Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fe4tCmdtB46D7P91NnayycynKqE.roa
File: Fe4tCmdtB46D7P91NnayycynKqE.roa (raw, json)
Hash identifier: tPNjwthTQUrsZY5URr9eiURmDr9/cdEdVTnb/R6ab0Y=
Subject key identifier: 15:EE:2D:0A:67:6D:07:8E:83:EC:FF:75:36:76:B2:C9:CC:A7:2A:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FC08EED13FDD21A74CD2047C974D16A25
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fe4tCmdtB46D7P91NnayycynKqE.roa
Signing time: Tue 28 May 2024 18:55:43 +0000
ROA not before: Tue 28 May 2024 18:55:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2.58.95.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:8e:ed:13:fd:d2:1a:74:cd:20:47:c9:74:d1:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 28 18:55:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15ee2d0a676d078e83ecff753676b2c9cca72aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:b7:5b:3e:a2:6e:9a:23:55:8d:06:42:c6:
c9:5e:c2:92:cd:a7:c3:d4:a0:12:e0:a8:32:d1:4f:
19:6c:62:0b:fc:c1:52:24:f0:d0:55:4e:e7:11:45:
b3:ba:4d:55:6a:a1:8e:02:01:4e:24:b1:83:70:7c:
88:36:e0:97:16:c0:09:67:41:18:13:55:44:62:95:
dc:61:40:d5:81:57:17:57:bb:91:38:d3:e8:62:fd:
12:1e:bc:49:8d:73:97:eb:4f:66:f7:e6:84:b6:1c:
88:b4:d9:02:20:30:32:14:19:52:5c:a0:a6:f3:3b:
51:e4:c1:76:e6:ee:a6:cd:a4:f3:08:4b:10:2e:86:
ae:6b:bd:41:8a:7f:ca:d4:a3:ab:7c:35:a7:8e:3e:
91:9e:91:98:21:da:2a:dd:00:56:07:52:80:5f:c0:
6c:e7:bc:d0:0b:26:5e:d7:d7:e0:42:41:75:10:6d:
8c:ee:e6:be:2a:56:b6:49:9a:f0:c6:2d:f5:c8:82:
5c:1f:3c:09:fb:fa:82:23:4e:a0:ed:00:22:14:50:
41:b5:25:6d:ba:52:4b:69:86:a5:74:85:59:89:62:
08:ab:6b:ed:ee:2c:0e:f3:62:ea:d2:e1:32:dc:07:
4d:2e:1e:7a:c6:a2:65:d1:1f:b2:4c:d2:02:8a:d3:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:2D:0A:67:6D:07:8E:83:EC:FF:75:36:76:B2:C9:CC:A7:2A:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fe4tCmdtB46D7P91NnayycynKqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.128.96.0/24
45.128.232.0/24
84.54.51.0/24
87.121.58.0/24
87.121.69.0/24
87.121.105.0/24
94.103.124.0/23
94.156.10.0/24
141.98.4.0/24
147.78.102.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:fa:ed:a2:9c:ea:23:27:ac:47:7b:bf:4c:d9:f9:88:fd:
19:86:c6:68:00:3f:db:a9:46:ef:73:32:c7:ef:32:48:56:32:
9c:1d:3b:a6:4e:2a:df:16:b2:09:c0:06:27:cf:0e:47:cb:d1:
98:7d:e5:50:95:e7:9a:f5:59:2b:a6:06:24:ce:b9:c4:46:01:
9e:7f:f5:db:0f:04:ee:b4:66:cf:8c:9f:25:fa:a3:d7:af:1d:
0e:e7:5d:e2:52:96:73:ba:47:5c:20:18:f7:41:49:76:4d:62:
57:2a:22:f0:fa:d2:52:6c:f0:00:65:c7:14:3f:a8:ac:2b:85:
11:0b:ee:6d:5e:51:2f:02:69:7b:5b:72:88:9c:c8:55:87:4a:
39:ef:93:0d:6c:3d:21:ee:18:e7:78:9f:e5:3b:90:dc:ae:26:
be:4d:dc:1b:de:79:1d:a4:05:f9:7c:c6:83:9c:e9:c1:2e:4d:
cd:ed:d7:a3:45:3f:cf:c8:4d:fa:86:b5:da:23:69:b8:4f:11:
8f:7d:86:10:7b:bc:b2:6f:8d:74:f8:48:82:ff:a5:88:5a:44:
d3:82:36:fc:58:5b:76:03:ff:05:0b:3f:ed:43:b2:87:6e:91:
7a:5e:4a:1c:9d:e0:cb:de:81:e4:a8:1c:b0:a4:67:23:ac:be:
53:0b:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:28 2024 by rpki-client on console-ams.rpki-client.org