Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/FNwLntOEBgX2Nd9P9oRN0ZaHF0o.roa
File: FNwLntOEBgX2Nd9P9oRN0ZaHF0o.roa (raw, json)
Hash identifier: /mD+vH/DxC9k+8iUSLmSwJ7o5QwXpnKhsz8wDO6WKPg=
Subject key identifier: 14:DC:0B:9E:D3:84:06:05:F6:35:DF:4F:F6:84:4D:D1:96:87:17:4A
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D3A93A728EE2BE55A41AEC5E7B99250F7
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/FNwLntOEBgX2Nd9P9oRN0ZaHF0o.roa
Signing time: Wed 24 Jan 2024 08:26:11 +0000
ROA not before: Wed 24 Jan 2024 08:26:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:1000::/48 maxlen: 48
2a03:32c0:1001::/48 maxlen: 48
2a03:32c0:1002::/48 maxlen: 48
2a03:32c0:1003::/48 maxlen: 48
2a03:32c0:1004::/48 maxlen: 48
2a03:32c0:1005::/48 maxlen: 48
2a03:32c0:1006::/48 maxlen: 48
2a03:32c0:1007::/48 maxlen: 48
2a03:32c0:1008::/48 maxlen: 48
2a03:32c0:1009::/48 maxlen: 48
2a03:32c0:2000::/48 maxlen: 48
2a03:32c0:2001::/48 maxlen: 48
2a03:32c0:2002::/48 maxlen: 48
2a03:32c0:2003::/48 maxlen: 48
2a03:32c0:2004::/48 maxlen: 48
2a03:32c0:2005::/48 maxlen: 48
2a03:32c0:2006::/48 maxlen: 48
2a03:32c0:2007::/48 maxlen: 48
2a03:32c0:2008::/48 maxlen: 48
2a03:32c0:2009::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:9000::/48 maxlen: 48
2a03:32c0:9001::/48 maxlen: 48
2a03:32c0:9002::/48 maxlen: 48
2a03:32c0:9003::/48 maxlen: 48
2a03:32c0:9004::/48 maxlen: 48
2a03:32c0:9005::/48 maxlen: 48
2a03:32c0:9006::/48 maxlen: 48
2a03:32c0:9007::/48 maxlen: 48
2a03:32c0:a000::/48 maxlen: 48
2a03:32c0:a001::/48 maxlen: 48
2a03:32c0:a002::/48 maxlen: 48
2a03:32c0:a003::/48 maxlen: 48
2a03:32c0:a004::/48 maxlen: 48
2a03:32c0:a005::/48 maxlen: 48
2a03:32c0:a006::/48 maxlen: 48
2a03:32c0:a007::/48 maxlen: 48
2a03:32c0:a008::/48 maxlen: 48
2a03:32c0:a009::/48 maxlen: 48
2a03:32c0:b000::/48 maxlen: 48
2a03:32c0:b001::/48 maxlen: 48
2a03:32c0:b002::/48 maxlen: 48
2a03:32c0:b003::/48 maxlen: 48
2a03:32c0:b004::/48 maxlen: 48
2a03:32c0:b005::/48 maxlen: 48
2a03:32c0:b006::/48 maxlen: 48
2a03:32c0:b007::/48 maxlen: 48
2a03:32c0:b008::/48 maxlen: 48
2a03:32c0:b009::/48 maxlen: 48
2a03:32c0:c008::/48 maxlen: 48
2a03:32c0:d008::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
2a03:32c0:f008::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:93:a7:28:ee:2b:e5:5a:41:ae:c5:e7:b9:92:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 24 08:26:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14dc0b9ed3840605f635df4ff6844dd19687174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:f0:58:af:87:30:ff:7a:e8:2b:0a:1d:dc:
63:17:c9:b4:8b:b5:f7:a4:e2:22:31:ef:0e:ab:3a:
95:d9:de:27:9c:3e:d7:4c:6a:39:ba:c5:72:9a:d5:
a5:5d:80:3c:b9:67:22:8a:32:91:d8:9c:28:c1:5a:
18:97:91:a1:8d:0a:e1:03:f8:be:5e:62:13:ab:e4:
e0:6c:c7:38:1e:ac:25:42:0d:9a:20:3c:64:16:02:
0f:23:d0:0f:b3:1f:73:c7:93:73:2f:59:3c:13:2c:
39:d3:f2:10:f0:ac:b4:f3:c1:f7:c7:a9:4d:7a:d5:
2a:b0:84:b5:2a:d7:70:54:83:9e:fb:e7:bb:a0:b5:
b2:1b:43:e5:19:19:19:49:26:06:7b:bb:a6:22:72:
4c:1b:42:f6:c8:df:df:5f:83:cd:5a:09:8f:28:d6:
e1:7f:a5:00:66:6c:2e:31:f5:0c:d8:c2:70:ab:55:
86:8a:d2:07:f7:e6:87:9a:6a:45:69:a0:77:e5:3e:
df:8b:d1:b9:71:67:8d:d4:2d:1f:81:d5:00:d8:10:
cf:d9:38:5a:5f:2b:58:b6:2c:a1:9f:8b:36:21:5d:
1d:c1:a9:f4:e8:ca:43:ec:1c:e5:e1:21:3d:e4:71:
82:a2:ea:73:3c:7e:cb:61:24:3a:67:ea:3b:7c:f4:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DC:0B:9E:D3:84:06:05:F6:35:DF:4F:F6:84:4D:D1:96:87:17:4A
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/FNwLntOEBgX2Nd9P9oRN0ZaHF0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::-2a03:32c0:3005:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7000::/47
2a03:32c0:8000::/45
2a03:32c0:9000::/45
2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:c008::/48
2a03:32c0:d008::/48
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:f008::/48
Signature Algorithm: sha256WithRSAEncryption
51:f4:0b:57:f4:0e:ae:b2:ec:0d:4e:7d:1e:38:ed:5e:a2:51:
e8:77:2b:18:4a:33:49:93:4e:9e:e6:17:99:ab:ea:c0:10:7f:
19:94:2f:35:8a:25:38:5a:bf:e2:f4:a0:d3:f9:5c:92:04:1e:
3d:91:02:24:42:0e:f6:fe:03:71:a5:66:49:5e:41:6e:7a:a4:
b1:f8:1f:99:58:a9:16:28:50:42:aa:28:05:2f:81:cc:1f:20:
a2:a7:4b:14:d5:a3:8c:72:03:a3:63:d8:33:29:53:36:ed:8f:
b3:5e:76:bd:29:92:9d:2c:9a:6b:6b:be:16:16:b8:32:72:89:
8c:f5:72:d6:ed:36:69:24:45:86:ac:29:36:e6:25:e4:a3:ad:
57:b0:8f:b4:76:94:fe:79:0a:24:b0:90:c9:0b:df:94:bb:2c:
58:74:be:7d:7c:49:4a:61:56:f9:7b:73:96:d5:7b:97:e9:4b:
a2:a9:99:36:35:bb:e3:0d:20:72:00:f5:11:8e:d0:e2:db:1b:
ee:41:85:2a:b0:a4:4a:ee:c1:47:c1:eb:8d:a5:b2:42:cf:85:
b3:3a:cb:55:46:ee:34:57:c0:26:f8:6b:53:26:25:25:53:fc:
41:04:44:8d:5d:89:88:ab:9e:57:5f:bc:df:8e:88:58:6c:a4:
b1:f3:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org