Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/FdsZdeHF-0mRXS4KS52e6QJO25A.roa
File: FdsZdeHF-0mRXS4KS52e6QJO25A.roa (raw, json)
Hash identifier: xwv82pciPrKGrm2FLz5/mM/6Z6ERbW13LWYwbbwwfc4=
Subject key identifier: 15:DB:19:75:E1:C5:FB:49:91:5D:2E:0A:4B:9D:9E:E9:02:4E:DB:90
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF9414216190FFF6ED2A45AF10F6A3
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/FdsZdeHF-0mRXS4KS52e6QJO25A.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 194.79.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:94:14:21:61:90:ff:f6:ed:2a:45:af:10:f6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15db1975e1c5fb49915d2e0a4b9d9ee9024edb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:78:f4:3d:b1:18:df:ce:d1:d4:88:2c:4c:
5b:b5:9b:6b:f5:47:74:84:0f:df:6b:31:e5:69:9b:
81:33:c7:be:7e:43:b2:52:b7:44:e6:41:ad:54:85:
99:ed:d5:a8:21:21:f5:22:83:0a:65:c1:7a:fb:12:
25:3c:4c:f7:08:1a:24:fe:df:5b:7a:79:d2:86:44:
da:f4:87:b7:69:3c:09:ac:0a:9c:c2:23:79:24:bf:
77:e3:92:0c:b7:39:7d:49:0e:8a:8a:3e:2e:96:54:
a4:7b:eb:43:51:09:87:d9:5d:32:2a:91:22:4f:c4:
6b:e3:18:9b:c6:1d:53:1d:57:97:b3:ea:5b:4c:c7:
8b:6b:4b:e6:b7:62:59:24:38:b4:92:b0:01:a3:50:
a9:99:d3:35:f8:73:9e:f2:dc:97:e7:02:8b:c2:50:
65:0d:28:7a:48:71:d7:23:14:e7:a4:65:91:7f:19:
2a:0e:52:0d:36:6d:7a:32:e6:fd:13:c8:f1:c9:f7:
40:51:84:03:6a:cc:71:cd:7e:0d:52:5c:ca:2c:9a:
32:05:5b:3b:a7:9e:5b:90:ad:e7:3f:78:df:9d:74:
18:b5:70:cc:22:87:e2:24:07:39:1d:7f:7f:51:08:
ba:09:97:23:dd:ae:33:74:db:44:88:32:5f:0f:83:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:19:75:E1:C5:FB:49:91:5D:2E:0A:4B:9D:9E:E9:02:4E:DB:90
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/FdsZdeHF-0mRXS4KS52e6QJO25A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.14.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ac:af:b5:7d:1c:b2:36:8c:5c:d0:00:f5:94:72:22:31:87:
9a:65:6e:26:b0:e0:f8:db:1b:42:4d:46:7a:57:d9:ea:a6:d7:
87:c6:03:ba:1c:1b:d0:52:3c:af:12:a1:bc:52:8a:b4:fb:00:
dc:7c:51:f9:46:c0:72:21:be:b5:23:ee:70:2c:bd:10:20:f8:
98:ea:5b:8a:23:fa:12:4b:ee:c9:5c:99:69:6e:ea:67:85:6d:
c5:56:b0:a0:bb:39:d3:de:b3:ba:d6:39:45:b2:5e:8c:51:f3:
85:3c:7f:55:6b:30:d6:2d:02:a9:cd:17:99:79:03:32:de:6a:
8c:a9:a4:cf:fb:17:12:50:71:3b:a2:c6:f7:01:37:6d:00:77:
eb:41:47:2b:18:93:4a:5e:21:96:53:50:79:2b:fa:88:c7:d4:
42:c4:4e:9e:ac:dd:28:1c:1e:54:d3:aa:9d:e7:9f:da:2d:91:
a4:53:67:43:9d:20:ba:f7:46:19:d5:f9:4d:27:e7:ad:46:16:
ab:38:ff:fd:16:87:4a:de:88:e5:f1:ad:29:84:ab:55:bb:b4:
d9:6c:04:05:d2:c0:2f:0f:e6:3b:5b:67:3e:2c:5a:31:45:47:
b6:a0:4f:57:50:f8:36:82:6f:b0:0b:d3:e4:b0:ee:1a:05:8d:
39:2b:ee:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI35QUIWGQ//btKkWvEPajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwMTAyMDYzMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRiMTk3NWUxYzVmYjQ5OTE1ZDJlMGE0YjlkOWVlOTAyNGVkYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6h49D2xGN/O0dSILExbtZtr9Ud0
hA/fazHlaZuBM8e+fkOyUrdE5kGtVIWZ7dWoISH1IoMKZcF6+xIlPEz3CBok/t9b
ennShkTa9Ie3aTwJrAqcwiN5JL9345IMtzl9SQ6Kij4ullSke+tDUQmH2V0yKpEi
T8Rr4xibxh1THVeXs+pbTMeLa0vmt2JZJDi0krABo1CpmdM1+HOe8tyX5wKLwlBl
DSh6SHHXIxTnpGWRfxkqDlINNm16Mub9E8jxyfdAUYQDasxxzX4NUlzKLJoyBVs7
p55bkK3nP3jfnXQYtXDMIofiJAc5HX9/UQi6CZcj3a4zdNtEiDJfD4NdCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXbGXXhxftJkV0uCkudnukCTtuQMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvRmRzWmRlSEYtMG1SWFM0S1M1MmU2UUpPMjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwk8OMA0G
CSqGSIb3DQEBCwUAA4IBAQBErK+1fRyyNoxc0AD1lHIiMYeaZW4msOD42xtCTUZ6
V9nqpteHxgO6HBvQUjyvEqG8Uoq0+wDcfFH5RsByIb61I+5wLL0QIPiY6luKI/oS
S+7JXJlpbupnhW3FVrCguznT3rO61jlFsl6MUfOFPH9VazDWLQKpzReZeQMy3mqM
qaTP+xcSUHE7osb3ATdtAHfrQUcrGJNKXiGWU1B5K/qIx9RCxE6erN0oHB5U06qd
55/aLZGkU2dDnSC690YZ1flNJ+etRharOP/9FodK3ojl8a0phKtVu7TZbAQF0sAv
D+Y7W2c+LFoxRUe2oE9XUPg2gm+wC9PksO4aBY05K+4L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org