Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FXAET-_mD-3kq0OWQs6TcyV6W4M.roa
File: FXAET-_mD-3kq0OWQs6TcyV6W4M.roa (raw, json)
Hash identifier: Drlo/Agm8Jp3DGAUOJ9/ZUhZLSoTO8rnaytEE21VndQ=
Subject key identifier: 15:70:04:4F:EF:E6:0F:ED:E4:AB:43:96:42:CE:93:73:25:7A:5B:83
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191A2C85149D3071B0B9F7EE5EC43CBB8CB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FXAET-_mD-3kq0OWQs6TcyV6W4M.roa
Signing time: Fri 30 Aug 2024 10:15:22 +0000
ROA not before: Fri 30 Aug 2024 10:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200021
IP address blocks: 2a10:3040::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 19 Sep 2024 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:c8:51:49:d3:07:1b:0b:9f:7e:e5:ec:43:cb:b8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 30 10:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1570044fefe60fede4ab439642ce9373257a5b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:ab:d2:dd:07:70:df:ea:f0:31:59:3b:95:
fc:44:ac:7f:49:89:ef:8c:59:af:dd:15:1d:de:e9:
3c:0c:a7:7d:08:3e:03:a0:14:ba:94:85:1a:a4:19:
32:38:56:bb:52:64:5e:5c:59:0d:2b:bf:2f:92:83:
5e:85:98:e7:8e:54:0e:e7:66:a2:ed:fc:ad:03:e6:
ba:ca:70:96:cc:e1:de:e5:ad:6a:6c:2b:ac:31:9d:
08:46:20:39:1e:74:92:21:3c:df:28:f5:32:44:84:
58:62:6c:6a:a8:a4:f4:b8:bb:66:b0:fb:88:3c:c5:
2d:26:33:73:c3:89:36:cd:be:ec:3d:38:6c:0a:3a:
ca:ae:37:7c:4f:17:83:de:86:7a:9c:c6:27:30:49:
6a:92:8d:97:6a:79:05:77:6c:8f:c3:e5:96:28:a6:
68:c6:df:54:10:61:54:12:d6:80:d4:54:8e:43:46:
d7:a3:56:d0:4c:74:39:80:5a:57:90:72:d8:5c:8f:
d7:63:2b:6e:b4:c9:12:0e:53:a7:3f:5e:0f:a9:14:
68:60:77:bc:54:7a:c3:72:17:72:09:81:f2:f7:be:
81:db:28:1b:ec:a5:14:25:13:62:69:39:b3:e9:a5:
76:4a:b9:b0:12:fd:6e:d4:06:86:40:cf:c7:a9:fb:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:04:4F:EF:E6:0F:ED:E4:AB:43:96:42:CE:93:73:25:7A:5B:83
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FXAET-_mD-3kq0OWQs6TcyV6W4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3040::/29
2a10:3640::/29
2a10:3740::/29
2a10:4a00::/29
2a10:6300::/29
2a10:6b00::/29
2a10:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
00:d6:a0:9e:6b:d6:14:ef:e6:df:b7:00:44:f5:c7:3e:d2:87:
c4:43:cf:93:71:da:1e:64:ce:1e:2a:36:15:25:b2:5b:32:fe:
6d:ec:26:7a:1b:2e:20:fc:4a:ef:63:37:21:62:00:b2:8e:37:
b8:65:98:30:7e:c4:a2:c3:e5:90:07:5f:b6:fe:3a:21:14:52:
fd:d6:45:8c:59:78:a2:0e:5a:7a:57:f4:6c:f7:38:12:6b:dd:
18:90:64:9b:81:5d:47:94:79:76:39:97:09:88:24:08:23:79:
70:e7:c0:f0:66:c8:ca:8e:c9:e4:08:03:6c:0b:c5:71:2b:e3:
19:4b:fd:9d:01:82:28:bc:f6:f0:de:57:f1:6b:0a:f4:c7:ac:
81:7d:01:7d:48:b0:0a:2c:93:fc:be:64:e0:43:23:b2:f4:6a:
16:9f:58:18:b3:69:4c:4d:b4:2f:2b:9e:d4:ef:c7:7b:5d:7c:
28:1f:45:b3:b3:26:fb:3a:bb:14:c2:69:27:e3:0c:9b:49:8e:
8b:61:a4:f3:ef:32:67:54:11:63:ae:11:b5:ba:82:83:10:a6:
c8:9f:fa:ed:26:4a:51:92:94:9f:94:f5:d3:d6:b3:ac:91:49:
28:43:05:54:08:31:4f:30:9e:15:88:18:93:2f:ab:b1:56:2b:
ac:d7:42:00
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZGiyFFJ0wcbC59+5exDy7jLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODMwMTAxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTcwMDQ0ZmVmZTYwZmVkZTRhYjQzOTY0MmNlOTM3MzI1N2E1YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGKr0t0HcN/q8DFZO5X8RKx/SYnv
jFmv3RUd3uk8DKd9CD4DoBS6lIUapBkyOFa7UmReXFkNK78vkoNehZjnjlQO52ai
7fytA+a6ynCWzOHe5a1qbCusMZ0IRiA5HnSSITzfKPUyRIRYYmxqqKT0uLtmsPuI
PMUtJjNzw4k2zb7sPThsCjrKrjd8TxeD3oZ6nMYnMElqko2XankFd2yPw+WWKKZo
xt9UEGFUEtaA1FSOQ0bXo1bQTHQ5gFpXkHLYXI/XYytutMkSDlOnP14PqRRoYHe8
VHrDchdyCYHy976B2ygb7KUUJRNiaTmz6aV2SrmwEv1u1AaGQM/Hqfv+GQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFBVwBE/v5g/t5KtDlkLOk3MleluDMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRlhBRVQtX21ELTNrcTBPV1FzNlRjeVY2VzRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKhAwQAMF
AyoQNkADBQMqEDdAAwUDKhBKAAMFAyoQYwADBQMqEGsAAwUDKhB9ADANBgkqhkiG
9w0BAQsFAAOCAQEAANagnmvWFO/m37cARPXHPtKHxEPPk3HaHmTOHio2FSWyWzL+
bewmehsuIPxK72M3IWIAso43uGWYMH7EosPlkAdftv46IRRS/dZFjFl4og5aelf0
bPc4EmvdGJBkm4FdR5R5djmXCYgkCCN5cOfA8GbIyo7J5AgDbAvFcSvjGUv9nQGC
KLz28N5X8WsK9MesgX0BfUiwCiyT/L5k4EMjsvRqFp9YGLNpTE20Lyue1O/He118
KB9Fs7Mm+zq7FMJpJ+MMm0mOi2Gk8+8yZ1QRY64RtbqCgxCmyJ/67SZKUZKUn5T1
09azrJFJKEMFVAgxTzCeFYgYky+rsVYrrNdCAA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:35 2025 by rpki-client