Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fh6kaszBp3qswebVbtbqo9nsaJw.roa
File: Fh6kaszBp3qswebVbtbqo9nsaJw.roa (raw, json)
Hash identifier: T+n5oiBUlC6tPYOoUqogbBA8K2w5s2Fbj0MBuxqgXgA=
Subject key identifier: 16:1E:A4:6A:CC:C1:A7:7A:AC:C1:E6:D5:6E:D6:EA:A3:D9:EC:68:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B000D4CE380534C1FB89562BD6ECBEBFE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fh6kaszBp3qswebVbtbqo9nsaJw.roa
Signing time: Thu 05 Oct 2023 13:35:53 +0000
ROA not before: Thu 05 Oct 2023 13:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 45.84.222.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:0d:4c:e3:80:53:4c:1f:b8:95:62:bd:6e:cb:eb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 5 13:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=161ea46accc1a77aacc1e6d56ed6eaa3d9ec689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:9f:06:bd:1c:78:8c:c1:58:9e:35:4b:5c:
a3:dd:98:74:6b:dc:f9:c5:db:07:57:aa:77:9e:e2:
ce:53:d7:6d:1f:48:d3:28:7d:58:39:c0:7a:af:3a:
d3:95:fe:44:ac:06:44:66:fb:e3:6d:ed:9a:97:ed:
3e:79:2d:e9:d0:de:2c:21:be:eb:8f:75:c8:44:00:
fc:6f:23:dc:70:60:55:ae:28:fc:72:3d:a1:bf:8d:
a2:c8:70:d4:14:ab:ab:16:6b:fe:9f:13:a0:df:73:
28:d1:1b:c3:cb:b8:5e:08:ed:f8:c1:ac:be:52:7a:
f5:ec:4c:b1:3f:2d:c5:5e:ae:de:e4:f7:b5:a9:f5:
b4:d1:73:26:c6:d8:10:6c:f0:b9:40:58:c1:aa:9e:
fe:d4:91:e7:1e:87:ca:b4:97:4d:fd:95:23:db:69:
e5:af:9a:9c:88:5e:50:d5:2b:6a:db:ef:66:2f:e7:
56:c0:67:17:04:fd:27:4f:2d:f3:67:23:2f:a7:31:
11:4a:e0:c3:d7:10:ac:d1:3c:3d:32:2d:d2:92:3a:
0e:71:fb:04:0d:42:00:10:ea:ac:4b:a0:cc:8e:c8:
01:6b:39:7f:1b:2b:ab:f7:09:c9:41:49:63:87:11:
a1:38:b1:6a:bf:ea:16:a9:14:ea:18:07:4f:b5:53:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:A4:6A:CC:C1:A7:7A:AC:C1:E6:D5:6E:D6:EA:A3:D9:EC:68:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fh6kaszBp3qswebVbtbqo9nsaJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
79.110.50.0/24
87.120.33.0/24
94.156.176.0/24
178.215.237.0/24
193.42.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:12:3a:2e:57:d0:f4:ce:60:b8:c5:09:d5:cb:07:e0:be:5d:
b7:2c:1d:2e:b5:b4:df:3c:26:d0:03:da:d4:f6:d9:b2:a5:1b:
7a:05:c2:59:85:dd:a3:17:44:33:7a:2d:94:61:54:94:9e:97:
74:b9:9d:e0:32:8b:09:9a:a9:ad:64:6b:ea:da:74:4c:5f:f5:
4a:4c:02:8d:9b:ec:b9:d8:f5:7b:c4:4c:fa:d2:9d:c1:fb:b2:
55:b4:6d:9e:a8:4d:e0:b6:3e:63:ea:34:20:06:da:09:3e:0c:
20:d4:f3:0a:2f:38:a6:87:f8:9c:7c:70:d9:1c:73:92:36:33:
11:e5:1b:ae:65:cc:0d:6e:d0:6a:b1:24:13:b2:2b:25:72:90:
48:57:9a:e2:44:c5:83:71:50:33:87:41:36:92:ff:e0:8a:03:
ce:f6:3c:a4:01:60:46:1b:22:af:e9:10:48:5b:c7:a7:a0:14:
eb:42:21:a0:bb:7d:d5:0e:ea:dc:93:1a:93:3f:7a:3e:2a:48:
e3:3e:cd:3f:b4:40:f2:16:65:36:8d:b7:a1:5d:d7:b6:1f:b7:
46:73:df:1c:ad:e1:95:b8:a9:c0:e6:db:a7:b2:f6:cd:58:bd:
b9:a4:df:fe:6b:61:07:72:22:64:1d:4e:fa:5d:2b:e2:51:6a:
c3:46:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 08:06:00 2023 by rpki-client on console-ams.rpki-client.org