Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FPvbwOcTO2VUKQ1F1R4n97Y27zo.roa
File: FPvbwOcTO2VUKQ1F1R4n97Y27zo.roa (raw, json)
Hash identifier: TmjHFSHoPEDWnGntvhW43JB2zoyQBUckrPuKXhHgs44=
Subject key identifier: 14:FB:DB:C0:E7:13:3B:65:54:29:0D:45:D5:1E:27:F7:B6:36:EF:3A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018958233DDAE357C996F8BBCD72324A8296
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FPvbwOcTO2VUKQ1F1R4n97Y27zo.roa
Signing time: Sat 15 Jul 2023 06:00:51 +0000
ROA not before: Sat 15 Jul 2023 06:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 77.242.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:23:3d:da:e3:57:c9:96:f8:bb:cd:72:32:4a:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 15 06:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14fbdbc0e7133b6554290d45d51e27f7b636ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:7e:85:94:7a:0d:d4:59:3d:a9:b2:07:4c:
37:db:2b:4f:aa:a0:ee:90:89:d3:c6:56:5b:9b:bf:
91:7f:63:22:b1:93:c2:40:0f:93:69:41:74:e3:d3:
b8:43:c1:35:9d:97:9c:3d:c0:62:f1:61:3a:4a:7e:
74:a0:4b:31:91:a5:bc:8b:1c:cc:e0:e0:ff:49:cc:
c0:d9:b4:93:b1:f0:76:1d:58:0f:ce:93:ab:e6:4b:
9c:fe:c2:75:a1:df:f2:40:42:7d:dc:7e:4c:2b:12:
96:4a:0c:cf:94:92:da:e2:ff:c1:b8:23:6c:fd:32:
d1:ca:09:b0:6e:c7:43:0b:53:e1:fa:dc:40:69:23:
91:6a:98:4f:d2:dd:05:99:99:66:c7:5c:ec:a1:4d:
76:c7:44:f4:70:b2:ed:4d:f6:7c:13:a7:d0:59:b7:
a0:4f:2e:83:29:53:eb:60:4c:8c:13:e0:24:87:86:
da:61:a9:03:f0:8c:5b:2f:a4:8b:6b:1f:ce:66:e9:
1d:ab:0d:40:30:f6:47:90:7b:a2:65:3e:6a:05:c0:
f9:f1:10:d3:cf:7d:57:76:53:ef:b0:93:d3:1e:42:
fc:cb:2b:d0:ba:73:4f:74:c6:d0:1a:d8:7d:7a:32:
90:2a:f1:4e:84:f7:74:2d:f9:26:d3:f0:c7:40:dd:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:DB:C0:E7:13:3B:65:54:29:0D:45:D5:1E:27:F7:B6:36:EF:3A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FPvbwOcTO2VUKQ1F1R4n97Y27zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:47:ce:e4:d0:af:46:ca:56:d6:c6:db:78:b4:3d:5a:ec:12:
da:b3:6b:80:1a:0a:74:e0:e9:ef:20:ae:75:cb:9f:3e:7b:07:
8e:5a:3d:73:91:a3:1e:09:bf:32:bc:a8:d1:53:20:27:38:cb:
04:21:2a:b4:4a:b8:36:28:1b:6d:fb:e6:7c:92:6a:f9:a2:ce:
e3:cb:87:e4:92:3c:fe:0f:85:99:36:0e:14:43:af:0c:64:2e:
d0:de:33:4b:a7:8e:cc:13:48:0a:aa:2a:6d:8e:0e:35:ba:09:
9a:ec:ad:bc:b5:5f:8d:20:90:3f:a8:07:80:15:91:02:7c:f3:
00:45:a6:68:e3:21:d8:51:c8:79:74:07:a6:4c:7d:ac:01:0e:
0a:9b:a7:30:be:d3:d5:17:46:4d:84:6b:ab:b2:57:4c:da:c3:
39:17:41:15:e3:0e:ac:54:ba:a4:59:7a:ea:73:ae:c7:33:b3:
56:c3:ea:ee:de:80:4a:58:b5:44:11:27:fa:a6:a2:2a:e2:46:
66:91:96:2b:00:00:93:34:95:7e:b7:70:c6:65:17:b3:ce:ed:
73:f4:91:57:8e:5d:0e:80:2f:df:f3:58:c2:db:55:c7:9c:9d:
84:64:10:3b:7b:a5:61:41:75:23:cc:b5:f3:a0:8a:8f:7e:c0:
22:86:3e:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlYIz3a41fJlvi7zXIySoKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNzE1MDYwMDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGZiZGJjMGU3MTMzYjY1NTQyOTBkNDVkNTFlMjdmN2I2MzZlZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKl+hZR6DdRZPamyB0w32ytPqqDu
kInTxlZbm7+Rf2MisZPCQA+TaUF049O4Q8E1nZecPcBi8WE6Sn50oEsxkaW8ixzM
4OD/SczA2bSTsfB2HVgPzpOr5kuc/sJ1od/yQEJ93H5MKxKWSgzPlJLa4v/BuCNs
/TLRygmwbsdDC1Ph+txAaSORaphP0t0FmZlmx1zsoU12x0T0cLLtTfZ8E6fQWbeg
Ty6DKVPrYEyME+Akh4baYakD8IxbL6SLax/OZukdqw1AMPZHkHuiZT5qBcD58RDT
z31XdlPvsJPTHkL8yyvQunNPdMbQGth9ejKQKvFOhPd0Lfkm0/DHQN2rEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBT728DnEztlVCkNRdUeJ/e2Nu86MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvRlB2YndPY1RPMlZVS1ExRjFSNG45N1kyN3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfKVMA0G
CSqGSIb3DQEBCwUAA4IBAQB+R87k0K9GylbWxtt4tD1a7BLas2uAGgp04OnvIK51
y58+eweOWj1zkaMeCb8yvKjRUyAnOMsEISq0Srg2KBtt++Z8kmr5os7jy4fkkjz+
D4WZNg4UQ68MZC7Q3jNLp47ME0gKqiptjg41ugma7K28tV+NIJA/qAeAFZECfPMA
RaZo4yHYUch5dAemTH2sAQ4Km6cwvtPVF0ZNhGursldM2sM5F0EV4w6sVLqkWXrq
c67HM7NWw+ru3oBKWLVEESf6pqIq4kZmkZYrAACTNJV+t3DGZRezzu1z9JFXjl0O
gC/f81jC21XHnJ2EZBA7e6VhQXUjzLXzoIqPfsAihj49
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org