Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/fnq7XXJ7uf_gT8Hm-VOICjz0Npo.roa
File: fnq7XXJ7uf_gT8Hm-VOICjz0Npo.roa (raw, json)
Hash identifier: /DzSh4xmdVIjkoEnIsWckVTOR4WPuBaVCrvSA4bQQB0=
Subject key identifier: 7E:7A:BB:5D:72:7B:B9:FF:E0:4F:C1:E6:F9:53:88:0A:3C:F4:36:9A
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 018E66DB805F25050C9E7E706BE2A554E219
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/fnq7XXJ7uf_gT8Hm-VOICjz0Npo.roa
Signing time: Fri 22 Mar 2024 15:50:45 +0000
ROA not before: Fri 22 Mar 2024 15:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29014
IP address blocks: 45.139.156.0/22 maxlen: 24
85.158.0.0/22 maxlen: 24
85.158.0.0/24 maxlen: 24
85.158.4.0/23 maxlen: 23
85.158.6.0/24 maxlen: 24
85.158.7.0/24 maxlen: 24
93.92.128.0/21 maxlen: 24
93.92.128.0/23 maxlen: 23
93.92.130.0/23 maxlen: 23
93.92.132.0/24 maxlen: 24
93.92.133.0/24 maxlen: 24
93.92.134.0/23 maxlen: 23
185.8.8.0/22 maxlen: 24
185.8.8.0/24 maxlen: 24
193.41.116.0/23 maxlen: 24
194.126.239.0/24 maxlen: 24
195.177.232.0/23 maxlen: 24
195.177.233.0/24 maxlen: 24
2a00:12e8::/32 maxlen: 40
2a00:12e8::/40 maxlen: 40
2a00:12e8:100::/40 maxlen: 40
2a00:12e8:200::/40 maxlen: 40
2a00:12e8:300::/40 maxlen: 40
2a00:12e8:400::/40 maxlen: 40
2a00:12e8:500::/40 maxlen: 40
2a00:12e8:600::/40 maxlen: 40
2a00:12e8:800::/48 maxlen: 48
2a00:12e8:f111::/48 maxlen: 48
2a00:12e8:f123::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 19:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:db:80:5f:25:05:0c:9e:7e:70:6b:e2:a5:54:e2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Mar 22 15:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7abb5d727bb9ffe04fc1e6f953880a3cf4369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:4c:9e:39:8d:07:42:f9:fa:aa:c8:e0:3d:
1c:d9:23:1b:85:e2:52:d8:2f:06:2f:4d:21:84:b8:
cc:00:dd:be:66:ee:c0:3f:cb:27:6c:1c:95:52:77:
87:b8:69:87:36:fb:9a:0f:b0:80:d5:0c:80:c0:47:
cb:8e:27:29:07:c0:9e:d7:ee:f8:69:97:5a:68:f4:
a1:cf:c9:6c:4f:cb:c1:f9:c5:11:4e:67:dc:60:0c:
ad:52:b5:6a:f6:ea:0c:77:d7:c8:89:45:72:54:8a:
57:86:b6:00:ce:c3:1c:93:02:c0:bb:71:2b:32:8f:
f0:94:09:ab:24:98:cd:51:6e:3e:45:b2:04:39:c0:
a9:c7:70:23:aa:c1:da:54:5b:f0:9c:af:72:f1:56:
be:e4:f3:cf:0f:60:23:ce:03:e2:44:7c:00:0a:b4:
10:d2:49:3b:e0:e0:71:3c:5e:c2:2b:a2:7b:5b:e6:
3e:a0:e0:10:63:32:a0:75:57:4c:20:b7:77:1c:78:
16:12:93:d8:32:23:e7:d9:1a:9b:cc:ed:22:96:5d:
28:91:cc:d7:2f:dc:96:88:b6:e2:99:f3:ec:44:a6:
a2:e4:ed:70:f3:7c:38:30:3a:7d:02:57:82:20:db:
18:bb:4e:00:92:28:de:d8:ae:ba:f9:eb:68:72:7d:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:BB:5D:72:7B:B9:FF:E0:4F:C1:E6:F9:53:88:0A:3C:F4:36:9A
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/fnq7XXJ7uf_gT8Hm-VOICjz0Npo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.156.0/22
85.158.0.0/21
93.92.128.0/21
185.8.8.0/22
193.41.116.0/23
194.126.239.0/24
195.177.232.0/23
IPv6:
2a00:12e8::/32
Signature Algorithm: sha256WithRSAEncryption
a9:47:9c:c5:09:cd:1b:40:c3:31:11:97:03:25:0a:62:d2:3b:
91:0e:c7:ed:10:2f:68:35:c5:2d:88:9f:ad:98:ab:ea:15:55:
a9:d8:26:4a:68:87:f2:8d:de:46:87:63:27:54:bd:8e:74:82:
c8:72:d8:df:7b:42:20:d9:b5:15:6f:a9:c1:b0:32:e4:a9:db:
93:d5:20:b9:7c:3e:35:33:71:25:63:9e:13:e3:7d:8c:fe:66:
69:52:45:2e:50:96:4f:83:20:5d:04:b4:9a:6d:0b:3b:c2:21:
c7:a6:40:3c:5c:3c:d5:24:e3:49:36:2f:10:f1:ea:8d:2c:26:
ce:5c:92:a3:db:97:e6:c1:10:82:1a:78:d2:4c:11:a6:48:d9:
11:3a:36:86:b6:31:6f:5b:57:87:6f:04:76:96:ec:c6:24:77:
f2:80:60:fe:c2:bf:2f:0d:5d:5b:28:7f:a2:44:7e:2d:96:21:
c8:41:df:b0:17:ed:f2:fb:4a:2b:b9:cf:1f:0d:f5:ae:77:c6:
07:c3:9c:28:79:55:ab:ca:0c:aa:ae:22:43:2c:4a:d7:06:e3:
c9:47:46:10:88:b1:0a:20:f3:a1:8e:c9:b7:52:d6:05:3b:14:
84:9a:c7:79:e2:56:05:c2:ac:80:e9:8b:01:d6:20:bc:da:de:
af:b1:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org