Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/FvNJxzSz_UEBNjkHVHr9u9i_1DQ.roa
File: FvNJxzSz_UEBNjkHVHr9u9i_1DQ.roa (raw, json)
Hash identifier: xZ9tmUHZyGKoblV/JHVKO/kWyp/kx2czFcp1hqvGoUU=
Subject key identifier: 16:F3:49:C7:34:B3:FD:41:01:36:39:07:54:7A:FD:BB:D8:BF:D4:34
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0188F690FE120A59C96B604A64DE75D4AFAC
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/FvNJxzSz_UEBNjkHVHr9u9i_1DQ.roa
Signing time: Mon 26 Jun 2023 07:17:57 +0000
ROA not before: Mon 26 Jun 2023 07:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 27 Aug 2023 02:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:90:fe:12:0a:59:c9:6b:60:4a:64:de:75:d4:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jun 26 07:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f349c734b3fd4101363907547afdbbd8bfd434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:05:f6:c5:46:ec:9b:0a:01:61:8d:e4:d4:
ed:c5:f1:2a:e4:41:96:69:2c:4e:a2:3d:7d:50:f0:
3f:29:9e:96:de:b1:36:bb:0e:e3:a8:14:a1:1d:2c:
15:2f:18:c6:51:ea:90:80:56:c1:da:d7:ec:cf:60:
82:ce:98:a8:c4:cf:bc:16:4b:3a:64:bf:7a:79:de:
1f:13:70:12:46:d8:9a:25:7c:48:48:64:65:7d:73:
2e:df:22:ef:f8:ed:43:16:e0:a1:47:c7:37:59:a8:
f2:78:76:49:07:55:6a:72:37:11:2c:61:6c:4c:3d:
a2:39:b2:dc:cd:de:85:42:51:93:7c:1b:95:bb:df:
56:1c:e7:cb:49:3a:f9:dd:d0:f6:35:c0:bc:91:8a:
68:09:8b:28:43:db:10:eb:62:16:c6:ec:b4:e2:44:
8e:e1:ea:11:1c:7f:18:41:65:92:a4:49:64:e0:2d:
d5:ff:da:26:62:17:fd:a1:f3:23:50:37:96:b6:78:
0f:ff:a8:1d:26:8f:61:8a:75:16:35:0f:b1:1f:09:
ec:de:0f:be:87:c8:b9:d1:fb:7f:2e:56:7b:d7:8e:
e5:f0:ac:dc:71:51:ef:38:87:0c:e4:c0:d0:aa:51:
88:bf:b5:2f:91:fa:e9:86:8a:53:0d:97:bf:7e:1e:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F3:49:C7:34:B3:FD:41:01:36:39:07:54:7A:FD:BB:D8:BF:D4:34
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/FvNJxzSz_UEBNjkHVHr9u9i_1DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.228.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.246.0/24
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.84.0/23
163.171.87.0/24
163.171.94.0/24
163.171.97.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/23
163.171.231.0/24
163.171.252.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
82:3b:73:07:40:73:94:0a:e0:3e:91:2b:6d:98:e7:09:51:9e:
44:ae:e3:80:db:0b:01:2c:92:fe:0d:bc:65:71:e3:2f:7d:ff:
63:8c:5f:54:f7:ec:ff:21:29:a5:2b:d1:f5:d4:33:bd:ff:ad:
9c:38:26:e1:86:a9:e2:0f:64:90:63:0c:23:e5:22:0c:9d:8b:
73:c1:9c:8b:c2:d8:bc:03:d5:33:97:26:ac:b0:de:e3:5b:4d:
b1:eb:0b:cb:6b:5d:05:a1:56:14:2f:9c:c1:e2:2e:fa:ca:c2:
85:02:7a:6d:46:6f:ba:66:20:80:5a:76:5b:6d:37:02:0c:50:
93:f0:31:eb:db:a3:43:07:a7:4b:f6:0f:ae:7b:2e:91:54:b0:
8f:87:79:a7:97:61:6a:4b:bd:79:6f:1c:8f:ee:a0:38:8d:f1:
76:7b:9d:78:d2:c6:0a:f8:9d:e7:8d:27:ae:58:3f:4f:b1:3f:
ee:6b:df:b0:1c:56:55:7a:a5:91:bb:43:c5:f9:6d:6b:9a:01:
c1:09:d9:b7:8e:d3:a4:9f:a8:f6:7e:83:c9:95:80:c8:e2:ae:
c4:5b:2c:05:27:66:7b:98:78:ce:9a:05:e5:5f:8a:1b:60:01:
91:b2:48:ab:db:af:19:1f:10:a0:f7:e8:46:e6:b9:da:d5:10:
13:1d:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-fra.rpki-client.org