Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/fegRgP_DnixKt43crQ4TeN3FOhI.roa
File: fegRgP_DnixKt43crQ4TeN3FOhI.roa (raw, json)
Hash identifier: wDWf7sWJEqgr+3qVQy78lkQf6+gogdYetIFhn+N0hYI=
Subject key identifier: 7D:E8:11:80:FF:C3:9E:2C:4A:B7:8D:DC:AD:0E:13:78:DD:C5:3A:12
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01937913A1E3B282716F95A027FE7C881997
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/fegRgP_DnixKt43crQ4TeN3FOhI.roa
Signing time: Fri 29 Nov 2024 17:59:09 +0000
ROA not before: Fri 29 Nov 2024 17:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34818
IP address blocks: 178.236.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 13:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:79:13:a1:e3:b2:82:71:6f:95:a0:27:fe:7c:88:19:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Nov 29 17:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de81180ffc39e2c4ab78ddcad0e1378ddc53a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:2a:92:0d:98:c7:d5:45:91:e5:f4:87:5e:
77:3f:70:fd:f2:8a:5f:ba:d2:32:81:93:bd:46:62:
d8:de:02:26:bd:cf:7a:3e:93:27:0a:85:12:2f:58:
39:2f:3f:f4:05:4c:c3:bb:d1:f2:dd:18:e7:d6:7d:
b7:8d:e5:df:7a:e2:f0:1d:e2:4f:09:ea:b0:1c:27:
4b:38:15:a0:d2:1a:3c:02:b2:33:00:51:ff:82:ce:
38:34:37:4e:f6:c9:b3:f0:cb:2f:be:75:43:2c:59:
dd:88:94:4d:62:98:85:fd:27:bc:b2:43:1e:53:b4:
24:33:e6:01:04:ee:f3:13:de:f2:d1:9c:58:e9:87:
59:e1:e2:2b:bd:ed:da:65:ff:40:77:7d:1a:bd:f3:
ba:b2:5c:18:30:88:aa:dc:d7:57:a2:3b:b6:2c:cd:
9b:0e:d3:ca:46:55:64:98:c5:c6:96:9e:c1:29:66:
13:71:85:92:27:1e:8d:3c:01:02:bc:da:57:0e:ea:
c2:ec:d9:37:8c:e4:e0:f4:64:db:09:53:27:2b:38:
02:94:32:04:1d:0c:29:fa:94:ff:c1:b2:51:c9:97:
57:3f:4a:93:42:33:c8:e7:d0:5d:ae:43:4a:3f:3a:
81:5d:ed:42:d3:dd:91:78:01:9d:1c:04:70:ea:0c:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:11:80:FF:C3:9E:2C:4A:B7:8D:DC:AD:0E:13:78:DD:C5:3A:12
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/fegRgP_DnixKt43crQ4TeN3FOhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2c:5a:8f:3a:e7:84:e7:0b:82:c1:d4:7c:40:f6:04:c7:c4:
26:16:39:2e:83:2d:c4:15:f3:a1:49:ee:4a:b4:4a:26:c8:59:
e3:b6:88:e8:4d:33:e9:51:48:a3:e7:fb:a1:02:4f:6c:aa:07:
1b:9a:b3:72:b2:98:1e:41:80:a2:ef:e9:2a:36:64:4a:f0:0b:
28:07:1d:d1:27:e3:51:52:f0:2f:96:9e:dd:e8:4e:26:f9:2f:
8e:6b:7b:93:8f:8c:1c:64:70:02:23:12:21:0f:80:66:d7:1d:
25:7c:79:69:c6:fb:f0:4a:f0:92:1b:b3:dc:b5:93:36:85:da:
16:85:d2:69:51:7d:d7:59:90:ae:12:00:ca:ef:cc:88:f1:ab:
52:4d:b0:ec:df:b1:b7:6f:af:db:87:55:be:10:0c:65:36:7a:
3d:be:82:84:9b:a8:88:f9:4c:a3:89:cd:3a:72:b8:26:40:ea:
8a:79:a7:c7:a5:e4:21:1a:71:75:20:e5:41:dc:36:e8:5b:2e:
c8:e8:f4:a4:47:32:fc:94:52:fc:29:86:a3:2c:2c:e9:de:3d:
5e:66:60:be:01:12:68:3b:79:25:f6:c4:30:4f:e2:87:35:a5:
39:cd:ee:b4:c3:60:08:03:a3:22:4a:10:d3:32:94:fc:d9:53:
a6:ee:03:de
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZN5E6HjsoJxb5WgJ/58iBmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjQxMTI5MTc1OTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGU4MTE4MGZmYzM5ZTJjNGFiNzhkZGNhZDBlMTM3OGRkYzUzYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ycqkg2Yx9VFkeX0h153P3D98opf
utIygZO9RmLY3gImvc96PpMnCoUSL1g5Lz/0BUzDu9Hy3Rjn1n23jeXfeuLwHeJP
CeqwHCdLOBWg0ho8ArIzAFH/gs44NDdO9smz8MsvvnVDLFndiJRNYpiF/Se8skMe
U7QkM+YBBO7zE97y0ZxY6YdZ4eIrve3aZf9Ad30avfO6slwYMIiq3NdXoju2LM2b
DtPKRlVkmMXGlp7BKWYTcYWSJx6NPAECvNpXDurC7Nk3jOTg9GTbCVMnKzgClDIE
HQwp+pT/wbJRyZdXP0qTQjPI59BdrkNKPzqBXe1C092ReAGdHARw6gyiawIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH3oEYD/w54sSreN3K0OE3jdxToSMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL2ZlZ1JnUF9Ebml4S3Q0M2NyUTRUZU4zRk9oSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACy7CMw
DQYJKoZIhvcNAQELBQADggEBAG0sWo8654TnC4LB1HxA9gTHxCYWOS6DLcQV86FJ
7kq0SibIWeO2iOhNM+lRSKPn+6ECT2yqBxuas3KymB5BgKLv6So2ZErwCygHHdEn
41FS8C+Wnt3oTib5L45re5OPjBxkcAIjEiEPgGbXHSV8eWnG+/BK8JIbs9y1kzaF
2haF0mlRfddZkK4SAMrvzIjxq1JNsOzfsbdvr9uHVb4QDGU2ej2+goSbqIj5TKOJ
zTpyuCZA6op5p8el5CEacXUg5UHcNuhbLsjo9KRHMvyUUvwphqMsLOnePV5mYL4B
Emg7eSX2xDBP4oc1pTnN7rTDYAgDoyJKENMylPzZU6buA94=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:47:32 2025 by rpki-client