Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/fb2PZOQeRkHR7wnqKkWusegsMQA.roa
File: fb2PZOQeRkHR7wnqKkWusegsMQA.roa (raw, json)
Hash identifier: zBSGgWxUN0qiKn9Bcj5SLX3G/uvKV+PqozbGN3D+dQw=
Subject key identifier: 7D:BD:8F:64:E4:1E:46:41:D1:EF:09:EA:2A:45:AE:B1:E8:2C:31:00
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 01929450BD4DA27F17A97FDBD2F21EDB3EC0
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/fb2PZOQeRkHR7wnqKkWusegsMQA.roa
Signing time: Wed 16 Oct 2024 07:52:52 +0000
ROA not before: Wed 16 Oct 2024 07:52:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54036
IP address blocks: 5.28.64.0/18 maxlen: 19
Validation: Failed, certificate revoked on Thu 17 Oct 2024 07:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:50:bd:4d:a2:7f:17:a9:7f:db:d2:f2:1e:db:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Oct 16 07:52:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbd8f64e41e4641d1ef09ea2a45aeb1e82c3100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:49:6e:39:cb:59:dc:1f:7b:bd:4a:4b:c5:
46:dc:d3:9d:92:c6:8b:14:b9:0b:3b:3b:b4:65:64:
69:ea:03:5a:c1:8d:d3:ec:c9:8c:e0:9e:72:d7:4c:
13:a2:7c:1b:c8:c3:2d:87:35:ab:f8:79:bc:c6:f7:
74:3e:5b:58:1a:9b:f0:29:2c:52:df:49:26:be:56:
14:2f:2f:1a:c7:85:62:21:62:d4:99:42:73:84:55:
d8:e6:4c:21:22:b8:81:13:69:f0:b9:7e:3b:c9:d6:
e9:6f:0c:bc:d2:f6:90:16:c4:1f:5a:8c:17:18:e8:
f7:ae:66:2e:b4:62:92:cf:9d:39:b2:db:1f:da:5a:
c1:ac:ef:63:c9:63:fa:6a:3b:fa:44:1e:37:43:23:
80:2e:ba:c2:29:13:bc:1e:7b:f8:f9:ab:1a:a1:76:
8b:76:3d:72:62:45:01:ed:df:19:75:b1:24:f2:91:
d1:2d:15:1a:72:fd:cb:77:9c:66:b5:ec:7b:0e:cb:
bf:1a:6c:de:dc:b3:2c:a8:4c:63:60:2f:bb:0d:e5:
4d:82:fe:88:eb:a4:4f:9a:20:65:6a:1d:59:a1:25:
3e:49:29:d7:59:de:37:bf:37:f4:eb:c8:6f:36:ff:
b1:0a:80:34:98:67:e3:45:7a:0c:75:e1:22:c4:ef:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:8F:64:E4:1E:46:41:D1:EF:09:EA:2A:45:AE:B1:E8:2C:31:00
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/fb2PZOQeRkHR7wnqKkWusegsMQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:0f:af:d3:4f:fc:5d:98:84:a5:06:66:91:33:34:28:91:a6:
fe:1d:e5:ab:2b:eb:de:1d:9d:bc:1c:ef:2b:0b:18:4b:6c:1b:
42:c3:16:3c:67:09:5a:c6:b0:11:89:03:91:61:c1:72:65:79:
8c:ee:f4:0b:b6:03:8a:3c:b2:ca:64:2f:5c:14:9d:88:64:04:
c0:98:f3:0d:90:bc:ce:74:1f:2b:4c:94:3b:b6:6a:74:df:7f:
7f:72:da:44:19:1c:ab:8b:60:8d:ce:d1:2c:3f:83:62:55:76:
65:25:c6:fc:42:61:b7:d1:18:00:b8:53:5c:68:b6:3a:f5:e3:
38:7d:4a:8e:5f:af:fc:ab:69:3c:e1:34:d4:97:b1:19:80:29:
a6:fb:c5:4a:5d:6e:f0:60:18:1a:96:11:d5:cb:75:70:40:31:
8e:05:99:a1:46:57:1c:74:37:4e:19:8f:90:e3:1a:11:07:7d:
00:bc:0c:39:21:f3:8f:c0:5a:29:dd:f0:e7:7f:65:99:86:b7:
36:10:3a:9c:65:ba:ce:7e:d6:38:ab:10:c5:b0:81:fe:e8:68:
09:92:f9:a8:57:93:04:73:d5:ac:eb:f8:1f:b5:24:2f:94:69:
de:19:6e:7a:71:87:25:52:bb:6d:78:93:17:60:a1:35:28:5e:
c9:bb:8c:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKUUL1Non8XqX/b0vIe2z7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjQxMDE2MDc1MjUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGJkOGY2NGU0MWU0NjQxZDFlZjA5ZWEyYTQ1YWViMWU4MmMzMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nJJbjnLWdwfe71KS8VG3NOdksaL
FLkLOzu0ZWRp6gNawY3T7MmM4J5y10wTonwbyMMthzWr+Hm8xvd0PltYGpvwKSxS
30kmvlYULy8ax4ViIWLUmUJzhFXY5kwhIriBE2nwuX47ydbpbwy80vaQFsQfWowX
GOj3rmYutGKSz505stsf2lrBrO9jyWP6ajv6RB43QyOALrrCKRO8Hnv4+asaoXaL
dj1yYkUB7d8ZdbEk8pHRLRUacv3Ld5xmtex7Dsu/Gmze3LMsqExjYC+7DeVNgv6I
66RPmiBlah1ZoSU+SSnXWd43vzf068hvNv+xCoA0mGfjRXoMdeEixO+A5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH29j2TkHkZB0e8J6ipFrrHoLDEAMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvZmIyUFpPUWVSa0hSN3ducUtrV3VzZWdzTVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGBRxAMA0G
CSqGSIb3DQEBCwUAA4IBAQAsD6/TT/xdmISlBmaRMzQokab+HeWrK+veHZ28HO8r
CxhLbBtCwxY8ZwlaxrARiQORYcFyZXmM7vQLtgOKPLLKZC9cFJ2IZATAmPMNkLzO
dB8rTJQ7tmp0339/ctpEGRyri2CNztEsP4NiVXZlJcb8QmG30RgAuFNcaLY69eM4
fUqOX6/8q2k84TTUl7EZgCmm+8VKXW7wYBgalhHVy3VwQDGOBZmhRlccdDdOGY+Q
4xoRB30AvAw5IfOPwFop3fDnf2WZhrc2EDqcZbrOftY4qxDFsIH+6GgJkvmoV5ME
c9Ws6/gftSQvlGneGW56cYclUrtteJMXYKE1KF7Ju4yQ
-----END CERTIFICATE-----
Generated at Thu Oct 17 10:58:36 2024 by rpki-client on console-ams.rpki-client.org