Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/FaCNUUHBA7d9kp8jBYEb_omldxI.roa
File: FaCNUUHBA7d9kp8jBYEb_omldxI.roa (raw, json)
Hash identifier: XR5gdt06V6M5TKiV4EezVLxBHmpeKC9Gwt+mtvUN3i0=
Subject key identifier: 15:A0:8D:51:41:C1:03:B7:7D:92:9F:23:05:81:1B:FE:89:A5:77:12
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0191C0C15CF0CCED66BF089C1C3D4BB10FAB
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/FaCNUUHBA7d9kp8jBYEb_omldxI.roa
Signing time: Thu 05 Sep 2024 05:56:23 +0000
ROA not before: Thu 05 Sep 2024 05:56:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 213.145.68.0/24 maxlen: 24
213.145.82.0/24 maxlen: 24
213.145.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 08:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:c1:5c:f0:cc:ed:66:bf:08:9c:1c:3d:4b:b1:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 5 05:56:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a08d5141c103b77d929f2305811bfe89a57712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:fb:24:4d:d6:5c:e5:14:75:da:c6:71:fe:
45:4f:4e:85:cd:91:a1:02:e4:5e:b4:9d:2c:13:1e:
54:8b:51:f2:4b:27:b5:11:cd:c7:dc:f2:80:50:1c:
f8:00:b3:e6:3b:80:11:58:70:9e:62:ed:b7:05:c4:
a6:13:2d:36:bb:8d:6f:6f:66:26:f2:82:9e:6b:cc:
da:6b:ec:95:f1:43:fc:e0:39:87:64:6b:59:24:b0:
83:4e:74:f6:24:fd:e3:49:49:de:c9:f8:66:8b:a3:
4d:66:aa:4e:44:95:9c:29:d2:70:7e:a9:4e:1e:31:
92:7a:68:0a:5c:43:ec:57:aa:7f:18:86:3c:6f:af:
27:fd:dd:16:ee:65:f1:4a:56:b5:33:bc:24:e6:ae:
76:8e:7d:c3:f9:71:31:9f:ea:3d:7a:50:ab:d5:44:
38:60:d4:7d:d3:6d:d8:53:25:06:12:50:93:59:cf:
5c:b3:bc:e7:99:12:06:1b:c1:15:79:4c:fb:df:28:
fa:09:08:2b:39:93:d7:b8:87:88:a2:b1:1a:d9:10:
ae:5d:83:41:1d:cf:81:d5:f9:0a:6d:04:db:75:a4:
eb:62:68:e8:da:b3:d0:cf:cf:1e:1a:51:a1:f9:f8:
cc:eb:26:26:9b:b3:00:17:89:27:ec:2b:4b:ab:eb:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:8D:51:41:C1:03:B7:7D:92:9F:23:05:81:1B:FE:89:A5:77:12
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/FaCNUUHBA7d9kp8jBYEb_omldxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.68.0/24
213.145.82.0/23
Signature Algorithm: sha256WithRSAEncryption
33:9c:7a:03:7b:8f:87:84:11:64:c5:17:f0:90:17:46:7c:5a:
56:ff:71:9b:14:81:dd:8a:89:b1:01:e5:92:42:dc:02:ce:56:
b6:84:e9:dd:21:68:6d:c4:03:51:8f:d9:28:8b:f4:96:93:d3:
c4:fe:14:59:9b:49:72:93:81:6f:ff:9a:0c:7f:26:8e:e5:11:
55:a0:22:ce:f2:a8:92:5e:12:d6:c0:04:ee:cc:f8:7c:8f:64:
22:40:6a:2d:a8:8b:ae:3a:fa:94:50:0a:3a:90:ec:44:06:cc:
55:bb:85:38:b8:23:f5:65:39:db:3f:eb:ba:f5:9f:c9:bb:c3:
bd:8f:42:70:de:94:d9:6a:69:8d:32:11:0e:fa:dd:52:b0:52:
81:2b:c9:64:df:63:a7:32:9b:69:ae:84:b7:31:a1:d3:f1:f1:
3f:f9:ca:83:23:90:1c:09:4b:b2:f9:2f:71:d3:66:a8:3b:4e:
fd:6b:e8:f0:ff:19:a5:8c:ab:9f:cf:53:29:66:f2:1c:bf:17:
68:64:8e:66:d3:5f:b4:43:a2:5e:5c:71:6f:d0:28:fa:32:cf:
00:cd:33:f1:5f:66:c6:93:4e:cb:bc:c2:44:ad:e4:a0:b8:db:
2e:17:4e:ea:25:1f:f9:b8:cc:c5:02:48:34:1f:b3:1e:9d:af:
57:bd:13:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHAwVzwzO1mvwicHD1LsQ+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwOTA1MDU1NjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWEwOGQ1MTQxYzEwM2I3N2Q5MjlmMjMwNTgxMWJmZTg5YTU3NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzb7JE3WXOUUddrGcf5FT06FzZGh
AuRetJ0sEx5Ui1HySye1Ec3H3PKAUBz4ALPmO4ARWHCeYu23BcSmEy02u41vb2Ym
8oKea8zaa+yV8UP84DmHZGtZJLCDTnT2JP3jSUneyfhmi6NNZqpORJWcKdJwfqlO
HjGSemgKXEPsV6p/GIY8b68n/d0W7mXxSla1M7wk5q52jn3D+XExn+o9elCr1UQ4
YNR9023YUyUGElCTWc9cs7znmRIGG8EVeUz73yj6CQgrOZPXuIeIorEa2RCuXYNB
Hc+B1fkKbQTbdaTrYmjo2rPQz88eGlGh+fjM6yYmm7MAF4kn7CtLq+vJNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBWgjVFBwQO3fZKfIwWBG/6JpXcSMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvRmFDTlVVSEJBN2Q5a3A4akJZRWJfb21sZHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZFEAwQB
1ZFSMA0GCSqGSIb3DQEBCwUAA4IBAQAznHoDe4+HhBFkxRfwkBdGfFpW/3GbFIHd
iomxAeWSQtwCzla2hOndIWhtxANRj9koi/SWk9PE/hRZm0lyk4Fv/5oMfyaO5RFV
oCLO8qiSXhLWwATuzPh8j2QiQGotqIuuOvqUUAo6kOxEBsxVu4U4uCP1ZTnbP+u6
9Z/Ju8O9j0Jw3pTZammNMhEO+t1SsFKBK8lk32OnMptproS3MaHT8fE/+cqDI5Ac
CUuy+S9x02aoO079a+jw/xmljKufz1MpZvIcvxdoZI5m01+0Q6JeXHFv0Cj6Ms8A
zTPxX2bGk07LvMJEreSguNsuF07qJR/5uMzFAkg0H7Mena9XvRMY
-----END CERTIFICATE-----
Generated at Wed Sep 25 10:31:32 2024 by rpki-client on console-ams.rpki-client.org