:92:c1:b3:4f:b7:1e:56:43:64:3b:b1:44:95:
cc:e0:4e:95:1e:30:af:91:1b:54:4d:92:50:03:42:
86:de:42:d7:c6:8e:2a:5b:50:b2:30:5c:ca:af:b1:
a0:f9:73:76:bb:a3:23:7b:22:c1:79:dd:e7:e7:85:
79:8f:f4:6f:ec:af:9f:c8:15:e8:ec:93:6a:06:2d:
29:c9:5c:03:fd:23:7b:84:c8:33:3a:3b:23:bc:79:
70:5f:4b:09:4f:ef:b8:42:79:db:e8:8a:43:b2:55:
57:f0:41:73:33:c7:54:97:11:8c:03:1a:bc:73:20:
ec:5f:df:5c:3f:d5:54:1e:cf:a4:0c:44:c5:58:f3:
9a:9d:05:17:f4:06:f2:9d:82:41:ca:73:3f:a8:a2:
61:86:58:06:da:6c:d8:2e:33:39:c4:8f:4e:ce:57:
c2:bc:00:8e:47:1b:7b:6a:2e:f9:46:dd:86:18:86:
2c:74:12:2f:b0:1f:e7:30:71:ad:56:60:da:e4:63:
4e:e7:0a:a3:69:44:ad:61:3b:74:62:81:64:c9:83:
35:68:ab:b1:aa:c9:d7:34:50:71:b1:c6:d3:7b:1b:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:75:F6:5B:57:3B:69:07:BA:30:46:5F:C7:B6:AB:27:D9:3D:11:54
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FXX2W1c7aQe6MEZfx7arJ9k9EVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0/24
89.213.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:64:74:75:60:56:44:cb:be:d5:55:19:98:ee:cb:19:c1:be:
37:05:63:ae:4a:16:2a:bc:6b:f8:0d:80:c7:67:a3:16:3a:42:
74:c9:7a:22:14:cb:11:c8:ef:b8:25:96:99:f3:a0:dd:fa:7c:
e5:cc:eb:3a:04:72:f1:3a:f8:9c:8a:68:48:d5:b4:97:bb:cf:
e0:85:b2:c0:9c:37:41:56:6b:1e:da:11:97:7f:97:15:87:42:
78:0a:fb:db:30:39:5d:f5:00:df:26:53:97:33:db:46:c8:a6:
79:18:53:22:68:ad:e9:a9:85:48:b9:97:ff:e2:f3:39:0d:32:
7f:cf:0a:e4:2c:6f:b9:45:c5:ca:58:a5:67:5c:ca:87:dd:26:
2a:7c:0e:a2:75:81:78:cf:52:8e:58:10:78:50:32:cf:1c:c4:
6b:ee:65:5c:ae:ae:49:44:0b:f1:2f:f6:a9:db:5c:0c:6e:b9:
ab:5a:f9:6e:9a:3f:78:e7:68:ac:09:61:87:05:0b:aa:df:9f:
6b:3c:d7:0f:0f:76:4f:16:83:e2:1c:77:67:18:a2:c5:b8:b1:
8e:2b:00:45:87:09:c5:b4:ac:a9:b2:13:f4:af:3a:2a:32:1a:
66:8a:70:f4:72:2e:70:fa:cd:29:5a:95:2e:26:3b:e2:7a:ec:
c2:e0:b4:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ/dROp3PjiMNoKqGLv42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc1ZjY1YjU3M2I2OTA3YmEzMDQ2NWZjN2I2YWIyN2Q5M2QxMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqajHehe7J3Pl2XKY7sgvqw40SevF
p7Ky+fms18wnSpLBs0+3HlZDZDuxRJXM4E6VHjCvkRtUTZJQA0KG3kLXxo4qW1Cy
MFzKr7Gg+XN2u6MjeyLBed3n54V5j/Rv7K+fyBXo7JNqBi0pyVwD/SN7hMgzOjsj
vHlwX0sJT++4Qnnb6IpDslVX8EFzM8dUlxGMAxq8cyDsX99cP9VUHs+kDETFWPOa
nQUX9AbynYJBynM/qKJhhlgG2mzYLjM5xI9OzlfCvACORxt7ai75Rt2GGIYsdBIv
sB/nMHGtVmDa5GNO5wqjaUStYTt0YoFkyYM1aKuxqsnXNFBxscbTextWzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBV19ltXO2kHujBGX8e2qyfZPRFUMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRlhYMlcxYzdhUWU2TUVaZng3YXJKOWs5RVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpgHAwQA
WdU5MA0GCSqGSIb3DQEBCwUAA4IBAQBLZHR1YFZEy77VVRmY7ssZwb43BWOuShYq
vGv4DYDHZ6MWOkJ0yXoiFMsRyO+4JZaZ86Dd+nzlzOs6BHLxOvicimhI1bSXu8/g
hbLAnDdBVmse2hGXf5cVh0J4CvvbMDld9QDfJlOXM9tGyKZ5GFMiaK3pqYVIuZf/
4vM5DTJ/zwrkLG+5RcXKWKVnXMqH3SYqfA6idYF4z1KOWBB4UDLPHMRr7mVcrq5J
RAvxL/ap21wMbrmrWvlumj9452isCWGHBQuq359rPNcPD3ZPFoPiHHdnGKLFuLGO
KwBFhwnFtKypshP0rzoqMhpminD0ci5w+s0pWpUuJjvieuzC4LTQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:46:16 2025 by rpki-client