Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/FptVF7SyGTNlpu1vXw20t0UizWY.roa
File: FptVF7SyGTNlpu1vXw20t0UizWY.roa (raw, json)
Hash identifier: eTs9nxPAr/smv1Jl81BL3kDzGI9tLp5KTHxiGNkkYgY=
Subject key identifier: 16:9B:55:17:B4:B2:19:33:65:A6:ED:6F:5F:0D:B4:B7:45:22:CD:66
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 018CC64AC1571F5721FC25B0447569C538DC
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/FptVF7SyGTNlpu1vXw20t0UizWY.roa
Signing time: Mon 01 Jan 2024 18:30:36 +0000
ROA not before: Mon 01 Jan 2024 18:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28849
IP address blocks: 217.23.112.0/24 maxlen: 24
217.23.117.0/24 maxlen: 24
217.23.113.0/24 maxlen: 24
217.23.112.0/20 maxlen: 20
217.23.114.0/24 maxlen: 24
217.23.115.0/24 maxlen: 24
217.23.116.0/24 maxlen: 24
217.23.124.0/24 maxlen: 24
217.23.125.0/24 maxlen: 24
217.23.119.0/24 maxlen: 24
217.23.120.0/24 maxlen: 24
217.23.121.0/24 maxlen: 24
217.23.122.0/24 maxlen: 24
217.23.123.0/24 maxlen: 24
217.23.126.0/24 maxlen: 24
217.23.127.0/24 maxlen: 24
185.15.159.0/24 maxlen: 24
185.15.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 06 May 2024 15:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c1:57:1f:57:21:fc:25:b0:44:75:69:c5:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 18:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=169b5517b4b2193365a6ed6f5f0db4b74522cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:fb:db:62:cd:2d:f6:60:cc:fa:83:aa:0d:
1f:7c:4d:ec:b2:2e:26:79:0f:d7:f3:05:5a:71:5d:
94:ca:f2:7e:1e:07:ba:aa:be:91:65:8b:88:ff:2d:
69:9d:0f:9e:f8:e0:89:92:08:50:4b:00:79:c9:4e:
9e:84:aa:8f:3f:fe:ec:7f:68:57:10:3f:01:aa:59:
0e:e5:10:d1:34:96:ff:c8:94:75:06:7b:2f:3b:39:
23:9b:b2:81:56:52:92:42:be:0f:75:43:b3:70:3c:
ca:0f:4f:35:ca:84:ba:2a:e6:b5:e1:de:69:f9:0b:
40:23:1c:4e:5d:75:cc:8a:17:95:d9:5d:8a:19:b7:
f6:de:e6:52:33:5c:cc:7c:22:d8:72:7c:b0:0a:ff:
29:08:d1:83:f6:4b:ef:29:ad:b5:93:01:a9:3f:d3:
01:0f:77:db:81:f8:99:85:c2:59:ef:91:b3:cc:5f:
e4:09:55:fa:bf:e8:28:69:6e:1e:b4:48:28:6c:42:
ba:8c:61:94:ad:1a:3e:2b:c0:b3:3c:7c:cc:5b:27:
00:7c:e2:8a:28:b1:58:97:25:7f:bc:40:8c:15:b2:
29:48:f3:0d:b5:43:64:32:63:35:0c:b7:78:a8:69:
cd:88:98:f2:0e:cb:ed:f3:a2:07:aa:fc:07:bb:77:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:55:17:B4:B2:19:33:65:A6:ED:6F:5F:0D:B4:B7:45:22:CD:66
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/FptVF7SyGTNlpu1vXw20t0UizWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/22
217.23.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:db:11:51:fb:25:ce:c5:fa:fa:ed:4a:52:0e:44:e4:b2:35:
7d:18:78:d8:0d:7d:47:44:19:95:c4:e5:ba:27:a3:a1:1d:d0:
df:60:67:1c:2c:67:98:a4:3c:27:84:52:cd:26:4c:23:3b:ed:
76:ca:6b:f8:86:64:2f:74:0c:5d:d6:70:16:d5:d4:fc:45:37:
09:b0:01:83:66:5c:2f:a0:3a:64:ca:ed:2a:64:e2:3e:24:41:
7b:f4:e0:2a:28:0e:32:3b:53:a0:ae:1c:33:bc:e7:0d:b1:f2:
a0:d6:22:f4:b7:f1:9c:be:52:11:26:1d:33:b4:c1:8a:f3:ef:
52:c5:88:09:ca:4b:70:aa:e7:bd:f3:16:7b:fa:ad:da:8d:20:
4c:93:f9:82:67:9c:d2:f2:7f:44:ee:19:3b:35:7f:00:09:a0:
cb:b2:a4:51:8d:7d:ff:db:83:8d:db:f3:f6:20:22:65:fd:b7:
dd:e0:e2:05:80:99:4a:d8:c4:ee:24:72:4a:a1:3f:5b:36:2c:
70:50:3a:5b:9e:bf:85:8a:10:0a:af:97:97:76:af:38:98:e8:
fc:e0:5c:c8:41:b8:c1:46:77:7e:73:a8:08:06:ca:f5:98:c4:
06:1e:8f:eb:ce:8a:29:65:8c:fa:30:ad:44:77:fe:f8:84:28:
67:e3:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:48 2024 by rpki-client on console-ams.rpki-client.org