Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fcfydsFOVC6qGO1FRRr2e2bZxDA.roa
File: fcfydsFOVC6qGO1FRRr2e2bZxDA.roa (raw, json)
Hash identifier: /YPhjeHDFhnmAnKbLoBN6QoNwGbCMA7/PpyiWBr43no=
Subject key identifier: 7D:C7:F2:76:C1:4E:54:2E:AA:18:ED:45:45:1A:F6:7B:66:D9:C4:30
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018EA42E0CB9DD8D96C927D7ACBCF1F0271C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fcfydsFOVC6qGO1FRRr2e2bZxDA.roa
Signing time: Wed 03 Apr 2024 13:37:45 +0000
ROA not before: Wed 03 Apr 2024 13:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 46.173.240.0/21 maxlen: 21
64.43.104.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
91.245.184.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
176.103.240.0/21 maxlen: 21
176.103.240.0/22 maxlen: 22
176.103.244.0/22 maxlen: 22
176.116.232.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.184.0/22 maxlen: 22
178.212.188.0/22 maxlen: 22
185.55.4.0/22 maxlen: 22
185.55.4.0/23 maxlen: 23
185.55.6.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
193.36.204.0/22 maxlen: 22
193.36.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 23 May 2024 15:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:2e:0c:b9:dd:8d:96:c9:27:d7:ac:bc:f1:f0:27:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 3 13:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc7f276c14e542eaa18ed45451af67b66d9c430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:25:e2:5f:ad:45:04:a2:7d:2a:ec:0e:7f:
4b:da:49:cf:ab:b5:b8:4b:3f:3a:a6:36:d3:58:a7:
1b:73:77:8b:23:98:92:71:74:00:8d:17:51:69:4d:
8a:ef:55:ed:52:61:93:87:2a:cc:95:00:b9:99:4f:
d0:d6:cb:7f:76:03:fb:32:6a:19:4f:8e:b2:fe:b3:
ed:4b:98:14:94:03:76:8c:f8:56:a1:58:e0:62:e1:
3c:25:45:d3:28:0f:bb:07:4c:a6:9d:d7:5e:c7:28:
21:80:e6:92:ff:d4:da:c7:6e:65:70:40:da:11:ee:
a0:f5:9e:0b:77:83:c6:4e:85:0c:a9:e2:5d:22:59:
10:c1:b6:39:6d:2b:ba:ab:e0:11:23:81:b8:1f:ae:
c0:35:ce:e1:12:4c:2b:ed:bd:69:f5:5d:c1:f9:17:
9e:64:a4:1f:8f:73:36:50:69:ba:09:83:2d:e5:0b:
34:d8:5c:4e:b1:7c:9a:e1:a2:d5:7f:c0:50:fe:51:
70:b9:47:1b:06:88:48:8a:70:5e:6f:38:59:42:3a:
12:b2:17:db:39:5e:a7:38:75:db:a8:5a:20:eb:dd:
7c:3a:16:6b:78:6b:0f:54:f9:ea:a0:1f:56:9f:9b:
7b:22:d2:e8:cf:c2:8b:a8:4b:09:b8:b0:0b:66:0e:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:F2:76:C1:4E:54:2E:AA:18:ED:45:45:1A:F6:7B:66:D9:C4:30
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fcfydsFOVC6qGO1FRRr2e2bZxDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
64.43.104.0/22
64.43.112.0/22
64.43.124.0/22
91.233.0.0/23
91.245.184.0/22
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0-193.36.215.255
Signature Algorithm: sha256WithRSAEncryption
30:7e:24:c1:8a:27:57:8b:dc:a8:a0:f9:17:9a:e6:a8:e5:e8:
31:3a:db:91:c1:3f:1b:c0:4a:f1:59:72:23:31:f9:56:0e:9c:
eb:3b:d4:c7:bd:d0:ad:57:4e:8e:4d:74:5c:db:81:5d:14:6f:
c8:6e:27:e6:f0:9a:82:21:35:69:4f:6b:1a:f9:ad:9e:f1:fa:
02:c3:3f:cf:5b:f9:e0:39:fe:55:1c:cc:f3:1d:9e:1f:c8:8b:
23:63:7c:4e:6a:c0:e9:c3:4a:6b:2e:4e:36:03:da:3c:02:4d:
99:91:14:83:47:0a:40:47:d4:9b:5d:5d:5b:83:4f:fc:bd:58:
8a:d6:6e:ec:46:61:2a:a1:5f:ed:eb:49:83:e1:85:10:a8:8b:
c9:bc:e2:65:69:60:77:ac:0c:00:70:e5:17:1e:75:12:76:d7:
d5:25:28:a8:88:35:2d:fd:6d:8e:73:41:2c:0e:17:d0:4f:f5:
d4:4d:65:3b:d6:d3:50:62:3e:03:26:e6:9e:a5:61:a7:31:ea:
4a:52:a1:b8:06:29:ef:85:96:e3:f4:0c:14:68:e6:a7:63:97:
95:1a:ed:ef:1a:44:1e:0f:99:c6:df:83:05:b9:17:ff:9e:59:
ba:3a:ca:d3:58:1e:14:7f:e8:01:a7:61:36:58:29:c3:89:4b:
66:01:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:48:46 2024 by rpki-client on console-ams.rpki-client.org