Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/FAsfxHSBuJd4AMyuc2KdNnssFPE.roa
File: FAsfxHSBuJd4AMyuc2KdNnssFPE.roa (raw, json)
Hash identifier: 8Lf6LlMIErPHJ4fCISmqBMM9W9UfYt17SSi3YOvCvkI=
Subject key identifier: 14:0B:1F:C4:74:81:B8:97:78:00:CC:AE:73:62:9D:36:7B:2C:14:F1
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 0193038C87819D0773791306710299CD2E9A
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/FAsfxHSBuJd4AMyuc2KdNnssFPE.roa
Signing time: Wed 06 Nov 2024 22:16:01 +0000
ROA not before: Wed 06 Nov 2024 22:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 85.202.202.0/24 maxlen: 24
2a07:9180::/32 maxlen: 32
2a07:9181::/32 maxlen: 32
2a07:9182::/32 maxlen: 32
2a07:9183::/32 maxlen: 32
2a07:9184::/32 maxlen: 32
2a07:9185::/32 maxlen: 32
2a07:9186::/32 maxlen: 32
2a07:9187::/32 maxlen: 32
2a09:5980::/32 maxlen: 32
2a09:5981::/32 maxlen: 32
2a09:5982::/32 maxlen: 32
2a09:5983::/32 maxlen: 32
2a09:5984::/32 maxlen: 32
2a09:5985::/32 maxlen: 32
2a09:5986::/32 maxlen: 32
2a09:5987::/32 maxlen: 32
2a09:f340::/32 maxlen: 32
2a09:f341::/32 maxlen: 32
2a09:f342::/32 maxlen: 32
2a09:f343::/32 maxlen: 32
2a09:f344::/32 maxlen: 32
2a09:f345::/32 maxlen: 32
2a09:f346::/32 maxlen: 32
2a09:f347::/32 maxlen: 32
2a0d:8040::/32 maxlen: 32
2a0d:8041::/32 maxlen: 32
2a0d:8042::/32 maxlen: 32
2a0d:8043::/32 maxlen: 32
2a0d:8044::/32 maxlen: 32
2a0d:8045::/32 maxlen: 32
2a0d:8046::/32 maxlen: 32
2a0d:8047::/32 maxlen: 32
2a0f:a1c0::/32 maxlen: 32
2a0f:a1c1::/32 maxlen: 32
2a0f:a1c2::/32 maxlen: 32
2a0f:a1c3::/32 maxlen: 32
2a0f:a1c4::/32 maxlen: 32
2a0f:a1c5::/32 maxlen: 32
2a0f:a1c6::/32 maxlen: 32
2a0f:a1c7::/32 maxlen: 32
2a11:1800::/32 maxlen: 32
2a11:1801::/32 maxlen: 32
2a11:1802::/32 maxlen: 32
2a11:1803::/32 maxlen: 32
2a11:1804::/32 maxlen: 32
2a11:1805::/32 maxlen: 32
2a11:1806::/32 maxlen: 32
2a11:1807::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:03:8c:87:81:9d:07:73:79:13:06:71:02:99:cd:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Nov 6 22:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=140b1fc47481b8977800ccae73629d367b2c14f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:3e:fd:b5:50:27:56:dc:0a:c0:06:fb:15:
9f:37:f8:32:61:b4:d7:c7:4d:55:5f:42:17:c7:d9:
47:d7:5c:65:ce:7a:e1:bb:c3:a6:d3:ef:0c:22:7c:
e3:22:5a:fd:18:ba:b0:5b:b4:a9:60:a9:bb:b2:05:
01:80:b0:c8:5d:56:5c:03:73:22:61:33:e0:36:06:
f9:2e:a5:42:c9:f0:48:76:c4:4f:12:66:4e:54:63:
da:08:de:5e:b2:00:79:2f:70:24:ad:c0:a3:b8:df:
d8:f3:d5:38:df:53:fb:4d:9e:cf:d4:ee:60:ba:84:
9a:b4:4a:eb:30:c5:54:81:3d:03:a7:f8:54:88:10:
f4:bb:de:e0:33:6c:1b:ad:a0:4b:63:74:22:a5:94:
26:6d:7e:b2:78:51:6c:7a:1d:ec:20:9e:f7:d7:5d:
70:da:d4:51:c1:27:51:84:b9:9e:d4:9a:d2:da:b7:
73:e8:bf:70:58:eb:e9:f1:e7:c3:37:25:3e:bf:28:
0b:fc:47:47:78:52:b1:6a:ff:2b:22:0b:7c:56:2d:
9c:99:75:40:db:39:fd:2e:5d:51:17:b9:b5:47:c2:
a5:57:e2:64:95:90:ac:0a:c9:af:a3:b5:6b:0a:e5:
1a:7a:1d:0b:d6:42:ad:7a:1b:14:74:f4:d4:e3:cd:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:1F:C4:74:81:B8:97:78:00:CC:AE:73:62:9D:36:7B:2C:14:F1
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/FAsfxHSBuJd4AMyuc2KdNnssFPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.202.0/24
IPv6:
2a07:9180::/29
2a09:5980::/29
2a09:f340::/29
2a0d:8040::/29
2a0f:a1c0::/29
2a11:1800::/29
Signature Algorithm: sha256WithRSAEncryption
9c:5a:e2:7f:71:89:18:36:23:b7:02:83:64:e6:76:22:3d:69:
f0:8d:d2:de:b2:aa:bc:d2:b6:de:a4:39:04:f7:bc:bf:5d:09:
1b:0b:e8:9f:c2:c2:86:ed:80:a3:8e:0e:54:98:0f:1b:20:01:
eb:1c:46:55:8a:58:de:0f:d2:4a:d7:96:dc:9e:68:20:6e:6f:
2a:4a:57:45:cd:f8:c5:08:e4:3b:99:02:cc:c0:fe:95:76:ea:
8a:59:6b:db:3b:d5:a9:b1:f7:a9:e5:2e:32:29:9d:70:24:0c:
3f:d2:fe:bd:c2:1f:bc:f7:4b:08:0d:d3:1d:ad:da:91:91:82:
d8:7b:f6:02:a2:5d:50:65:ad:c2:f4:07:4d:e2:77:7b:d9:1b:
b5:cb:f0:d7:59:17:9d:e1:6a:37:ba:e2:33:a0:19:36:de:d6:
52:1c:56:1c:7a:67:98:bd:bf:4f:df:39:82:40:24:95:e9:91:
b4:e1:e1:3b:9f:60:97:67:83:52:91:9a:8b:41:79:e0:10:23:
05:eb:59:64:f5:f6:0a:5c:57:50:f9:a3:4e:20:f0:1e:66:89:
b0:43:e7:91:78:65:92:1e:98:87:28:dd:99:3d:67:c6:60:7a:
ce:0d:8b:03:e9:f1:d7:84:6c:e1:80:a6:e4:f2:76:80:5b:12:
28:e6:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:47 2025 by rpki-client