Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/FRlbYhUMxBibOXYkEt8O98IYJug.roa
File: FRlbYhUMxBibOXYkEt8O98IYJug.roa (raw, json)
Hash identifier: WyaGO8+AtOUcwEF4GAY6e+57lqISUf0FaEyBF8UKmIA=
Subject key identifier: 15:19:5B:62:15:0C:C4:18:9B:39:76:24:12:DF:0E:F7:C2:18:26:E8
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01885AFB68A74B3FC9D0EF57F73C7B3CAA66
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/FRlbYhUMxBibOXYkEt8O98IYJug.roa
Signing time: Sat 27 May 2023 02:13:25 +0000
ROA not before: Sat 27 May 2023 02:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 149.3.171.0/24 maxlen: 24
45.11.98.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.96.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
134.255.199.0/24 maxlen: 24
2a0c:6d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 22 Jul 2023 08:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5a:fb:68:a7:4b:3f:c9:d0:ef:57:f7:3c:7b:3c:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: May 27 02:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15195b62150cc4189b39762412df0ef7c21826e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:c7:bd:fe:31:50:fa:13:01:e4:6e:39:80:
5c:a4:98:ea:f3:be:46:a6:c8:2a:51:60:a6:70:b9:
1a:e9:d9:04:72:13:0d:68:7a:dc:a4:93:91:6e:db:
e9:1b:bc:ca:c6:5e:eb:4e:0f:4d:e8:65:2d:67:52:
ba:d6:6f:1e:db:bc:e9:ea:3c:00:68:19:b6:18:65:
72:3b:08:f7:5e:68:e4:61:e5:bd:8d:20:ae:e9:eb:
b2:af:c4:f6:86:1d:b6:97:5d:f6:0d:60:20:27:1e:
cb:28:a3:f7:f4:ce:0d:a3:ec:c8:15:6e:09:80:b3:
3d:d6:03:fd:38:a8:bb:26:7c:8a:b8:40:ad:6d:6d:
52:00:b6:46:48:96:30:57:58:a2:52:c7:b9:bf:23:
c8:b3:7a:3a:a2:9d:f0:da:1d:8b:6b:7f:4d:fe:24:
af:92:0c:8e:01:62:aa:e2:c6:4d:ed:9a:77:0a:12:
15:45:33:be:6d:26:b2:32:79:02:1e:b4:9f:23:6f:
79:ed:d9:23:8b:69:0d:26:e6:62:20:eb:ef:a4:a3:
30:47:0a:1e:cb:b0:05:93:88:32:82:5d:ac:3f:7b:
01:4e:ab:1d:72:a1:44:bc:2a:b9:fe:1d:4e:db:d7:
52:3d:a2:9a:37:45:35:01:40:77:0c:5e:54:3c:7c:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:19:5B:62:15:0C:C4:18:9B:39:76:24:12:DF:0E:F7:C2:18:26:E8
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/FRlbYhUMxBibOXYkEt8O98IYJug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
134.255.199.0/24
149.3.171.0/24
IPv6:
2a0c:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
09:7b:37:51:43:22:72:f0:f5:02:e0:bf:cb:51:bb:65:5b:c8:
18:31:23:31:9f:cf:09:1a:7c:1b:65:b8:75:3a:5c:82:c9:8c:
6b:8b:1e:95:b9:da:4b:f1:d5:6e:50:bf:7b:30:f4:35:9f:c7:
9f:f2:f3:4e:bb:b1:3d:fd:bf:20:80:34:3e:df:fe:43:c3:69:
13:f4:8c:7b:a3:57:1d:0d:a6:01:04:1e:8a:ff:7b:e3:ac:d7:
1f:e5:ed:af:56:51:b5:86:cc:89:19:a3:58:e0:9e:fa:77:77:
03:38:8c:90:79:75:79:cc:23:68:71:93:28:dd:60:2a:64:5b:
c7:00:01:ff:cc:53:12:b4:7d:34:4b:5e:ae:f9:38:3f:23:89:
83:ea:3f:84:12:74:d4:02:dd:51:9b:af:45:0d:f3:11:25:f9:
4f:8e:94:e1:c6:4d:b2:be:70:8b:19:8c:02:7d:89:8e:19:15:
60:3f:30:d6:2a:2f:bc:67:70:cd:98:91:3c:18:c5:f8:0b:43:
11:b3:f4:f9:22:aa:a0:35:1a:0b:29:91:5b:c1:f3:1c:69:61:
f6:d2:67:7a:70:74:bf:06:e7:47:b5:68:3f:6e:72:15:92:a1:
d4:d4:45:7a:49:32:e8:4c:25:45:b1:99:ac:95:fd:46:fb:ff:
e5:0c:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org