Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FVy3-9zzblD8jznSW3hN65anlRU.roa
File: FVy3-9zzblD8jznSW3hN65anlRU.roa (raw, json)
Hash identifier: 0IPpP2B4IVy7Kcc9Rb6U/5WhW15AHmGFNujIpBsm+GY=
Subject key identifier: 15:5C:B7:FB:DC:F3:6E:50:FC:8F:39:D2:5B:78:4D:EB:96:A7:95:15
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C25FDD610DDE4064C5A64CF67509A1212
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FVy3-9zzblD8jznSW3hN65anlRU.roa
Signing time: Fri 01 Dec 2023 15:27:21 +0000
ROA not before: Fri 01 Dec 2023 15:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216181
IP address blocks: 94.156.6.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:fd:d6:10:dd:e4:06:4c:5a:64:cf:67:50:9a:12:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 1 15:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155cb7fbdcf36e50fc8f39d25b784deb96a79515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:7e:61:c4:c5:24:96:30:7b:5a:76:95:7d:
2a:c2:bf:e1:f1:a4:09:c4:6a:c2:ea:c5:cb:be:9f:
2c:28:11:ef:56:1d:71:e1:a8:42:4f:00:76:93:5e:
b2:7e:b3:23:12:95:16:17:27:82:e3:65:dc:ae:79:
1d:03:9a:56:6c:ae:5a:d6:24:f0:12:dd:2a:9d:48:
a6:99:e2:92:4c:3d:4d:36:85:d2:14:38:20:5b:e4:
a8:07:46:f8:13:de:f5:06:81:bf:0c:4c:01:bf:df:
ee:ab:50:1f:d6:12:a8:0e:9b:d0:bb:d5:e6:a4:61:
de:d1:9b:a4:3c:29:1f:dc:29:16:4d:64:11:9c:6b:
00:31:0d:b6:43:d8:c7:96:f5:4f:bf:30:23:8e:85:
c5:ed:55:37:8a:38:15:de:7c:8b:4a:75:96:49:9d:
ef:b6:22:8d:18:4e:a3:8f:f3:fe:72:7c:fa:4d:f4:
df:da:bf:eb:6d:c0:c7:54:32:e7:1c:8a:f7:78:43:
69:a0:37:5c:17:3f:c4:46:8d:4f:1b:75:ba:89:b8:
34:2e:7c:4c:59:b9:1b:cc:33:ef:e5:47:99:52:ed:
17:27:73:f9:27:6b:19:7a:44:8d:e1:1a:41:51:8c:
52:87:b5:1f:66:19:09:c9:5a:eb:c9:9a:73:3a:c7:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:B7:FB:DC:F3:6E:50:FC:8F:39:D2:5B:78:4D:EB:96:A7:95:15
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FVy3-9zzblD8jznSW3hN65anlRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
87.121.220.0/24
94.156.6.0/24
194.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0e:58:6a:ed:be:4f:04:59:4c:0c:8c:c1:08:23:d2:eb:ea:
d1:41:30:8b:d8:e7:74:36:0d:05:6a:38:c9:88:e7:94:c2:f4:
51:ac:bf:14:f8:86:77:e1:24:e7:fb:6c:54:79:fc:f1:4c:75:
dd:3e:72:24:c2:19:c3:7e:d6:75:80:5c:f9:13:b1:a7:c6:87:
e6:fd:ce:be:3f:07:ff:4b:22:ae:33:83:c7:6b:30:cd:db:5c:
a1:41:63:32:2b:9a:c2:2a:98:39:81:b4:04:66:eb:7e:ff:34:
8a:a9:b6:10:2c:fb:e0:03:fa:af:6f:5c:01:9b:bb:ae:fd:cc:
25:09:c4:4b:f5:6d:41:00:8c:de:a9:eb:f6:43:72:61:b9:c2:
e2:ad:18:05:93:06:98:38:35:a7:f4:c9:fe:6f:7b:0b:6c:0a:
42:e9:43:ed:cb:0f:ba:6b:44:6d:94:4c:1b:75:66:cd:ad:d0:
2a:63:18:5f:57:a3:c3:1e:43:bc:fc:1b:62:b5:7a:a8:dd:68:
af:7c:88:70:da:e4:77:97:c8:1c:cf:1e:89:15:b3:72:45:be:
19:5a:66:df:6c:11:b1:8b:07:ad:6a:57:37:88:a6:f9:0f:eb:
a3:b2:ec:bf:8b:22:e4:da:20:b5:e0:ef:78:c9:4e:66:d2:9a:
6e:3a:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org