Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/FxsQjr-pUI8fzLllRFPZ5MHLHY0.roa
File: FxsQjr-pUI8fzLllRFPZ5MHLHY0.roa (raw, json)
Hash identifier: Oxk+EC2BfEnmffQ6JQ6x63rQ0Z6DR5RApi78S2xld3Q=
Subject key identifier: 17:1B:10:8E:BF:A9:50:8F:1F:CC:B9:65:44:53:D9:E4:C1:CB:1D:8D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018BCF0A40146D813E9FBDB8BB0262785E54
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/FxsQjr-pUI8fzLllRFPZ5MHLHY0.roa
Signing time: Tue 14 Nov 2023 18:13:57 +0000
ROA not before: Tue 14 Nov 2023 18:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 213.142.136.0/24 maxlen: 24
213.142.133.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.144.0/24 maxlen: 32
213.142.145.0/24 maxlen: 32
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.132.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
80.253.252.0/22 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:0a:40:14:6d:81:3e:9f:bd:b8:bb:02:62:78:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 14 18:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=171b108ebfa9508f1fccb9654453d9e4c1cb1d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:9f:1e:ef:0f:94:e8:ce:cb:22:d3:bd:e4:
15:5c:e6:96:04:86:a3:c5:79:e7:9f:97:ac:f3:69:
8e:02:b6:5a:70:f8:c9:6a:c1:22:74:65:e8:32:1f:
ba:e4:e5:43:2a:d4:33:99:58:56:30:1d:bb:4d:1e:
9d:ab:9c:8f:0d:4c:58:81:4e:49:2c:9d:8d:7d:56:
4e:74:1f:07:e3:80:18:e1:7f:ee:f4:0b:98:f5:98:
5b:57:cc:7d:9d:66:09:e8:0b:aa:79:af:e4:f5:67:
54:26:fc:6f:34:0b:a8:7b:15:f3:34:c2:c9:17:c4:
05:1d:b9:b4:e8:19:c9:82:93:4f:dc:dc:20:e9:8e:
8a:4a:b2:0e:84:3d:09:f0:da:89:61:f1:5b:59:32:
13:a3:f8:46:a3:97:a5:01:bf:e2:af:6f:0e:72:9b:
26:a5:fd:78:e1:20:0f:3f:21:d4:10:a5:cb:1b:33:
08:1a:40:0c:21:45:a2:fd:3a:fd:bd:37:05:7a:ef:
44:49:eb:ea:4c:b0:c2:cb:9a:ae:db:29:9a:6b:2e:
c4:f1:dc:61:be:1a:87:c5:e9:e3:ff:6f:f6:41:54:
83:95:e5:d5:fa:66:5d:fd:9a:fa:aa:8a:5b:96:7c:
3c:15:0a:bf:d8:d2:ca:3a:e8:d6:62:8e:fb:38:ce:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:10:8E:BF:A9:50:8F:1F:CC:B9:65:44:53:D9:E4:C1:CB:1D:8D
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/FxsQjr-pUI8fzLllRFPZ5MHLHY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/22
91.151.80.0/24
91.151.82.0/24
91.151.91.0-91.151.92.255
213.142.128.0-213.142.133.255
213.142.136.0/23
213.142.142.0/24
213.142.144.0/23
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a9:40:7b:30:a6:2d:40:b8:08:44:a3:2f:3d:8b:eb:8c:5a:
4c:92:b2:63:ec:13:fb:7d:0b:b9:34:51:fd:4e:25:4f:32:e6:
2a:ad:13:37:6f:55:97:df:8e:73:3f:72:5e:92:97:8e:dd:61:
1d:8f:8e:71:c4:73:21:6f:13:6a:04:08:ce:b5:25:d9:43:4c:
f6:c7:16:b4:5e:98:98:03:1d:d6:43:5e:df:0b:d3:b5:46:c4:
be:27:49:54:7d:8e:8a:6e:33:9c:da:90:b0:01:be:45:3f:13:
23:c6:64:97:ec:da:ae:a0:c3:65:35:7d:3e:a4:0a:61:64:7f:
00:11:db:ef:b1:62:f1:68:bf:ca:8c:e1:2e:0e:ae:61:f5:1f:
a9:13:e5:ec:07:38:3f:40:08:e7:c0:6c:74:15:ac:2f:dc:82:
8d:3e:35:e8:10:33:95:c6:36:e6:0b:03:d7:a7:e8:a9:3e:fe:
46:50:c7:f3:cb:c1:d1:b8:a2:ca:33:29:93:49:50:0e:79:1b:
91:89:5a:5b:7c:29:a4:0b:c2:23:2e:f4:7f:43:f6:a8:21:34:
9b:34:0f:e9:ac:fe:c9:3c:fb:dc:b9:8e:5c:11:75:19:57:29:
14:96:45:bf:d4:c0:cc:17:5d:38:f0:dd:05:57:d4:fd:28:33:
f7:ad:58:a3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYvPCkAUbYE+n724uwJieF5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjMxMTE0MTgxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzFiMTA4ZWJmYTk1MDhmMWZjY2I5NjU0NDUzZDllNGMxY2IxZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eCfHu8PlOjOyyLTveQVXOaWBIaj
xXnnn5es82mOArZacPjJasEidGXoMh+65OVDKtQzmVhWMB27TR6dq5yPDUxYgU5J
LJ2NfVZOdB8H44AY4X/u9AuY9ZhbV8x9nWYJ6Auqea/k9WdUJvxvNAuoexXzNMLJ
F8QFHbm06BnJgpNP3Nwg6Y6KSrIOhD0J8NqJYfFbWTITo/hGo5elAb/ir28Ocpsm
pf144SAPPyHUEKXLGzMIGkAMIUWi/Tr9vTcFeu9ESevqTLDCy5qu2ymaay7E8dxh
vhqHxenj/2/2QVSDleXV+mZd/Zr6qopblnw8FQq/2NLKOujWYo77OM46IQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFBcbEI6/qVCPH8y5ZURT2eTByx2NMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvRnhzUWpyLXBVSThmekxsbFJGUFo1TUhMSFkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQCUP38AwQA
W5dQAwQAW5dSMAwDBABbl1sDBABbl1wwDAMEB9WOgAMEAdWOhAMEAdWOiAMEANWO
jgMEAdWOkAMEAdWOmDANBgkqhkiG9w0BAQsFAAOCAQEADqlAezCmLUC4CESjLz2L
64xaTJKyY+wT+30LuTRR/U4lTzLmKq0TN29Vl9+Ocz9yXpKXjt1hHY+OccRzIW8T
agQIzrUl2UNM9scWtF6YmAMd1kNe3wvTtUbEvidJVH2Oim4znNqQsAG+RT8TI8Zk
l+zarqDDZTV9PqQKYWR/ABHb77Fi8Wi/yozhLg6uYfUfqRPl7Ac4P0AI58BsdBWs
L9yCjT416BAzlcY25gsD16foqT7+RlDH88vB0biiyjMpk0lQDnkbkYlaW3wppAvC
Iy70f0P2qCE0mzQP6az+yTz73LmOXBF1GVcpFJZFv9TAzBddOPDdBVfU/Sgz961Y
ow==
-----END CERTIFICATE-----
Generated at Tue Nov 28 15:13:56 2023 by rpki-client on console-fra.rpki-client.org