Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/_fKicLK0fVA7S8F8gucidthtmKo.roa
File: _fKicLK0fVA7S8F8gucidthtmKo.roa (raw, json)
Hash identifier: vfWHaMMO3m5GpM2hn0rbC4j6Uva0gF2bRIclv3ujX/A=
Subject key identifier: FD:F2:A2:70:B2:B4:7D:50:3B:4B:C1:7C:82:E7:22:76:D8:6D:98:AA
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 018C3F2F521F4417CE9A1B18E02C15D9BBBF
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/_fKicLK0fVA7S8F8gucidthtmKo.roa
Signing time: Wed 06 Dec 2023 12:51:54 +0000
ROA not before: Wed 06 Dec 2023 12:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211261
IP address blocks: 91.210.126.0/24 maxlen: 24
5.253.157.0/24 maxlen: 24
5.253.156.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
185.204.201.0/24 maxlen: 24
185.204.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 14:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:2f:52:1f:44:17:ce:9a:1b:18:e0:2c:15:d9:bb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Dec 6 12:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf2a270b2b47d503b4bc17c82e72276d86d98aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:8c:c3:48:f0:b1:f0:88:6d:ad:81:51:90:
3d:10:e6:39:af:8a:c4:58:23:98:c6:7a:20:d8:d0:
d1:8a:d2:b8:59:ad:72:8e:10:aa:07:06:66:47:c2:
7e:ba:3d:0f:62:be:33:20:0b:71:4a:91:6e:56:fa:
96:20:e9:dd:1d:30:b1:64:ed:43:99:f5:d2:0c:74:
8b:73:2e:ac:a9:00:ab:c3:5d:6d:85:9a:d3:2a:f1:
f7:44:b3:a7:ce:48:e8:ae:6c:b7:f3:e7:0c:1b:27:
d5:02:06:5e:81:df:a9:a1:2d:ec:d3:dd:a8:9a:f5:
43:e0:2c:6f:77:d0:3e:79:9d:93:7a:4a:ac:b3:c4:
80:8f:29:1e:15:00:f5:3e:46:b8:e0:0d:aa:8a:b6:
ee:a1:09:f4:07:e6:ee:2e:44:ea:52:00:b2:b1:be:
63:7a:70:d3:bd:52:0a:45:54:9e:ee:e9:a4:47:19:
38:7e:e1:1b:3c:e9:24:6c:d7:66:92:ec:ea:e8:84:
49:e6:0c:c2:54:07:78:58:22:9a:85:b4:b5:b2:b7:
d6:34:04:54:f6:e0:c2:92:69:98:10:90:09:7b:06:
e6:f3:2f:ca:24:58:53:02:4d:2d:71:35:56:b9:b4:
0a:ce:70:2b:d6:93:9b:39:79:7b:71:fb:34:7f:2c:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F2:A2:70:B2:B4:7D:50:3B:4B:C1:7C:82:E7:22:76:D8:6D:98:AA
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/_fKicLK0fVA7S8F8gucidthtmKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.156.0/23
5.253.159.0/24
91.210.126.0/24
185.204.200.0/23
Signature Algorithm: sha256WithRSAEncryption
86:ed:33:42:2c:73:b7:c8:3b:08:c9:b1:0d:27:82:48:dd:cf:
22:99:84:82:d8:51:82:cb:7a:03:45:ce:8f:f3:dd:8a:36:85:
80:d1:99:3e:85:53:05:09:ca:1e:16:26:ea:a5:b1:8a:0c:00:
c9:ac:52:47:0f:a9:0f:7e:fa:43:67:ab:17:b9:19:e1:cc:03:
e6:5b:82:90:72:26:c5:c6:4e:45:f9:cf:78:3c:7c:dd:57:a2:
9a:eb:a5:8a:1f:63:51:5f:36:63:90:d3:e2:bc:10:1d:7f:d1:
82:08:ca:9f:c7:da:f8:d9:9e:71:c3:e4:cc:a6:13:1d:02:40:
a1:d9:cc:4e:86:2c:0d:ab:4f:c9:9f:89:1d:b3:50:38:1d:9b:
6d:63:a5:e8:32:72:79:39:bd:8f:26:41:d8:ae:6e:bb:3e:70:
4b:d3:40:5b:0d:52:cb:8a:40:55:45:2e:fa:85:ed:ff:c0:ed:
7c:e4:40:0e:80:3a:69:81:a7:a5:29:22:2d:ac:d5:8c:f8:a1:
6d:65:f9:2d:b0:6f:37:cb:72:e0:73:ae:ea:a0:09:20:ed:12:
ef:ea:85:58:bf:62:a3:87:ea:56:a4:ce:01:1d:a8:5b:da:b6:
5f:23:04:e9:97:dd:ba:81:b8:a3:82:bb:8b:4a:ec:0f:3a:ea:
ef:68:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:13 2024 by rpki-client on console-ams.rpki-client.org