Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F0HGlaiIT2pyskTTlo72PHFI6cs.roa
File: F0HGlaiIT2pyskTTlo72PHFI6cs.roa (raw, json)
Hash identifier: 39KlQpnVJWb/fsdYBlZzeeiBwjM9hqyiXuP0jJk/cqc=
Subject key identifier: 17:41:C6:95:A8:88:4F:6A:72:B2:44:D3:96:8E:F6:3C:71:48:E9:CB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192C92E7480E72822BB21DCE19237FE87C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F0HGlaiIT2pyskTTlo72PHFI6cs.roa
Signing time: Sat 26 Oct 2024 14:15:17 +0000
ROA not before: Sat 26 Oct 2024 14:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.253.59.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 05:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:2e:74:80:e7:28:22:bb:21:dc:e1:92:37:fe:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 14:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1741c695a8884f6a72b244d3968ef63c7148e9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:e8:c2:3a:62:80:63:bc:dc:92:5c:da:86:
12:0f:5e:65:2e:e8:4e:86:b0:5e:89:24:88:64:91:
36:eb:ea:13:61:75:93:cb:4c:66:1f:05:c5:82:61:
eb:92:2b:51:c1:b7:ec:04:c7:54:37:48:d9:05:89:
5d:96:80:02:c2:18:6d:92:0b:92:5e:2f:75:12:52:
26:19:e2:6d:1c:f7:6e:fc:a5:d7:77:36:07:75:0d:
bc:5c:a2:57:0b:25:6e:9d:a0:a1:7b:d0:d8:1a:91:
25:25:de:19:de:0a:30:e6:e7:b3:2d:d7:fe:c5:56:
60:16:c3:e3:5e:26:02:af:f3:78:89:99:d7:e6:d7:
7b:42:bf:87:ff:b9:e5:d5:a1:2b:e0:f0:cb:4e:65:
57:cd:87:13:44:46:74:d9:c6:9b:67:8d:d5:e4:d7:
d4:eb:4e:09:51:47:8b:c7:7b:4e:ce:34:7e:b6:69:
a4:f2:4e:bd:0c:73:1e:22:ba:e7:53:32:de:14:60:
fa:06:47:38:ab:f7:45:05:5b:06:40:40:bd:35:ff:
67:44:54:a5:e3:24:89:ff:ae:8e:ec:66:6b:3a:f1:
85:f6:c0:04:c9:5f:bc:4a:14:4e:45:dd:cf:b1:63:
7d:86:cd:4b:e6:98:15:ac:49:43:49:d3:31:d8:de:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:C6:95:A8:88:4F:6A:72:B2:44:D3:96:8E:F6:3C:71:48:E9:CB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F0HGlaiIT2pyskTTlo72PHFI6cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.59.0/24
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
87.120.88.0/24
87.121.98.0/24
87.121.218.0/24
109.206.236.0/24
185.246.222.0/24
193.8.185.0/24
193.168.196.0/23
Signature Algorithm: sha256WithRSAEncryption
95:30:0b:b1:c7:08:ec:e1:4d:b7:b8:45:a9:fd:29:48:c2:2e:
24:30:eb:42:57:f5:32:3d:7c:81:05:c7:17:a5:2a:d6:c7:99:
07:af:b9:95:2d:34:7d:d8:e7:fa:e8:d3:da:2d:50:d4:f4:6c:
c7:f6:3f:f3:c6:2e:22:68:27:db:fa:79:95:d4:4c:ed:c4:ae:
6e:ba:d7:5a:b9:61:05:00:6a:9d:fd:ff:ab:6c:68:4c:af:3a:
a5:5f:1e:5c:19:70:3e:10:c6:bd:37:14:c7:21:d7:3d:fa:19:
1a:b1:27:7a:ec:8d:df:e1:16:05:c0:58:49:5d:b8:ab:e6:54:
ab:ce:37:e9:91:a9:be:6e:52:c4:d0:d1:a0:9c:1a:77:c7:28:
51:12:d1:8d:f3:59:b0:dc:2e:cb:ac:0a:86:f3:cd:dd:5e:41:
b1:2a:2d:60:53:93:e9:72:8c:53:ed:d0:bb:63:20:5f:ff:45:
d2:70:c1:7e:65:2b:be:ba:b1:30:fd:ef:53:03:90:f4:c8:4f:
fb:f8:8d:1f:66:54:f0:60:73:28:02:d0:5f:84:c0:3c:5f:57:
e2:5c:18:58:57:16:1c:66:dc:e7:e0:79:32:bd:3d:ad:38:8d:
03:46:66:09:83:c0:25:aa:03:ad:be:1a:cf:ba:64:95:28:e5:
b4:10:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 07:38:38 2024 by rpki-client on console-fra.rpki-client.org