Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/FEO_r5NuAu-8D5pIGjMLjzDatFQ.roa
File: FEO_r5NuAu-8D5pIGjMLjzDatFQ.roa (raw, json)
Hash identifier: /NaQmHl1Hs8CPnRbn5pZpPm+ceM5zQ6VcvltFcWV/24=
Subject key identifier: 14:43:BF:AF:93:6E:02:EF:BC:0F:9A:48:1A:33:0B:8F:30:DA:B4:54
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018CC6B798BCC35AD6D37397D371CF4574C7
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/FEO_r5NuAu-8D5pIGjMLjzDatFQ.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198169
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
185.52.102.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:98:bc:c3:5a:d6:d3:73:97:d3:71:cf:45:74:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1443bfaf936e02efbc0f9a481a330b8f30dab454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:7e:0b:86:0a:ad:76:8b:46:34:8a:e1:fb:
65:8b:35:0f:27:e7:c6:62:a3:15:57:b5:21:1a:4d:
bd:b7:a5:71:48:c0:89:86:d3:ae:5a:69:57:14:ec:
4c:a3:82:4e:c4:e2:bf:34:7e:36:f5:5f:79:7f:2b:
67:4f:90:6a:eb:2d:d8:5f:bc:14:80:17:da:8f:da:
fb:8c:44:4a:9d:5f:c9:87:f0:a6:ef:a9:18:1e:1a:
a0:6c:5d:d5:a5:b6:6b:8d:a5:79:c9:a5:47:97:b7:
ef:37:f6:0b:ac:67:38:08:9d:42:12:b7:7e:96:69:
ba:0a:43:b9:3d:dc:84:40:65:b3:9a:34:ee:01:e3:
b3:b2:41:ae:c6:ee:9c:d1:79:79:7d:59:b0:69:16:
50:7c:74:15:f2:9a:32:cb:92:0b:ff:a7:57:99:4c:
b1:3f:c1:7b:b3:33:68:f0:e6:74:8b:e3:ff:9e:49:
b4:29:3d:07:e1:3b:ee:85:ac:f3:0e:97:84:b9:70:
54:eb:98:40:3c:82:57:22:e7:b6:21:c1:a4:de:dc:
55:ba:67:ab:c4:9c:55:cd:65:15:5f:82:80:71:10:
9e:a4:65:86:89:f8:1c:18:57:a1:29:f8:a8:7c:ed:
55:24:b8:8c:a6:21:dc:25:79:62:f4:d5:c5:70:8c:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:BF:AF:93:6E:02:EF:BC:0F:9A:48:1A:33:0B:8F:30:DA:B4:54
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/FEO_r5NuAu-8D5pIGjMLjzDatFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0-185.52.102.255
Signature Algorithm: sha256WithRSAEncryption
42:35:3f:56:3d:45:ba:f7:a6:07:6d:04:91:b1:a2:f6:a2:6a:
34:f8:81:c2:81:dd:79:b6:80:92:e9:55:0c:ec:f8:7e:47:72:
79:c7:6f:de:05:0c:72:3a:6b:d4:26:2a:d5:15:c5:5e:36:79:
65:18:7d:9e:19:52:b4:aa:00:42:5b:ae:fa:0d:a3:c0:e9:70:
b8:f5:a1:a4:58:49:e4:c0:8b:22:76:83:56:9d:aa:8f:ed:1f:
c2:27:55:33:54:95:3c:c2:84:6a:0e:44:ad:bc:f9:75:26:e3:
e9:ed:8f:a4:e0:86:c8:a3:63:ad:96:71:5e:91:78:fd:fb:6d:
2a:88:70:02:61:07:22:8a:dd:8b:a8:cd:ba:29:8e:ba:87:44:
7b:19:8f:b9:8c:d3:bb:3f:eb:f0:84:e4:70:1a:c4:cb:21:a5:
80:92:21:43:32:cd:d8:c6:ec:74:b3:c3:54:5d:b5:f7:0d:16:
e7:56:de:00:96:1a:54:94:01:52:16:3c:2c:de:4e:5b:f2:a7:
ae:ce:72:90:a5:2d:9d:39:b8:c9:47:cf:97:17:13:e9:b7:16:
ac:59:80:3c:f3:61:04:9e:55:b3:8a:c0:1a:2b:b2:2e:6f:96:
b4:45:ea:fa:fd:78:7b:8e:cb:6f:14:a2:7f:8d:ea:f2:12:e1:
15:d9:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:32 2024 by rpki-client on console-fra.rpki-client.org