Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/fowzFhBjxB_LWvjo5roEGCRUe-I.roa
File: fowzFhBjxB_LWvjo5roEGCRUe-I.roa (raw, json)
Hash identifier: 1uYkmeUherb8YkOgA8BafMukSRmUFSIY3K5udP+EArc=
Subject key identifier: 7E:8C:33:16:10:63:C4:1F:CB:5A:F8:E8:E6:BA:04:18:24:54:7B:E2
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018A45C49042A62FBBA75E3E6BB98498A62D
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/fowzFhBjxB_LWvjo5roEGCRUe-I.roa
Signing time: Wed 30 Aug 2023 09:27:04 +0000
ROA not before: Wed 30 Aug 2023 09:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212183
IP address blocks: 185.79.3.0/24 maxlen: 24
185.79.2.0/24 maxlen: 24
185.79.2.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:c4:90:42:a6:2f:bb:a7:5e:3e:6b:b9:84:98:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Aug 30 09:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8c33161063c41fcb5af8e8e6ba041824547be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:0f:15:30:4c:46:40:b2:7b:e4:46:35:bd:
d3:1a:eb:c2:e6:cf:a2:43:bf:3e:d7:be:8c:a8:53:
71:60:68:e8:f4:aa:0c:10:a5:b2:ae:57:b0:cb:d6:
67:26:b7:85:2a:bb:e2:15:fb:42:40:00:9b:5b:0b:
26:45:55:cf:f4:3c:02:02:1b:5f:32:d3:5e:9f:7c:
1c:c3:51:dc:fb:bb:73:1b:11:65:4a:e3:b7:73:7a:
3c:52:f3:45:4f:5e:20:8e:49:ab:4d:38:86:e4:9d:
39:75:fb:c0:a3:79:5d:58:13:73:1a:fa:22:25:c2:
1c:35:85:c2:ad:4f:62:20:b3:33:e9:d9:35:8d:fa:
90:5f:6b:e9:2f:f4:e1:4f:3a:97:a5:44:fa:10:ba:
9f:5e:28:30:d0:57:7c:92:86:e4:b1:0a:cc:6a:c0:
4f:ea:9c:10:33:e8:5a:4c:e6:37:49:69:5f:f6:ae:
b4:fc:e4:88:67:43:40:dc:54:9e:f6:a1:a8:14:cd:
77:56:de:db:6e:58:ee:09:6e:41:23:77:3a:33:76:
3d:7e:32:34:50:60:5e:5b:9f:5d:9a:b9:eb:23:8c:
07:31:a6:75:01:68:d7:c5:71:67:d0:ed:ad:ad:bf:
e3:67:7e:6c:fd:83:90:e9:d1:d1:56:e8:16:3a:7e:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:33:16:10:63:C4:1F:CB:5A:F8:E8:E6:BA:04:18:24:54:7B:E2
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/fowzFhBjxB_LWvjo5roEGCRUe-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.2.0/23
Signature Algorithm: sha256WithRSAEncryption
25:a1:87:11:9c:ee:58:76:e9:fc:7f:95:f6:ce:51:1c:bb:c8:
c9:c1:a8:8b:bc:37:07:32:e1:ec:32:a2:1e:da:43:26:2f:90:
0d:60:96:35:07:24:bd:5a:e8:f1:b1:41:2d:5d:36:64:9d:a8:
3a:08:d4:fa:35:fb:1d:ee:91:78:3e:ac:ad:28:b0:da:90:08:
5f:d0:b0:2e:a5:47:b7:16:d6:40:28:c0:6c:c1:a1:44:ea:e5:
03:52:df:31:65:99:a7:b1:c1:1e:6c:20:61:9e:ed:8c:34:93:
55:86:6b:83:38:29:42:ea:c0:97:f9:34:dd:3f:34:d1:24:a4:
35:70:d2:f7:51:1d:5f:b4:7a:0f:93:9b:f9:ee:5e:f1:12:8e:
fe:31:d8:e2:b5:91:59:c1:a4:ff:13:69:ac:39:50:2f:c7:e7:
15:56:1c:69:70:77:a7:e0:2f:f7:e7:2b:a1:cb:33:2e:05:59:
37:5e:2a:40:ae:b9:3a:2e:3e:0e:9c:75:d1:37:06:6d:a2:67:
eb:6d:80:8f:6e:57:01:46:89:80:6a:86:97:44:f1:20:7e:3e:
29:9a:aa:e3:9a:47:14:b5:57:09:fb:1d:b0:60:b3:44:b5:4e:
24:ca:e0:1e:eb:92:1b:a7:4d:53:10:8d:13:7c:14:f9:6c:7d:
aa:3e:0a:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpFxJBCpi+7p14+a7mEmKYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjMwODMwMDkyNzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZThjMzMxNjEwNjNjNDFmY2I1YWY4ZThlNmJhMDQxODI0NTQ3YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu4PFTBMRkCye+RGNb3TGuvC5s+i
Q78+176MqFNxYGjo9KoMEKWyrlewy9ZnJreFKrviFftCQACbWwsmRVXP9DwCAhtf
MtNen3wcw1Hc+7tzGxFlSuO3c3o8UvNFT14gjkmrTTiG5J05dfvAo3ldWBNzGvoi
JcIcNYXCrU9iILMz6dk1jfqQX2vpL/ThTzqXpUT6ELqfXigw0Fd8kobksQrMasBP
6pwQM+haTOY3SWlf9q60/OSIZ0NA3FSe9qGoFM13Vt7bbljuCW5BI3c6M3Y9fjI0
UGBeW59dmrnrI4wHMaZ1AWjXxXFn0O2trb/jZ35s/YOQ6dHRVugWOn5QSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6MMxYQY8Qfy1r46Oa6BBgkVHviMB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvZm93ekZoQmp4Ql9MV3ZqbzVyb0VHQ1JVZS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU8CMA0G
CSqGSIb3DQEBCwUAA4IBAQAloYcRnO5Ydun8f5X2zlEcu8jJwaiLvDcHMuHsMqIe
2kMmL5ANYJY1ByS9WujxsUEtXTZknag6CNT6Nfsd7pF4PqytKLDakAhf0LAupUe3
FtZAKMBswaFE6uUDUt8xZZmnscEebCBhnu2MNJNVhmuDOClC6sCX+TTdPzTRJKQ1
cNL3UR1ftHoPk5v57l7xEo7+MdjitZFZwaT/E2msOVAvx+cVVhxpcHen4C/35yuh
yzMuBVk3XipArrk6Lj4OnHXRNwZtomfrbYCPblcBRomAaoaXRPEgfj4pmqrjmkcU
tVcJ+x2wYLNEtU4kyuAe65Ibp01TEI0TfBT5bH2qPgp5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org