Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/fpyA6_a8GrC06mqtL7TIiPpid4Q.roa
File: fpyA6_a8GrC06mqtL7TIiPpid4Q.roa (raw, json)
Hash identifier: c6exG9u4PPcZNJBiiM/sYh8CMcC+9kZNdl8V7m8s0GU=
Subject key identifier: 7E:9C:80:EB:F6:BC:1A:B0:B4:EA:6A:AD:2F:B4:C8:88:FA:62:77:84
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01856E0AED1C65933A92F83CCB08D381B1FC
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/fpyA6_a8GrC06mqtL7TIiPpid4Q.roa
Signing time: Sun 01 Jan 2023 15:54:47 +0000
ROA not before: Sun 01 Jan 2023 15:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 212.62.85.0/24 maxlen: 24
84.201.65.0/24 maxlen: 24
84.201.64.0/18 maxlen: 24
84.201.66.0/24 maxlen: 24
84.201.73.0/24 maxlen: 24
84.201.98.0/24 maxlen: 24
81.89.246.0/24 maxlen: 24
212.62.64.0/19 maxlen: 24
212.62.68.0/24 maxlen: 24
212.62.67.0/24 maxlen: 24
212.62.72.0/24 maxlen: 24
81.89.224.0/19 maxlen: 24
2a00:1348:10::/48 maxlen: 64
2a00:1348:11::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:ed:1c:65:93:3a:92:f8:3c:cb:08:d3:81:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 15:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e9c80ebf6bc1ab0b4ea6aad2fb4c888fa627784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:3d:33:a1:ad:7a:e2:6b:bd:fb:a1:e1:3d:
29:c3:4c:79:54:d8:44:48:3e:98:a2:35:91:ba:2e:
da:10:a3:9d:7c:d3:7e:c1:c5:e6:3f:8a:4f:0b:ad:
c5:2d:c2:a3:da:e3:ae:2e:62:36:63:c1:96:a9:2a:
76:ce:08:c1:d1:e2:6f:71:cb:7a:5e:b4:d9:f9:c0:
9b:68:4a:0f:b0:18:34:33:16:4f:9d:5e:0a:70:fb:
2c:bc:30:3c:f6:88:c6:2f:f9:b1:93:af:59:21:56:
3c:aa:8b:0d:ac:4d:e4:78:5c:8e:2c:fd:58:fe:51:
c0:92:40:69:ba:1e:9e:95:fa:cf:e7:fc:2b:69:c8:
f0:f7:d5:60:1b:7f:e3:ae:96:06:9c:f0:ad:f8:54:
84:cb:da:3c:54:81:36:63:e0:03:ed:d8:a7:80:f5:
dc:c2:1c:03:ba:c8:41:16:3e:e8:32:49:41:0f:55:
9c:1a:8c:14:f2:00:ed:ba:a4:3a:69:b0:a5:5c:4f:
8a:1b:bf:c6:97:7a:76:7a:3f:0a:ae:5c:1a:5b:86:
89:af:38:ed:dc:cc:d8:55:aa:16:83:13:84:55:c5:
f4:b1:b3:59:70:83:31:c3:63:26:08:26:fd:d9:ed:
02:b0:70:25:e2:2a:91:67:2c:ed:06:58:94:47:81:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:80:EB:F6:BC:1A:B0:B4:EA:6A:AD:2F:B4:C8:88:FA:62:77:84
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/fpyA6_a8GrC06mqtL7TIiPpid4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/19
84.201.64.0/18
212.62.64.0/19
IPv6:
2a00:1348:10::/47
Signature Algorithm: sha256WithRSAEncryption
69:59:f1:2e:3d:a8:0b:0e:cc:45:89:db:e7:67:66:87:8f:8d:
e6:00:43:0c:a0:89:c7:a5:87:fc:34:bc:7f:fa:95:96:1f:ef:
89:70:9e:57:39:2a:43:e6:36:3d:58:22:f4:79:41:25:e5:f7:
b0:e1:dc:1a:8b:74:9f:7b:9a:c7:01:24:24:4c:63:f9:d1:8c:
08:07:cf:bb:9f:5a:9b:10:4b:95:bb:72:d7:b6:ce:f1:b8:84:
0a:fd:2e:e4:69:69:45:3d:d0:11:27:c4:6a:f4:88:26:b4:69:
4f:cd:c1:a1:d4:72:8a:60:d3:d8:32:ec:85:d5:31:cf:6e:0d:
10:6c:d7:33:f0:0c:cf:32:c9:24:90:be:08:cc:0b:ce:dc:fa:
bc:da:5d:00:25:ec:ad:7e:bd:e8:b1:d8:d0:d5:70:b7:6f:4f:
c6:89:dd:5a:f7:c9:91:95:33:b2:75:c9:f5:74:b1:c2:db:ee:
5e:84:6f:55:85:83:ee:be:89:75:7b:9e:e0:91:8d:76:82:40:
6d:1e:5f:be:5b:6c:69:87:e4:a2:cb:06:71:0e:f7:86:52:2c:
99:c8:25:91:49:69:bf:17:14:09:31:d8:4e:d0:f0:69:7c:f9:
80:a3:4c:57:37:c4:ad:10:09:4a:fa:6e:68:10:bd:66:ec:4b:
82:4c:c7:98
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVuCu0cZZM6kvg8ywjTgbH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5
NTgwYmIwHhcNMjMwMTAxMTU1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTljODBlYmY2YmMxYWIwYjRlYTZhYWQyZmI0Yzg4OGZhNjI3Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut49M6GteuJrvfuh4T0pw0x5VNhE
SD6YojWRui7aEKOdfNN+wcXmP4pPC63FLcKj2uOuLmI2Y8GWqSp2zgjB0eJvcct6
XrTZ+cCbaEoPsBg0MxZPnV4KcPssvDA89ojGL/mxk69ZIVY8qosNrE3keFyOLP1Y
/lHAkkBpuh6elfrP5/wracjw99VgG3/jrpYGnPCt+FSEy9o8VIE2Y+AD7dingPXc
whwDushBFj7oMklBD1WcGowU8gDtuqQ6abClXE+KG7/Gl3p2ej8KrlwaW4aJrzjt
3MzYVaoWgxOEVcX0sbNZcIMxw2MmCCb92e0CsHAl4iqRZyztBliUR4GrhwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFH6cgOv2vBqwtOpqrS+0yIj6YneEMB8GA1UdIwQY
MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt
ZThjOWFkNWYwNTFhLzEvZnB5QTZfYThHckMwNm1xdEw3VElpUHBpZDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh
LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQFUVngAwQG
VMlAAwQF1D5AMA8EAgACMAkDBwEqABNIABAwDQYJKoZIhvcNAQELBQADggEBAGlZ
8S49qAsOzEWJ2+dnZoePjeYAQwygicelh/w0vH/6lZYf74lwnlc5KkPmNj1YIvR5
QSXl97Dh3BqLdJ97mscBJCRMY/nRjAgHz7ufWpsQS5W7cte2zvG4hAr9LuRpaUU9
0BEnxGr0iCa0aU/NwaHUcopg09gy7IXVMc9uDRBs1zPwDM8yySSQvgjMC87c+rza
XQAl7K1+veix2NDVcLdvT8aJ3Vr3yZGVM7J1yfV0scLb7l6Eb1WFg+6+iXV7nuCR
jXaCQG0eX75bbGmH5KLLBnEO94ZSLJnIJZFJab8XFAkx2E7Q8Gl8+YCjTFc3xK0Q
CUr6bmgQvWbsS4JMx5g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org