Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/FAGLIdQHDvq1ieUkZewurmpIYB4.roa
File: FAGLIdQHDvq1ieUkZewurmpIYB4.roa (raw, json)
Hash identifier: MVeszbLX6WteH8cdC3JrBwH0V2nJ4kvxMxDqXbp+HuQ=
Subject key identifier: 14:01:8B:21:D4:07:0E:FA:B5:89:E5:24:65:EC:2E:AE:6A:48:60:1E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EEAECB9127ECE38D773D731566BCD6B73
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/FAGLIdQHDvq1ieUkZewurmpIYB4.roa
Signing time: Wed 17 Apr 2024 07:19:26 +0000
ROA not before: Wed 17 Apr 2024 07:19:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13118
IP address blocks: 46.237.48.0/20 maxlen: 20
77.234.0.0/19 maxlen: 19
85.113.192.0/20 maxlen: 20
85.113.204.0/24 maxlen: 24
87.253.0.0/19 maxlen: 19
87.253.0.0/20 maxlen: 20
87.253.13.0/24 maxlen: 24
87.253.16.0/21 maxlen: 21
87.253.24.0/21 maxlen: 21
93.181.208.0/20 maxlen: 20
93.181.224.0/24 maxlen: 24
93.181.225.0/24 maxlen: 24
93.181.240.0/20 maxlen: 20
95.86.192.0/19 maxlen: 19
95.86.206.0/24 maxlen: 24
95.86.207.0/24 maxlen: 24
95.86.208.0/24 maxlen: 24
95.86.209.0/24 maxlen: 24
95.86.224.0/19 maxlen: 19
95.106.160.0/19 maxlen: 19
109.161.0.0/17 maxlen: 17
109.161.0.0/19 maxlen: 19
109.161.32.0/19 maxlen: 19
109.161.52.0/24 maxlen: 24
109.161.57.0/24 maxlen: 24
109.161.60.0/22 maxlen: 22
109.161.64.0/19 maxlen: 19
109.161.64.0/20 maxlen: 20
217.15.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:ec:b9:12:7e:ce:38:d7:73:d7:31:56:6b:cd:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 17 07:19:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14018b21d4070efab589e52465ec2eae6a48601e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:fc:b6:b5:e2:89:e4:dc:8b:8e:5e:ec:b1:
87:67:fb:0c:7e:3c:de:99:db:9e:f5:1b:93:25:a0:
f2:85:da:39:97:ff:98:d6:69:2f:9e:10:fb:fb:24:
37:32:70:95:9f:ec:22:a3:83:f1:6e:e0:d1:2d:2a:
87:d2:84:aa:a6:dc:24:bf:e0:4e:9c:20:c5:6d:93:
83:b9:5e:c3:22:a3:22:84:ff:b9:bb:4d:86:d2:a6:
59:3d:13:8e:db:f8:cc:9f:e6:b3:6d:49:bf:69:ea:
81:20:40:87:5c:81:df:9d:92:19:7f:e5:ef:11:85:
fa:34:ec:59:1c:56:4f:07:9b:4f:91:45:91:c3:8f:
38:e3:20:0e:70:2a:dc:d8:48:38:f1:a7:96:82:d7:
94:00:4e:57:99:d6:39:ca:03:fd:62:3f:08:3c:ae:
ba:2f:fc:93:0f:12:96:b0:de:ce:9b:bd:1e:36:a2:
01:f1:36:db:18:21:04:4d:48:57:86:52:48:27:c1:
93:3a:08:65:33:34:b2:ce:70:a8:a2:a5:d2:4d:0f:
96:f7:55:e1:0c:77:1d:19:4b:03:4d:5d:2c:c3:28:
6d:19:b3:8a:74:28:85:0d:c8:f9:2c:cf:bb:c9:92:
73:2b:84:ec:0d:8b:1d:3a:85:5b:7e:a3:6b:19:76:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:8B:21:D4:07:0E:FA:B5:89:E5:24:65:EC:2E:AE:6A:48:60:1E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/FAGLIdQHDvq1ieUkZewurmpIYB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.48.0/20
77.234.0.0/19
85.113.192.0/20
87.253.0.0/19
93.181.208.0-93.181.225.255
93.181.240.0/20
95.86.192.0/18
95.106.160.0/19
109.161.0.0/17
217.15.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:15:2a:86:63:8e:bb:b8:e3:2d:26:54:4e:17:81:07:80:9e:
e7:98:a5:6e:b0:d1:bf:cd:3e:65:53:34:76:46:b0:27:3d:5c:
85:ad:f5:0e:b7:de:17:4c:c8:69:55:06:64:e0:d4:3f:7f:06:
14:01:a4:aa:ed:0e:f9:3e:d6:8e:9b:c4:b0:46:a1:59:24:4f:
de:96:26:d8:e9:69:56:c5:96:cd:bb:63:46:8e:97:d4:03:c4:
22:ad:ac:8b:c8:6f:de:b8:ca:c6:22:88:e6:7c:f5:4c:18:74:
f2:4f:7b:21:3d:a8:3b:26:73:57:80:00:c1:e3:81:34:d8:0a:
68:0c:0e:b8:58:34:b1:de:37:70:fd:7c:2b:49:65:12:e5:d0:
7a:44:5e:09:7d:39:60:00:02:90:c5:41:ad:a0:03:e3:32:ac:
ae:53:67:62:41:a1:ad:7e:45:a8:2c:6a:82:88:7f:30:b0:69:
48:99:5a:db:87:f9:3c:70:d1:0a:f0:0a:75:d7:3c:b9:c3:d1:
f3:34:39:e0:2f:d1:f9:26:1e:a3:8a:e7:da:db:2c:95:e1:93:
4d:4b:3d:7a:56:33:ab:5b:51:85:86:64:a5:c4:bd:8c:e0:bf:
2a:49:25:4f:53:a7:d5:4a:38:64:1b:23:a2:71:f4:e3:ca:7b:
b4:7f:d5:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org