Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/ftttmvtudC06BLoXE1MXsG5RNg8.roa
File: ftttmvtudC06BLoXE1MXsG5RNg8.roa (raw, json)
Hash identifier: L69AmZzUqQGXleQM5l49YXBVI/Eh/QL2UEY9qfDiW5w=
Subject key identifier: 7E:DB:6D:9A:FB:6E:74:2D:3A:04:BA:17:13:53:17:B0:6E:51:36:0F
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018DF6F3C8B8ED4C740F44CD96D3890F030E
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/ftttmvtudC06BLoXE1MXsG5RNg8.roa
Signing time: Thu 29 Feb 2024 22:19:48 +0000
ROA not before: Thu 29 Feb 2024 22:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.181.8.0/24 maxlen: 24
185.227.110.0/24 maxlen: 24
185.247.117.0/24 maxlen: 24
194.37.81.0/24 maxlen: 24
2a07:3b80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Mar 2024 08:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:f3:c8:b8:ed:4c:74:0f:44:cd:96:d3:89:0f:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Feb 29 22:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7edb6d9afb6e742d3a04ba17135317b06e51360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:50:9c:e3:01:36:92:67:42:b9:6d:ae:f0:
bf:7e:4f:96:f9:c0:94:44:e7:d5:d9:21:dc:37:a8:
30:4b:ff:ae:30:80:6d:03:00:61:47:58:60:80:73:
0e:be:9a:46:a1:17:bd:ec:bb:a9:9f:fa:fc:ee:64:
8e:ee:01:6b:9b:1b:6d:43:45:79:9d:8f:ee:8f:bc:
95:c4:2f:4e:42:e5:7b:00:e2:1d:51:9b:b6:15:e2:
05:76:8c:ae:3e:d4:67:0d:38:d7:6a:b5:70:25:32:
51:5c:72:f2:ba:8b:53:a2:9e:e7:53:50:e5:88:ca:
09:37:45:42:06:e0:62:1f:90:c4:50:09:34:3a:de:
35:81:30:67:f4:d0:7f:b8:ba:57:1c:aa:59:81:ee:
b7:12:9f:d4:a5:e6:01:8b:ca:98:58:2f:dc:db:dc:
12:b9:61:9e:95:bf:43:2b:5f:9e:8c:e4:b8:f2:64:
01:31:02:29:db:82:aa:bf:9c:12:ea:e3:d6:af:5b:
3e:d5:4f:35:7d:a6:44:cb:98:99:a0:66:5a:bb:fd:
83:cc:8d:f9:49:0f:dc:b1:fa:d5:5c:71:13:ce:c4:
cb:b9:84:e6:35:e8:77:ea:86:a6:78:c6:c4:2a:52:
c7:f1:34:8f:cd:67:aa:fb:0b:14:df:41:f3:be:82:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:6D:9A:FB:6E:74:2D:3A:04:BA:17:13:53:17:B0:6E:51:36:0F
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/ftttmvtudC06BLoXE1MXsG5RNg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.8.0/24
185.227.110.0/24
185.247.117.0/24
194.37.81.0/24
IPv6:
2a07:3b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
1e:a5:3c:d7:2f:a4:9c:aa:d2:c0:c8:9c:af:1e:a1:4c:2b:60:
6b:91:a2:96:6f:cd:b6:fb:4e:f8:86:6c:54:5c:65:82:bc:54:
2b:4b:64:61:7d:32:b9:d7:66:ec:d7:82:0e:3d:3d:b9:4f:3f:
f6:92:44:e4:25:f7:0a:f1:88:9c:b3:70:4d:a3:84:01:55:8a:
bd:8b:be:92:6b:1e:e2:dc:21:20:7c:b7:1e:4b:34:9f:e3:56:
68:80:3e:b5:15:45:fc:91:f7:ad:11:3e:03:56:28:65:f4:0c:
b9:58:9d:5d:ba:df:7a:df:94:6b:b1:a2:13:3c:0a:ba:e1:41:
d9:15:4d:c0:92:52:67:07:5b:64:a9:e1:9c:0b:4d:21:e0:05:
55:af:ed:bb:99:f3:4a:f9:38:e9:a3:b4:7e:35:8e:5a:55:2d:
dc:69:7f:a7:55:2a:16:02:d0:ec:57:88:b0:4e:c9:6b:14:24:
ce:0e:1c:d9:2e:15:d4:3f:d2:bd:65:03:8d:cc:d3:22:1f:67:
62:8b:e2:ff:24:fa:55:59:b6:44:f1:67:c0:c4:ae:d4:23:b2:
a8:98:90:ca:6d:34:66:41:22:97:cb:1e:e8:cc:37:3d:52:d2:
74:64:d2:fb:89:ec:a5:25:5a:3c:58:fc:0d:28:4c:a8:1b:d7:
d9:8d:7f:a2
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAY3288i47Ux0D0TNltOJDwMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjQwMjI5MjIxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWRiNmQ5YWZiNmU3NDJkM2EwNGJhMTcxMzUzMTdiMDZlNTEzNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0tQnOMBNpJnQrltrvC/fk+W+cCU
ROfV2SHcN6gwS/+uMIBtAwBhR1hggHMOvppGoRe97Lupn/r87mSO7gFrmxttQ0V5
nY/uj7yVxC9OQuV7AOIdUZu2FeIFdoyuPtRnDTjXarVwJTJRXHLyuotTop7nU1Dl
iMoJN0VCBuBiH5DEUAk0Ot41gTBn9NB/uLpXHKpZge63Ep/UpeYBi8qYWC/c29wS
uWGelb9DK1+ejOS48mQBMQIp24Kqv5wS6uPWr1s+1U81faZEy5iZoGZau/2DzI35
SQ/csfrVXHETzsTLuYTmNeh36oameMbEKlLH8TSPzWeq+wsU30HzvoIbHQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFH7bbZr7bnQtOgS6FxNTF7BuUTYPMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvZnR0dG12dHVkQzA2QkxvWEUxTVhzRzVSTmc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAubUIAwQA
ueNuAwQAufd1AwQAwiVRMA8EAgACMAkDBwAqBzuAAAMwDQYJKoZIhvcNAQELBQAD
ggEBAB6lPNcvpJyq0sDInK8eoUwrYGuRopZvzbb7TviGbFRcZYK8VCtLZGF9MrnX
ZuzXgg49PblPP/aSROQl9wrxiJyzcE2jhAFVir2LvpJrHuLcISB8tx5LNJ/jVmiA
PrUVRfyR960RPgNWKGX0DLlYnV2633rflGuxohM8CrrhQdkVTcCSUmcHW2Sp4ZwL
TSHgBVWv7buZ80r5OOmjtH41jlpVLdxpf6dVKhYC0OxXiLBOyWsUJM4OHNkuFdQ/
0r1lA43M0yIfZ2KL4v8k+lVZtkTxZ8DErtQjsqiYkMptNGZBIpfLHujMNz1S0nRk
0vuJ7KUlWjxY/A0oTKgb19mNf6I=
-----END CERTIFICATE-----
Generated at Tue Mar 26 11:55:51 2024 by rpki-client on console-ams.rpki-client.org