Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FfuaAKAHpEJKMCzItPMgcLRGEHE.roa
File: FfuaAKAHpEJKMCzItPMgcLRGEHE.roa (raw, json)
Hash identifier: vdiFSoGMut+be8cEQtieuCtnHF5o2pQZPYc+mMDfQVI=
Subject key identifier: 15:FB:9A:00:A0:07:A4:42:4A:30:2C:C8:B4:F3:20:70:B4:46:10:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DEEEE434E2A04920C6D149DC1677E7DD2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FfuaAKAHpEJKMCzItPMgcLRGEHE.roa
Signing time: Wed 28 Feb 2024 08:56:48 +0000
ROA not before: Wed 28 Feb 2024 08:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:ee:43:4e:2a:04:92:0c:6d:14:9d:c1:67:7e:7d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 28 08:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15fb9a00a007a4424a302cc8b4f32070b4461071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:4c:67:31:64:f9:05:9f:bb:10:6a:b8:79:
87:71:62:0b:c5:61:1d:a8:f6:94:c0:fa:b9:52:23:
38:3e:68:31:8a:78:f9:6f:d1:1b:07:21:23:0a:2b:
12:78:02:a0:60:de:ac:78:e1:0b:91:47:d7:ec:d8:
1f:63:15:10:4f:8c:12:14:4e:16:53:21:93:1c:ca:
a4:f4:6a:54:35:bb:10:78:92:f8:1b:98:73:fe:e1:
61:72:a9:da:44:e1:9b:79:8c:83:58:3f:88:70:bc:
28:18:7a:c6:48:fd:3d:08:56:50:ba:c8:77:2d:60:
66:0a:74:cf:3a:f8:e5:b5:0e:d2:b0:03:60:af:85:
66:2a:44:82:9f:7b:b9:4e:bf:ea:3c:6c:c1:9c:79:
3b:82:2d:92:50:0f:a9:81:17:1a:f7:c4:01:5b:5b:
29:30:9d:b4:4a:1d:84:43:1c:2d:44:7d:93:70:ff:
db:44:8e:65:3e:3a:6b:56:77:02:3a:bb:f9:da:d3:
f6:07:90:0e:9b:9c:cb:22:08:46:20:1f:c5:bf:c6:
2e:82:85:ac:16:c4:32:31:42:a1:6f:de:25:41:aa:
27:59:84:72:d9:e4:62:86:3f:5c:fe:90:65:2c:95:
c4:3c:35:0a:d4:8c:97:42:8e:6e:30:20:be:dd:f8:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:9A:00:A0:07:A4:42:4A:30:2C:C8:B4:F3:20:70:B4:46:10:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FfuaAKAHpEJKMCzItPMgcLRGEHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f3:aa:4d:6d:07:fe:c6:4b:43:0b:c7:c1:df:61:8b:c8:60:
f9:24:03:6f:1f:65:ca:ca:85:52:62:ba:e9:50:74:1c:a8:b7:
90:e8:a5:7b:1e:91:76:c9:6e:3d:50:9e:9c:4e:cd:e6:68:73:
24:63:2e:ca:ef:b9:83:b1:3c:43:f1:82:b1:fa:10:29:56:8d:
32:93:0d:ad:83:49:97:69:72:46:9a:13:7b:dc:dc:9d:27:9e:
cc:04:64:11:5d:8d:62:ea:8c:d6:32:76:ff:e1:16:85:74:cb:
2f:3e:17:4f:06:4f:22:69:85:cf:5f:0e:ca:06:c2:55:0a:d4:
b1:ab:9b:23:71:84:07:7f:aa:77:c6:cc:3f:e6:35:ea:41:d5:
8c:ae:16:d7:a4:9c:27:51:de:43:93:13:e4:e3:4e:cf:59:ac:
20:4d:fb:d1:2d:c1:ac:2c:73:0f:85:22:c0:38:56:b9:c3:6a:
4b:e3:d1:71:4f:f4:b4:29:06:a1:06:b5:36:4b:65:a7:11:05:
ff:15:70:51:13:87:5f:c2:aa:c0:f3:85:66:a9:67:6b:0b:39:
9c:52:55:d4:d4:6d:ef:fe:38:77:39:86:be:76:19:9a:e0:95:
4f:f5:b1:02:bc:68:14:72:44:c4:43:05:73:0f:75:b7:79:fd:
f1:9d:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:15:23 2024 by rpki-client on console-ams.rpki-client.org