Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/FADEUj2gGzec8Dobr-HLREFt3do.roa
File: FADEUj2gGzec8Dobr-HLREFt3do.roa (raw, json)
Hash identifier: X18qYtf4+FUmCGfG5qXUe2X1A800bfZKDj58yFm12sU=
Subject key identifier: 14:00:C4:52:3D:A0:1B:37:9C:F0:3A:1B:AF:E1:CB:44:41:6D:DD:DA
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018FC82A3E794AF90D36F0474D4A180F3FFC
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/FADEUj2gGzec8Dobr-HLREFt3do.roa
Signing time: Thu 30 May 2024 06:22:42 +0000
ROA not before: Thu 30 May 2024 06:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62097
IP address blocks: 194.45.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:2a:3e:79:4a:f9:0d:36:f0:47:4d:4a:18:0f:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: May 30 06:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1400c4523da01b379cf03a1bafe1cb44416dddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:40:b9:6e:9f:cf:78:a0:e5:4a:04:4f:f5:
da:c0:16:fc:59:75:68:ac:40:8d:20:8f:70:0f:28:
11:11:74:f9:ca:e4:fe:fc:be:c0:cf:4d:af:40:b3:
4b:9e:81:57:71:89:5d:85:2a:70:d9:a0:7d:c5:ee:
c8:70:f0:b3:eb:a9:99:31:25:fd:3f:ba:86:57:db:
b9:0b:5e:03:15:95:e0:9f:18:5f:5c:b6:be:e9:43:
a0:32:b5:ce:96:6c:c7:a9:ea:17:22:1d:a6:2d:4e:
c9:68:4f:a6:05:a7:16:f1:13:b8:80:7e:7c:ec:0b:
c8:33:95:07:49:21:b8:7f:35:3b:1f:8d:8b:91:37:
56:a6:b7:bc:f7:dc:ff:72:3a:03:c5:c9:4b:86:a5:
05:27:9f:c1:38:ed:61:c6:40:61:d4:60:ad:81:97:
c3:87:5f:56:1e:ba:f8:4a:17:0d:5a:01:8e:64:39:
45:f7:a8:11:82:73:db:96:9c:d5:d3:5d:b6:06:6c:
0d:1e:ff:b0:87:d3:4b:cb:2a:f6:eb:12:d2:08:13:
ed:85:c8:2d:39:93:cf:b5:db:fa:5c:cf:e8:04:5f:
4f:5b:9c:08:52:55:64:fd:5b:c4:f3:20:c9:db:c4:
ff:21:92:76:94:71:4f:4a:47:94:3a:44:be:3e:d5:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:C4:52:3D:A0:1B:37:9C:F0:3A:1B:AF:E1:CB:44:41:6D:DD:DA
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/FADEUj2gGzec8Dobr-HLREFt3do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:32:37:48:2d:88:9a:f7:f3:ef:08:db:32:08:2e:b9:34:dc:
e4:93:0e:63:ec:aa:45:9c:48:27:f0:14:d0:b2:d6:1d:fb:5b:
c2:5b:e7:90:e7:05:29:86:de:6a:70:b1:fb:28:b2:20:6e:58:
9d:df:dc:e6:de:0f:f1:bd:4a:36:1f:08:38:9c:c9:3c:4a:b3:
9e:b2:57:d2:a9:1b:c2:0d:d3:b8:27:4c:a2:24:39:46:a1:c8:
ec:25:8a:1f:82:7c:1c:f7:f2:96:23:66:8a:ca:2d:50:95:b8:
0a:c4:88:37:25:05:4b:97:c7:c2:a7:60:5b:ba:5d:85:a7:4b:
5d:c9:be:5c:18:d1:5f:6d:82:cb:9b:ee:12:24:ce:7d:7a:5e:
1d:7a:86:c2:1e:99:b4:6e:46:a2:f9:c4:15:7a:07:2a:40:fe:
7f:4f:c8:aa:43:9e:e9:bf:db:cf:51:aa:24:d7:d0:f3:b1:68:
10:a5:dd:09:7f:97:d9:9d:e3:4b:0a:66:43:94:ca:43:9c:6c:
60:1b:f1:96:6d:6b:b6:40:d4:41:05:b9:07:1c:7a:6a:1a:61:
62:d3:72:2b:71:5c:30:46:45:33:25:db:fe:2f:04:75:1f:6f:
a9:fd:ce:29:ac:bd:4f:c7:0f:74:63:94:f3:7a:50:6e:70:f4:
95:fa:dd:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/IKj55SvkNNvBHTUoYDz/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjQwNTMwMDYyMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDAwYzQ1MjNkYTAxYjM3OWNmMDNhMWJhZmUxY2I0NDQxNmRkZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/JAuW6fz3ig5UoET/XawBb8WXVo
rECNII9wDygREXT5yuT+/L7Az02vQLNLnoFXcYldhSpw2aB9xe7IcPCz66mZMSX9
P7qGV9u5C14DFZXgnxhfXLa+6UOgMrXOlmzHqeoXIh2mLU7JaE+mBacW8RO4gH58
7AvIM5UHSSG4fzU7H42LkTdWpre899z/cjoDxclLhqUFJ5/BOO1hxkBh1GCtgZfD
h19WHrr4ShcNWgGOZDlF96gRgnPblpzV0122BmwNHv+wh9NLyyr26xLSCBPthcgt
OZPPtdv6XM/oBF9PW5wIUlVk/VvE8yDJ28T/IZJ2lHFPSkeUOkS+PtXMYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQAxFI9oBs3nPA6G6/hy0RBbd3aMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvRkFERVVqMmdHemVjOERvYnItSExSRUZ0M2RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwi2mMA0G
CSqGSIb3DQEBCwUAA4IBAQBPMjdILYia9/PvCNsyCC65NNzkkw5j7KpFnEgn8BTQ
stYd+1vCW+eQ5wUpht5qcLH7KLIgblid39zm3g/xvUo2Hwg4nMk8SrOeslfSqRvC
DdO4J0yiJDlGocjsJYofgnwc9/KWI2aKyi1QlbgKxIg3JQVLl8fCp2Bbul2Fp0td
yb5cGNFfbYLLm+4SJM59el4deobCHpm0bkai+cQVegcqQP5/T8iqQ57pv9vPUaok
19DzsWgQpd0Jf5fZneNLCmZDlMpDnGxgG/GWbWu2QNRBBbkHHHpqGmFi03IrcVww
RkUzJdv+LwR1H2+p/c4prL1Pxw90Y5TzelBucPSV+t3I
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:35 2025 by rpki-client