Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fsvz4A9i7g3EdkU_vtN_b7K1q8Y.roa
File: Fsvz4A9i7g3EdkU_vtN_b7K1q8Y.roa (raw, json)
Hash identifier: 1rUlMqhanFjSLVESiot/zv6WWG2/LxhJ0dboac4wfTk=
Subject key identifier: 16:CB:F3:E0:0F:62:EE:0D:C4:76:45:3F:BE:D3:7F:6F:B2:B5:AB:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0D321179D09198EC498C966E07BB1318
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fsvz4A9i7g3EdkU_vtN_b7K1q8Y.roa
Signing time: Mon 15 Jan 2024 12:56:41 +0000
ROA not before: Mon 15 Jan 2024 12:56:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:32:11:79:d0:91:98:ec:49:8c:96:6e:07:bb:13:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 12:56:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16cbf3e00f62ee0dc476453fbed37f6fb2b5abc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:53:6a:77:49:17:6e:a5:12:2b:7f:f1:95:
31:e6:d9:db:cb:b6:25:7d:e8:bb:79:34:92:ea:ae:
b1:a7:36:e0:ae:b9:ff:1d:79:5b:d0:13:a0:6c:7b:
00:22:6d:b8:48:d2:bb:c7:ad:3d:fe:b0:27:f1:be:
db:f9:b5:3a:bf:22:43:40:cd:40:8d:41:b2:4a:e8:
3a:c2:8f:87:20:c1:02:56:d7:31:3f:a6:32:28:c7:
74:b8:86:46:f8:46:78:a4:6a:8f:12:e3:88:35:d3:
0d:52:5e:00:ac:63:78:b7:1d:2e:96:cc:3c:9b:1b:
ea:cb:0a:68:57:d9:30:fe:b8:e3:3c:6f:a8:a8:2d:
3f:9a:c1:ad:2f:c0:8b:a0:39:76:c9:63:e9:c5:c2:
19:af:e4:16:61:3a:d1:3a:45:bb:e7:78:6a:1d:cb:
64:2b:93:0c:c8:ea:91:6b:88:59:61:25:c3:05:c3:
3f:f1:99:17:61:2e:62:23:48:a2:74:dd:e4:41:d4:
6a:10:d7:31:c2:38:42:a0:9d:e9:81:35:78:ee:eb:
d7:33:a3:ea:bb:b4:32:d1:a2:8e:85:e7:43:26:cf:
c2:3f:3f:cd:f5:c6:e3:cb:92:f7:51:f2:33:1a:7a:
e8:51:72:76:28:b0:f4:b2:7c:e7:42:28:7b:87:b5:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:F3:E0:0F:62:EE:0D:C4:76:45:3F:BE:D3:7F:6F:B2:B5:AB:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fsvz4A9i7g3EdkU_vtN_b7K1q8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.226.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:ef:76:16:9c:94:4f:88:7a:c6:4d:90:cf:e5:92:34:0e:
a4:87:fc:9d:b8:27:b0:df:e5:3b:30:ad:7a:4f:42:be:b0:02:
d1:09:bb:27:6b:f1:4f:21:b0:65:27:9a:b0:02:a0:e4:eb:a8:
a7:30:e9:a1:66:cb:70:4b:b2:a9:75:7e:ff:38:ba:a7:bf:60:
ac:2c:83:4e:f7:c4:f4:c5:9a:a2:c7:28:19:0b:67:e2:f4:45:
05:48:0f:27:d0:b7:43:81:b8:05:4c:28:77:95:b5:b1:4b:07:
82:f9:37:f3:b0:5f:4f:50:27:35:8f:8b:01:42:fc:5e:4e:1f:
12:7e:0a:14:c3:e7:13:d9:d5:08:51:ef:24:12:8c:3f:32:7e:
a6:db:5f:56:55:5d:be:a8:bd:98:84:a4:9a:25:51:fd:15:56:
40:00:32:54:56:f6:00:a4:2a:43:55:05:c3:dc:4a:9e:e8:35:
40:05:5f:a7:c5:29:f3:aa:cc:f2:6a:45:a5:7b:92:e4:82:d9:
ce:92:97:eb:84:ef:d0:50:2b:00:b6:b7:91:72:2f:72:42:8a:
ca:61:78:ff:01:35:58:29:63:46:96:7a:0a:d9:ae:3b:db:41:
b7:7a:12:00:13:71:7d:77:1f:b1:05:95:fd:7e:be:58:b7:c5:
c1:86:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:14 2024 by rpki-client on console-ams.rpki-client.org