Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/FD0BW2kMNxmUsK3KS5eFv-H6aD4.roa
File: FD0BW2kMNxmUsK3KS5eFv-H6aD4.roa (raw, json)
Hash identifier: sctBpvlWKtqDUCpNN9YrH/SW8z1ikir5unsk/69eons=
Subject key identifier: 14:3D:01:5B:69:0C:37:19:94:B0:AD:CA:4B:97:85:BF:E1:FA:68:3E
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 0190C4FC6847ACC3BDF2A08F12D168E8A69F
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/FD0BW2kMNxmUsK3KS5eFv-H6aD4.roa
Signing time: Thu 18 Jul 2024 08:36:34 +0000
ROA not before: Thu 18 Jul 2024 08:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 212.78.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 09:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:fc:68:47:ac:c3:bd:f2:a0:8f:12:d1:68:e8:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Jul 18 08:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=143d015b690c371994b0adca4b9785bfe1fa683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:47:18:ed:7e:59:07:79:bc:ff:10:30:83:
c6:83:97:15:9c:d6:b4:4d:2c:18:75:57:fb:b0:e7:
4c:cd:ef:7e:e5:34:dc:fc:a4:0e:e8:d6:bd:f5:1b:
64:15:19:4a:23:4b:81:04:ce:b5:a7:42:0e:a7:68:
af:61:01:a2:e5:66:95:00:c9:7e:65:c5:1e:8f:f6:
ac:9a:1b:58:45:1d:6f:1a:82:63:b2:5d:5d:ad:17:
bf:50:d7:23:53:3e:73:e4:2b:a9:b2:cf:ab:d8:1a:
c8:b1:8f:2c:5c:6b:f3:cb:7a:45:5c:f8:1c:b7:fe:
9c:40:02:40:68:64:d3:8f:03:97:e1:34:50:ff:de:
6c:60:09:72:80:d5:86:4b:eb:96:5c:ef:27:3a:5e:
c6:36:d4:58:00:f8:b5:e0:f9:94:53:cc:ee:e1:41:
df:9b:5f:90:2b:ed:1d:a0:6c:19:83:fa:09:f8:76:
0c:9c:0f:f1:81:20:3e:bd:63:73:db:98:01:d2:85:
84:5a:3d:2e:82:a3:0d:42:bc:ce:a8:82:9a:41:50:
f3:f7:00:5f:4a:06:d0:05:cb:47:b1:46:58:d1:86:
d4:c9:1a:14:27:63:d8:f4:37:b8:5a:15:e9:20:aa:
35:e9:36:c2:ab:35:b5:40:ff:9c:38:c6:1d:01:10:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:01:5B:69:0C:37:19:94:B0:AD:CA:4B:97:85:BF:E1:FA:68:3E
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/FD0BW2kMNxmUsK3KS5eFv-H6aD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
20:aa:4d:9d:2d:f4:fd:5f:86:0f:6a:a1:f0:13:af:87:cc:bf:
59:0e:46:88:0e:5d:45:43:18:1e:51:49:af:b0:bb:84:d4:7a:
69:57:98:0a:42:1f:6e:e5:4e:90:c4:bc:88:97:b7:69:26:dc:
65:05:90:59:9c:2e:7f:db:be:dc:82:df:1f:b5:5b:1d:a1:0c:
28:b0:b4:36:93:9a:fd:8d:bb:44:af:80:4b:cd:d3:5d:64:dd:
36:b3:7e:df:9e:30:1d:f7:d0:59:93:14:ab:89:4a:9c:7e:60:
5d:25:c8:09:6d:99:5b:ca:cd:bb:a8:14:91:a0:40:50:09:b8:
99:13:be:7d:e4:68:87:e8:36:a6:e3:9d:c0:66:db:bf:f8:5d:
86:88:3d:ef:88:31:17:db:4b:38:ca:17:60:03:14:8e:13:16:
91:dd:c4:05:67:6a:e7:97:ce:30:4c:9d:56:a7:1b:ab:02:86:
27:1c:f4:59:cd:af:73:6e:81:0e:a0:c0:ea:61:7f:04:ed:16:
98:08:b2:d5:af:2a:67:0b:0a:b3:5b:b4:df:a8:f7:1d:fb:32:
cd:50:c1:49:19:ed:8c:0e:1e:9a:82:10:7d:16:61:bd:29:fa:
dd:5d:bf:56:bc:d5:4e:2e:dd:42:e4:bb:a9:f5:e6:14:34:20:
38:ff:2a:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDE/GhHrMO98qCPEtFo6KafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5
NThkZDAwHhcNMjQwNzE4MDgzNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDNkMDE1YjY5MGMzNzE5OTRiMGFkY2E0Yjk3ODViZmUxZmE2ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxHGO1+WQd5vP8QMIPGg5cVnNa0
TSwYdVf7sOdMze9+5TTc/KQO6Na99RtkFRlKI0uBBM61p0IOp2ivYQGi5WaVAMl+
ZcUej/asmhtYRR1vGoJjsl1drRe/UNcjUz5z5Cupss+r2BrIsY8sXGvzy3pFXPgc
t/6cQAJAaGTTjwOX4TRQ/95sYAlygNWGS+uWXO8nOl7GNtRYAPi14PmUU8zu4UHf
m1+QK+0doGwZg/oJ+HYMnA/xgSA+vWNz25gB0oWEWj0ugqMNQrzOqIKaQVDz9wBf
SgbQBctHsUZY0YbUyRoUJ2PY9De4WhXpIKo16TbCqzW1QP+cOMYdARAYuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQ9AVtpDDcZlLCtykuXhb/h+mg+MB8GA1UdIwQY
MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt
NmZlMzQ4MDVhNmM2LzEvRkQwQlcya01OeG1Vc0szS1M1ZUZ2LUg2YUQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2
LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1E5AMA0G
CSqGSIb3DQEBCwUAA4IBAQAgqk2dLfT9X4YPaqHwE6+HzL9ZDkaIDl1FQxgeUUmv
sLuE1HppV5gKQh9u5U6QxLyIl7dpJtxlBZBZnC5/277cgt8ftVsdoQwosLQ2k5r9
jbtEr4BLzdNdZN02s37fnjAd99BZkxSriUqcfmBdJcgJbZlbys27qBSRoEBQCbiZ
E7595GiH6Dam453AZtu/+F2GiD3viDEX20s4yhdgAxSOExaR3cQFZ2rnl84wTJ1W
pxurAoYnHPRZza9zboEOoMDqYX8E7RaYCLLVrypnCwqzW7TfqPcd+zLNUMFJGe2M
Dh6aghB9FmG9KfrdXb9WvNVOLt1C5Lup9eYUNCA4/yon
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:02 2025 by rpki-client