Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/FeEh7BRA1-DF-QhEVCNpCyQ3iq4.roa
File: FeEh7BRA1-DF-QhEVCNpCyQ3iq4.roa (raw, json)
Hash identifier: 14JNF6Xf6Iak/G/lbsQW196/XtG/Cz3ZH0/YNhmOdpA=
Subject key identifier: 15:E1:21:EC:14:40:D7:E0:C5:F9:08:44:54:23:69:0B:24:37:8A:AE
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0185708CA2A8F6E88FD6C1E0C47C08057C12
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/FeEh7BRA1-DF-QhEVCNpCyQ3iq4.roa
Signing time: Mon 02 Jan 2023 03:35:42 +0000
ROA not before: Mon 02 Jan 2023 03:35:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 91.208.199.0/24 maxlen: 24
85.209.165.0/24 maxlen: 24
85.209.166.0/24 maxlen: 24
85.209.164.0/24 maxlen: 24
85.209.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a2:a8:f6:e8:8f:d6:c1:e0:c4:7c:08:05:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jan 2 03:35:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e121ec1440d7e0c5f908445423690b24378aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:b2:ff:5a:db:bb:48:d1:43:45:90:a0:b2:
d7:be:fb:88:97:95:1f:0e:84:23:7a:9f:d8:9e:48:
79:51:70:19:42:dd:cc:6b:da:c8:8f:74:99:ae:74:
7c:36:e0:3a:8d:25:b2:a4:8d:34:4a:35:aa:51:8b:
ae:c9:eb:90:f2:49:73:f7:f4:06:3a:22:ba:0d:be:
2e:58:97:83:48:ad:88:fe:8e:6b:2c:58:21:4a:bc:
1c:10:fd:b6:01:f1:79:24:76:33:f0:28:7d:fc:96:
5e:a9:99:95:52:5d:25:53:91:aa:a3:c8:d9:1f:d1:
fa:2b:ee:34:57:23:96:62:8b:b3:5e:6c:af:df:25:
f3:58:82:7d:23:b4:70:3f:14:b0:8b:7f:84:c0:68:
ef:1c:40:66:49:38:5d:9f:e8:85:c8:6a:1e:b5:ca:
ae:e6:cb:82:68:9d:8e:68:63:3a:6b:15:b6:48:2b:
90:97:4d:a2:4d:63:1f:56:bc:ed:4e:eb:7f:d8:be:
e3:49:12:aa:7b:3c:fb:ad:3b:0f:0d:70:90:51:62:
5b:c3:9b:ef:8d:33:8a:4f:90:5a:6b:f9:f7:b8:7c:
29:67:fd:5e:3a:5f:44:e9:59:4d:59:e6:1f:ed:64:
da:2e:67:a9:c1:2e:9b:d0:10:6a:e6:bf:3f:00:e1:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:21:EC:14:40:D7:E0:C5:F9:08:44:54:23:69:0B:24:37:8A:AE
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/FeEh7BRA1-DF-QhEVCNpCyQ3iq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.164.0/22
91.208.199.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e1:39:77:78:4b:14:65:89:d1:17:9d:0f:1c:fc:8c:fd:0b:
85:56:01:19:15:b6:43:8d:36:6e:31:d3:94:b3:6a:ac:31:d3:
58:29:95:9a:e6:59:f4:c5:53:9a:16:93:a3:35:d9:45:95:f5:
51:d9:f8:f2:42:71:8e:a0:f5:30:8c:f7:dc:09:1d:da:74:f3:
b5:72:e1:c7:4a:5a:0e:77:43:74:5c:52:b8:57:c1:49:1c:57:
7c:d1:56:8d:66:f9:6c:57:8b:65:6c:02:3e:9f:f8:36:48:3e:
d4:a9:db:fe:bb:ea:fa:5c:44:e0:02:b4:74:3a:09:bd:2f:eb:
7f:fb:23:38:43:37:4b:35:f9:f6:34:bf:33:2a:fb:29:4f:49:
ba:ad:3f:c7:48:84:7b:d7:87:eb:ed:9b:e9:dc:7b:22:c4:15:
7d:68:8c:39:62:ae:6e:4d:2c:f1:0c:19:e1:aa:2f:13:00:4b:
59:3d:c3:04:3d:18:3f:ff:20:23:f3:81:13:1d:b9:ce:c8:9f:
fb:80:49:39:23:b4:6b:e2:6a:6b:9c:f9:1f:7c:9f:27:b4:14:
5b:ff:78:08:fb:85:09:79:43:c4:34:b9:5a:c4:21:70:13:52:
99:b7:26:df:88:7d:e5:ad:b8:c1:fc:27:fe:81:ab:65:77:40:
7a:d4:14:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwjKKo9uiP1sHgxHwIBXwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl
ZGJkMjEwHhcNMjMwMTAyMDMzNTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWUxMjFlYzE0NDBkN2UwYzVmOTA4NDQ1NDIzNjkwYjI0Mzc4YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKuy/1rbu0jRQ0WQoLLXvvuIl5Uf
DoQjep/Ynkh5UXAZQt3Ma9rIj3SZrnR8NuA6jSWypI00SjWqUYuuyeuQ8klz9/QG
OiK6Db4uWJeDSK2I/o5rLFghSrwcEP22AfF5JHYz8Ch9/JZeqZmVUl0lU5Gqo8jZ
H9H6K+40VyOWYouzXmyv3yXzWIJ9I7RwPxSwi3+EwGjvHEBmSThdn+iFyGoetcqu
5suCaJ2OaGM6axW2SCuQl02iTWMfVrztTut/2L7jSRKqezz7rTsPDXCQUWJbw5vv
jTOKT5Baa/n3uHwpZ/1eOl9E6VlNWeYf7WTaLmepwS6b0BBq5r8/AOHvYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBXhIewUQNfgxfkIRFQjaQskN4quMB8GA1UdIwQY
MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt
YzM5OWJlMDMxYjRhLzEvRmVFaDdCUkExLURGLVFoRVZDTnBDeVEzaXE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh
LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVdGkAwQA
W9DHMA0GCSqGSIb3DQEBCwUAA4IBAQBF4Tl3eEsUZYnRF50PHPyM/QuFVgEZFbZD
jTZuMdOUs2qsMdNYKZWa5ln0xVOaFpOjNdlFlfVR2fjyQnGOoPUwjPfcCR3adPO1
cuHHSloOd0N0XFK4V8FJHFd80VaNZvlsV4tlbAI+n/g2SD7Uqdv+u+r6XETgArR0
Ogm9L+t/+yM4QzdLNfn2NL8zKvspT0m6rT/HSIR714fr7Zvp3HsixBV9aIw5Yq5u
TSzxDBnhqi8TAEtZPcMEPRg//yAj84ETHbnOyJ/7gEk5I7Rr4mprnPkffJ8ntBRb
/3gI+4UJeUPENLlaxCFwE1KZtybfiH3lrbjB/Cf+gatld0B61BTP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:35 2024 by rpki-client on console-ams.rpki-client.org