Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/FVHp2uDE7AUsRSWDh8KDmeuQrU8.roa
File: FVHp2uDE7AUsRSWDh8KDmeuQrU8.roa (raw, json)
Hash identifier: DYbtRBbQxdN21R7eecKzHWrMpnK8EV9hFSpBLX/Zl2k=
Subject key identifier: 15:51:E9:DA:E0:C4:EC:05:2C:45:25:83:87:C2:83:99:EB:90:AD:4F
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018B81E95B25382D8C9C0A96740CD786A262
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/FVHp2uDE7AUsRSWDh8KDmeuQrU8.roa
Signing time: Mon 30 Oct 2023 18:47:15 +0000
ROA not before: Mon 30 Oct 2023 18:47:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.3.175.0/24 maxlen: 24
194.62.162.0/24 maxlen: 24
94.247.138.0/24 maxlen: 24
91.205.223.0/24 maxlen: 24
46.254.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:e9:5b:25:38:2d:8c:9c:0a:96:74:0c:d7:86:a2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Oct 30 18:47:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1551e9dae0c4ec052c45258387c28399eb90ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:00:a7:1a:9f:84:87:fa:67:dd:38:f3:c8:
27:15:03:db:13:8f:06:21:4c:96:56:f0:4a:7a:87:
22:d7:44:a7:df:fd:06:9a:86:2b:f5:3b:72:79:90:
93:fb:07:11:ca:f0:75:0c:cd:d7:f4:dd:f3:b8:40:
ec:20:c0:a1:00:c0:47:2b:70:c0:c8:91:c9:20:3c:
db:db:49:1e:c2:5f:6a:3e:e1:f3:d8:2f:d9:02:bc:
0d:6b:9a:e4:04:b9:2b:f9:38:94:b1:2d:55:36:7c:
92:57:0c:a7:21:36:f0:38:75:99:c4:04:5c:19:2a:
81:e6:93:2a:fa:b6:25:68:92:66:b8:0a:4e:85:b6:
f9:09:e8:d6:f8:f6:9a:90:99:91:cf:f5:1b:e8:09:
f1:25:c6:f6:17:95:ec:b4:05:75:ee:ef:04:d5:5d:
e8:d5:b4:ac:d3:f0:91:f2:bc:5e:ac:7a:4d:51:21:
9d:83:6b:b9:ec:5a:b1:ad:ab:bf:b9:9c:73:26:50:
8f:6a:d4:19:8d:2a:e1:a6:37:20:c4:c3:58:84:c7:
62:d1:8f:d2:df:cc:f6:2c:41:22:4c:d5:3c:12:30:
1a:6a:8b:6e:30:a5:1e:c1:58:20:76:9a:79:0f:84:
51:af:be:ae:7d:13:dd:71:b8:83:b5:29:cf:ee:f6:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:E9:DA:E0:C4:EC:05:2C:45:25:83:87:C2:83:99:EB:90:AD:4F
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/FVHp2uDE7AUsRSWDh8KDmeuQrU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
91.205.223.0/24
94.247.138.0/24
193.3.175.0/24
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e7:b1:06:9a:fb:87:03:e7:13:42:9b:13:b3:a6:73:d7:f1:
ca:20:98:54:ab:3c:0c:bc:46:1e:ab:10:5e:f6:49:46:e9:43:
d9:66:bb:c3:cb:59:75:94:9d:cf:40:9b:4e:cc:de:8f:b5:ba:
04:78:5b:7c:a2:5c:b4:40:be:af:60:9b:dc:3f:cb:7d:7f:f9:
60:9c:bb:29:0d:28:36:d5:eb:d5:d6:29:95:58:f0:27:4a:a2:
03:83:f0:a5:a0:c1:74:9e:3b:39:4c:1b:1d:ea:e1:44:e3:c2:
e6:79:a1:8c:05:14:5a:9c:0b:0b:9c:d4:be:a9:0a:04:41:66:
23:d3:59:69:90:7b:ed:99:45:e9:4c:f9:87:79:fe:85:54:b5:
81:a1:7e:07:9b:30:fc:c5:04:55:3e:7b:6f:b8:90:df:c3:ac:
d3:38:e5:a5:b3:a0:20:50:e9:08:75:d9:46:4e:f6:81:ec:cf:
e5:ea:3b:3f:8c:cc:2b:55:6f:37:e1:fe:9d:7a:34:9e:4e:3e:
5e:2e:6a:72:75:b0:57:d5:9b:08:93:3f:a3:cc:f7:62:49:93:
da:1d:c9:a2:53:84:9e:15:c6:ae:51:c7:cb:fc:45:b3:2d:7c:
56:50:2f:f6:be:81:60:7b:f9:95:39:d1:a2:b7:19:5e:ab:98:
db:b7:ae:32
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYuB6VslOC2MnAqWdAzXhqJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjMxMDMwMTg0NzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUxZTlkYWUwYzRlYzA1MmM0NTI1ODM4N2MyODM5OWViOTBhZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JkApxqfhIf6Z90488gnFQPbE48G
IUyWVvBKeoci10Sn3/0GmoYr9TtyeZCT+wcRyvB1DM3X9N3zuEDsIMChAMBHK3DA
yJHJIDzb20kewl9qPuHz2C/ZArwNa5rkBLkr+TiUsS1VNnySVwynITbwOHWZxARc
GSqB5pMq+rYlaJJmuApOhbb5CejW+PaakJmRz/Ub6AnxJcb2F5XstAV17u8E1V3o
1bSs0/CR8rxerHpNUSGdg2u57Fqxrau/uZxzJlCPatQZjSrhpjcgxMNYhMdi0Y/S
38z2LEEiTNU8EjAaaotuMKUewVggdpp5D4RRr76ufRPdcbiDtSnP7vbfkwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBVR6drgxOwFLEUlg4fCg5nrkK1PMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvRlZIcDJ1REU3QVVzUlNXRGg4S0RtZXVRclU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALv5sAwQA
W83fAwQAXveKAwQAwQOvAwQAwj6iMA0GCSqGSIb3DQEBCwUAA4IBAQAO57EGmvuH
A+cTQpsTs6Zz1/HKIJhUqzwMvEYeqxBe9klG6UPZZrvDy1l1lJ3PQJtOzN6PtboE
eFt8oly0QL6vYJvcP8t9f/lgnLspDSg21evV1imVWPAnSqIDg/CloMF0njs5TBsd
6uFE48LmeaGMBRRanAsLnNS+qQoEQWYj01lpkHvtmUXpTPmHef6FVLWBoX4HmzD8
xQRVPntvuJDfw6zTOOWls6AgUOkIddlGTvaB7M/l6js/jMwrVW834f6dejSeTj5e
LmpydbBX1ZsIkz+jzPdiSZPaHcmiU4SeFcauUcfL/EWzLXxWUC/2voFge/mVOdGi
txleq5jbt64y
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:18 2024 by rpki-client on console-fra.rpki-client.org