Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FD4Q1woh2g3ASB65gZBNT0HI454.roa
File: FD4Q1woh2g3ASB65gZBNT0HI454.roa (raw, json)
Hash identifier: D4xjVjVSOwviqdho3h8yXA8Sa/ZaJV44jMdESlO62oc=
Subject key identifier: 14:3E:10:D7:0A:21:DA:0D:C0:48:1E:B9:81:90:4D:4F:41:C8:E3:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189977532CE75A016ABA4F42AFCF44019B9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FD4Q1woh2g3ASB65gZBNT0HI454.roa
Signing time: Thu 27 Jul 2023 13:06:27 +0000
ROA not before: Thu 27 Jul 2023 13:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
88.218.76.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 08:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:75:32:ce:75:a0:16:ab:a4:f4:2a:fc:f4:40:19:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 27 13:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143e10d70a21da0dc0481eb981904d4f41c8e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0a:a3:9b:54:70:88:50:0b:57:07:bf:3d:21:
64:9f:2c:3a:52:ae:6d:f5:cc:f3:e4:5d:c3:21:fa:
0d:2a:e0:d6:63:e3:30:78:c9:d2:eb:27:b8:2a:29:
44:b6:a7:8d:73:ab:8c:36:d8:e2:da:1e:83:7c:0b:
81:81:2b:4b:fe:a3:c8:3f:a9:8b:2f:89:35:07:b2:
10:f7:ee:b5:4e:fe:68:41:81:6a:b8:66:fe:bb:67:
ae:ff:67:6d:30:bb:c5:d4:93:71:a9:17:34:3a:8f:
6a:88:da:84:7d:51:86:cf:d0:9b:a7:4a:e4:f2:52:
ec:a1:da:eb:e3:d3:88:ac:ab:0b:9d:3e:e0:db:9c:
e0:9c:d8:10:94:82:a7:e6:4a:be:24:bc:6c:07:83:
a2:55:56:42:13:db:33:44:3a:7f:c6:03:63:00:00:
d2:54:88:22:15:8c:31:75:44:31:b2:4c:1a:a8:2a:
e3:3e:9c:0d:2e:fd:fc:00:46:3a:fb:8c:8c:7c:56:
1c:db:d8:9c:de:d6:80:3b:03:b5:0a:80:90:73:01:
38:91:2f:3b:2d:6a:17:c5:5a:c5:a1:71:b9:d0:36:
3d:f1:55:c0:94:a5:49:c4:b6:18:99:f1:0e:e2:a1:
97:3c:39:24:06:d3:6c:c6:01:ea:39:dd:84:93:36:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:10:D7:0A:21:DA:0D:C0:48:1E:B9:81:90:4D:4F:41:C8:E3:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FD4Q1woh2g3ASB65gZBNT0HI454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.36.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
87.121.98.0/24
88.218.76.0/22
94.156.79.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8b:52:e4:d0:eb:fb:40:4b:f8:e8:9d:0d:39:c6:32:73:4a:
0c:3f:96:d4:88:04:53:6f:3f:74:fe:b7:34:24:c3:b7:f2:de:
9a:d3:c6:52:01:4a:03:c2:7a:44:1d:20:6e:d5:92:64:0a:0a:
78:1f:1b:55:60:6c:1d:3b:63:4f:7a:c2:03:b3:bd:13:62:d1:
88:3e:75:47:8a:2a:80:e7:00:e2:b6:c5:33:1f:e6:2e:90:30:
d9:ab:f2:f7:e0:b7:0b:4e:c9:54:50:09:e8:26:6c:1e:b7:2b:
ac:8c:c8:26:8a:25:f4:22:05:d8:4b:ef:9f:4e:ae:1f:59:ff:
f5:c6:80:dc:e7:de:59:7a:fb:77:8a:3c:c0:ac:ba:e7:21:53:
b2:c9:29:05:f0:6f:30:da:bc:e4:4d:10:1f:92:9e:cc:a6:cc:
7f:5d:82:63:ab:66:fd:05:2e:d1:bf:53:68:c8:53:9a:13:23:
e7:1a:2c:7f:7d:3f:91:f5:e7:7b:30:e9:71:5d:f3:60:58:60:
32:e3:6e:84:6b:1b:ed:e6:17:71:a7:53:d9:ef:a3:0d:db:fe:
0c:ce:78:52:12:af:e4:95:4d:2e:3d:cf:d7:cd:fa:64:bb:2f:
f4:2e:96:63:04:22:02:80:d4:4a:f2:88:bc:74:5a:d6:17:cf:
76:ca:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:02 2024 by rpki-client on console-fra.rpki-client.org