Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/FVZqln3r5ElEWSii4mHGS-ND3y4.roa
File: FVZqln3r5ElEWSii4mHGS-ND3y4.roa (raw, json)
Hash identifier: kzslSBNhFEVVvoclwAMlR/Pypynr8QusXRB4bRKPQ0o=
Subject key identifier: 15:56:6A:96:7D:EB:E4:49:44:59:28:A2:E2:61:C6:4B:E3:43:DF:2E
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01929A05D977F17986215D6F808966061CB3
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/FVZqln3r5ElEWSii4mHGS-ND3y4.roa
Signing time: Thu 17 Oct 2024 10:28:47 +0000
ROA not before: Thu 17 Oct 2024 10:28:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
45.129.224.0/23 maxlen: 23
2a0e:5040::/29 maxlen: 29
2a0f:fd00::/29 maxlen: 48
2a0f:fd03::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 11:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:05:d9:77:f1:79:86:21:5d:6f:80:89:66:06:1c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Oct 17 10:28:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15566a967debe449445928a2e261c64be343df2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:81:3b:46:b7:98:76:03:82:af:0d:2e:cf:
90:cf:6d:94:1c:08:c4:41:b0:90:d7:2f:7f:9a:07:
f2:ee:a3:ea:86:51:20:55:31:4d:d6:f3:5b:d3:16:
5d:31:76:b8:58:5e:dc:9f:68:83:41:29:93:78:64:
10:63:1c:e5:0a:38:b9:62:1c:eb:10:ae:05:34:3a:
60:cc:84:eb:14:f9:c8:c8:b8:51:41:39:e4:24:a7:
f4:ce:f8:bf:16:ca:66:07:5f:92:95:ec:cf:24:51:
5f:82:34:dd:37:cb:f0:ff:dd:3e:73:6d:43:05:e4:
67:db:be:67:a5:8c:8d:b6:0e:3a:c6:1c:ea:83:d3:
0c:fc:3e:45:9a:b2:7e:2d:d5:3c:8e:02:3c:a5:f6:
47:fb:28:83:b7:a9:53:af:d4:0c:dc:b5:e7:df:f8:
25:63:99:ba:40:b6:cd:e9:e4:70:3c:5c:05:67:3f:
b7:af:eb:06:f5:0a:c5:7c:bf:c2:de:9f:7c:b2:91:
67:cc:bc:e0:b3:3a:4c:ff:66:79:8b:f0:a6:74:95:
2e:bb:73:11:c0:9a:de:66:fe:03:78:aa:d5:3e:ec:
a4:0d:05:20:67:71:ea:0c:de:20:c2:66:94:f1:2d:
d7:95:42:3c:98:75:c3:ad:83:5e:d7:23:23:84:49:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:6A:96:7D:EB:E4:49:44:59:28:A2:E2:61:C6:4B:E3:43:DF:2E
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/FVZqln3r5ElEWSii4mHGS-ND3y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
04:a1:b5:80:78:bc:fe:d6:9c:65:f6:d6:ce:92:67:27:60:02:
43:2f:4c:bd:cb:6f:c4:ea:a0:03:6a:0d:6a:e1:f9:42:5b:3d:
5c:a6:b3:c9:d7:7a:f8:c5:f0:65:ab:5c:34:4c:d0:ae:1d:03:
23:21:d5:5b:66:a8:10:8f:a5:59:d0:68:8d:42:e1:e2:5b:6b:
6d:3f:6e:55:b3:41:21:dd:9f:47:60:7e:5a:26:e0:d4:2f:e7:
b2:2c:11:47:d9:82:41:c0:a0:27:ee:15:4f:7a:7e:1e:dc:3a:
f5:8f:e1:7d:d5:f6:35:1c:f3:60:6f:af:d6:b5:9d:5f:b4:e1:
9f:ca:f2:c7:fc:ae:d3:f6:b0:0f:ac:80:32:0e:c1:16:e9:4b:
ee:75:70:c5:0a:a7:f5:b3:c0:65:22:76:38:b2:6d:a5:79:13:
39:74:a7:15:58:78:a4:28:ac:cf:11:74:5f:65:14:13:4c:b2:
87:c6:0a:79:a2:e7:c8:f4:63:ad:7c:ae:7d:8c:52:48:7f:cb:
79:38:6b:8e:52:ae:93:ff:4d:ac:c8:3c:06:cd:b6:6f:3a:53:
47:42:55:ce:61:cd:89:ee:ba:a4:68:29:89:d0:f5:f6:1d:6c:
ef:96:83:cc:27:db:bf:5a:5d:4b:dc:21:7b:9d:b9:10:d4:ea:
d3:76:12:06
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZKaBdl38XmGIV1vgIlmBhyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjQxMDE3MTAyODQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTU2NmE5NjdkZWJlNDQ5NDQ1OTI4YTJlMjYxYzY0YmUzNDNkZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2KBO0a3mHYDgq8NLs+Qz22UHAjE
QbCQ1y9/mgfy7qPqhlEgVTFN1vNb0xZdMXa4WF7cn2iDQSmTeGQQYxzlCji5Yhzr
EK4FNDpgzITrFPnIyLhRQTnkJKf0zvi/FspmB1+SlezPJFFfgjTdN8vw/90+c21D
BeRn275npYyNtg46xhzqg9MM/D5FmrJ+LdU8jgI8pfZH+yiDt6lTr9QM3LXn3/gl
Y5m6QLbN6eRwPFwFZz+3r+sG9QrFfL/C3p98spFnzLzgszpM/2Z5i/CmdJUuu3MR
wJreZv4DeKrVPuykDQUgZ3HqDN4gwmaU8S3XlUI8mHXDrYNe1yMjhEk6mQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFBVWapZ96+RJRFkoouJhxkvjQ98uMB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvRlZacWxuM3I1RWxFV1NpaTRtSEdTLU5EM3k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE
AgACMA4DBQMqDlBAAwUDKg/9ADANBgkqhkiG9w0BAQsFAAOCAQEABKG1gHi8/tac
ZfbWzpJnJ2ACQy9MvctvxOqgA2oNauH5Qls9XKazydd6+MXwZatcNEzQrh0DIyHV
W2aoEI+lWdBojULh4ltrbT9uVbNBId2fR2B+Wibg1C/nsiwRR9mCQcCgJ+4VT3p+
Htw69Y/hfdX2NRzzYG+v1rWdX7Thn8ryx/yu0/awD6yAMg7BFulL7nVwxQqn9bPA
ZSJ2OLJtpXkTOXSnFVh4pCiszxF0X2UUE0yyh8YKeaLnyPRjrXyufYxSSH/LeThr
jlKuk/9NrMg8Bs22bzpTR0JVzmHNie66pGgpidD19h1s75aDzCfbv1pdS9whe525
ENTq03YSBg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:00:03 2025 by rpki-client