Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FcaJGEVIJ-yRmR8usW-RMiMZu9k.roa
File: FcaJGEVIJ-yRmR8usW-RMiMZu9k.roa (raw, json)
Hash identifier: DumXYPOUhkvAdI40oqCWguWu36XRamuFXaXGYajh9Zw=
Subject key identifier: 15:C6:89:18:45:48:27:EC:91:99:1F:2E:B1:6F:91:32:23:19:BB:D9
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 018CC795492C5DE9FA173A820698E9B0B675
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FcaJGEVIJ-yRmR8usW-RMiMZu9k.roa
Signing time: Tue 02 Jan 2024 00:31:38 +0000
ROA not before: Tue 02 Jan 2024 00:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 88.218.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 07:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:49:2c:5d:e9:fa:17:3a:82:06:98:e9:b0:b6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15c68918454827ec91991f2eb16f91322319bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:84:69:f8:81:e6:98:6c:d9:4e:a3:ec:87:
a9:bf:af:0d:c0:80:89:c7:98:09:21:38:c1:4b:7b:
c3:2b:50:d1:fb:e9:cd:db:c0:ef:40:66:09:5d:25:
b1:71:14:d5:48:b9:32:48:19:ab:78:df:ba:4b:fd:
ba:f9:b9:fb:41:27:e5:f9:42:dc:ff:7b:9d:13:5d:
7a:b5:d4:f2:ec:b7:2b:52:4c:b1:5a:31:10:70:5b:
86:54:d4:37:40:94:89:d7:c8:7e:19:10:a4:3c:2a:
23:a1:3e:2e:c6:69:47:5d:e6:e2:25:37:79:1d:9e:
08:fd:8a:a5:7f:d7:77:a4:8c:5c:b4:27:b3:e8:b6:
0b:8e:0f:11:97:6a:7b:a7:0f:bf:d6:83:99:c1:82:
a8:24:ee:bd:ea:0e:5b:c7:20:e8:64:34:4d:76:95:
01:e7:fc:78:f6:24:4b:7f:53:30:60:ef:fb:9d:4b:
fb:ed:b8:b8:8b:9a:59:4b:31:4c:61:ba:bb:6d:b9:
8d:2c:50:8d:60:29:cf:f6:38:f0:63:2d:9d:1d:be:
9a:f8:ff:9a:1e:37:32:ac:9b:4a:0a:1a:7c:01:75:
ff:d7:78:bb:ec:fe:0d:9f:d4:75:56:12:53:ae:69:
e9:2c:3b:2e:15:b9:9f:66:19:1f:d0:41:f4:e2:ff:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C6:89:18:45:48:27:EC:91:99:1F:2E:B1:6F:91:32:23:19:BB:D9
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FcaJGEVIJ-yRmR8usW-RMiMZu9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.205.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1b:f8:05:70:67:4e:f5:3a:f8:23:79:53:24:cb:58:c3:4a:
74:ac:a8:41:be:c5:bd:16:49:b9:be:ca:b8:c1:b7:ba:02:b5:
1f:2f:9f:85:9b:0f:e2:bf:f9:18:c2:e8:79:43:53:ea:11:ec:
b4:05:ee:9f:86:c0:ac:b1:de:19:1a:c1:c1:b7:8c:8f:2a:92:
d5:d0:e1:04:f9:5a:4a:e7:fd:35:3c:c9:35:74:d4:ea:ae:a9:
71:de:84:73:94:3f:b9:e6:b1:c6:2c:80:8d:3e:db:ab:81:5a:
67:04:f0:11:e5:85:19:1c:15:4e:98:54:1c:cc:6c:ad:21:b6:
c4:35:c5:d6:55:ce:f0:0a:bd:4a:e3:18:2c:b5:f1:ec:c8:83:
91:4d:4a:9b:66:69:54:4f:61:08:84:c0:f6:7a:14:d7:37:dc:
44:ca:18:e7:58:aa:7a:5b:6b:cf:80:d3:4d:15:a3:c3:48:a0:
9c:26:72:d6:0a:ba:cf:a1:ab:d1:df:f4:a9:4a:81:13:6d:15:
61:8c:b7:d8:81:b0:d7:ce:18:08:75:13:35:1b:dd:31:ab:a0:
08:ff:2c:1d:7e:3d:fe:65:5c:66:ab:f5:f7:5f:5b:0a:35:41:
f9:e7:41:23:6b:52:12:5e:da:ae:83:9d:e6:23:f6:eb:17:ef:
15:24:7f:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlUksXen6FzqCBpjpsLZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2
YjJiNDIwHhcNMjQwMTAyMDAzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWM2ODkxODQ1NDgyN2VjOTE5OTFmMmViMTZmOTEzMjIzMTliYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPSEafiB5phs2U6j7Iepv68NwICJ
x5gJITjBS3vDK1DR++nN28DvQGYJXSWxcRTVSLkySBmreN+6S/26+bn7QSfl+ULc
/3udE116tdTy7LcrUkyxWjEQcFuGVNQ3QJSJ18h+GRCkPCojoT4uxmlHXebiJTd5
HZ4I/Yqlf9d3pIxctCez6LYLjg8Rl2p7pw+/1oOZwYKoJO696g5bxyDoZDRNdpUB
5/x49iRLf1MwYO/7nUv77bi4i5pZSzFMYbq7bbmNLFCNYCnP9jjwYy2dHb6a+P+a
HjcyrJtKChp8AXX/13i77P4Nn9R1VhJTrmnpLDsuFbmfZhkf0EH04v/fwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXGiRhFSCfskZkfLrFvkTIjGbvZMB8GA1UdIwQY
MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt
YzEyMjE4NzY1MTU0LzEvRmNhSkdFVklKLXlSbVI4dXNXLVJNaU1adTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0
LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNrNMA0G
CSqGSIb3DQEBCwUAA4IBAQCQG/gFcGdO9Tr4I3lTJMtYw0p0rKhBvsW9Fkm5vsq4
wbe6ArUfL5+Fmw/iv/kYwuh5Q1PqEey0Be6fhsCssd4ZGsHBt4yPKpLV0OEE+VpK
5/01PMk1dNTqrqlx3oRzlD+55rHGLICNPturgVpnBPAR5YUZHBVOmFQczGytIbbE
NcXWVc7wCr1K4xgstfHsyIORTUqbZmlUT2EIhMD2ehTXN9xEyhjnWKp6W2vPgNNN
FaPDSKCcJnLWCrrPoavR3/SpSoETbRVhjLfYgbDXzhgIdRM1G90xq6AI/ywdfj3+
ZVxmq/X3X1sKNUH550Eja1ISXtqug53mI/brF+8VJH9b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org