Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fRKUyBDAUG6MX9VmtcAl0tdpnZ4.roa
File: fRKUyBDAUG6MX9VmtcAl0tdpnZ4.roa (raw, json)
Hash identifier: klVFf3AV9m8m2xQAroYNAQZfTS4DIH+gMBk3V7TiNBQ=
Subject key identifier: 7D:12:94:C8:10:C0:50:6E:8C:5F:D5:66:B5:C0:25:D2:D7:69:9D:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DF23976605D10CC5767B004120A5E085F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fRKUyBDAUG6MX9VmtcAl0tdpnZ4.roa
Signing time: Thu 29 Feb 2024 00:17:48 +0000
ROA not before: Thu 29 Feb 2024 00:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.253.65.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.74.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 19:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:39:76:60:5d:10:cc:57:67:b0:04:12:0a:5e:08:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 29 00:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d1294c810c0506e8c5fd566b5c025d2d7699d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:7d:af:7f:8e:2d:7c:d9:f6:75:ef:e1:ad:
ee:b2:ad:58:4b:d6:27:03:ae:20:1c:64:db:ac:08:
1a:1e:85:9c:fa:4b:75:06:9a:99:c2:16:b8:1f:97:
33:61:37:34:fd:a2:1a:3d:06:05:a9:27:75:5f:d4:
03:e9:96:f8:44:13:ec:0e:ae:ea:a4:c6:31:72:ef:
07:d3:e5:a7:b3:05:2f:6a:d0:59:de:5b:fb:37:9d:
b2:f8:bb:6b:41:7b:9f:a2:f8:30:c8:c0:55:73:45:
78:d1:33:62:63:84:0e:f6:6d:4c:41:c1:fe:60:ed:
b1:46:90:d1:5e:10:cc:d0:a5:8a:a7:02:f8:4e:9c:
6b:59:ff:45:c4:86:8e:90:af:cf:f5:68:24:c4:6c:
d6:a4:9a:22:a4:f8:ae:76:14:2b:70:00:b4:dd:65:
f2:83:db:16:bc:aa:1f:8f:4f:77:5b:8c:8c:e9:92:
30:52:b7:4a:b2:81:e9:cb:26:ba:7b:50:8d:4a:7b:
39:26:0e:3b:24:47:fe:e0:6e:39:28:e9:74:ac:dd:
c9:3d:3d:86:d3:e5:d9:58:46:27:24:b6:4d:52:bb:
3b:1f:5d:11:f6:0e:e0:16:21:6d:06:0e:37:9d:c0:
ca:ca:8b:73:2e:1f:7a:7a:32:e5:33:e0:43:8c:1f:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:94:C8:10:C0:50:6E:8C:5F:D5:66:B5:C0:25:D2:D7:69:9D:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fRKUyBDAUG6MX9VmtcAl0tdpnZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.65.0/24
45.8.94.0/24
45.14.166.0/24
87.120.68.0/23
87.121.61.0-87.121.63.255
87.121.114.0/23
91.92.26.0/24
93.123.74.0/23
93.123.80.0/24
185.252.160.0/23
212.87.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:e7:88:73:b9:03:78:b0:9f:e9:a5:58:20:b3:b2:e7:64:5b:
2c:48:30:5d:91:3d:59:39:46:63:ce:ff:5b:3e:89:1d:a3:3c:
07:82:69:6b:ed:4b:5a:7f:56:e4:8a:f2:52:ec:94:56:7d:f4:
f6:50:97:58:ac:ae:6a:ea:ce:f4:6e:9c:b4:1b:56:9d:68:d3:
6b:90:8b:a1:63:a7:d5:2a:cf:13:3f:07:01:3c:b5:e2:e4:c3:
79:9e:c6:61:e7:88:89:d7:8e:36:c5:b0:60:54:a5:b7:14:b4:
83:ea:cb:be:90:e4:47:33:1f:73:dd:cd:4c:00:5c:a8:6c:0c:
fc:ce:36:b2:68:ec:22:33:29:b5:a1:5f:48:86:a9:7c:98:38:
98:d3:21:32:83:a4:f8:d7:b3:37:ab:0d:f2:80:d4:3f:55:5d:
cc:dd:e2:97:c7:9f:0e:f1:53:00:aa:8a:8f:f5:e5:8f:b1:9e:
f6:8c:d2:eb:45:b5:ab:fa:39:36:5f:f0:04:5f:bf:97:9a:ac:
43:2e:e9:e3:61:57:6a:0e:23:ea:78:e5:09:32:59:40:9b:91:
1c:a8:84:ec:44:d4:c6:c1:53:88:fd:02:d8:5c:c0:f5:71:2a:
4d:c2:1f:60:76:da:b1:cd:58:a7:18:7b:43:42:86:9c:d0:3a:
eb:05:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 21:47:26 2024 by rpki-client on console-ams.rpki-client.org