Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fTqiDsb1NCiVbJpogFXqmjvSVKI.roa
File: fTqiDsb1NCiVbJpogFXqmjvSVKI.roa (raw, json)
Hash identifier: EggKtpV/3lvDTUtNICw+zhV9xmbxhs1fmGdYgmcrdok=
Subject key identifier: 7D:3A:A2:0E:C6:F5:34:28:95:6C:9A:68:80:55:EA:9A:3B:D2:54:A2
Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial: 0185708CCBBA3A365EC3D30ADA2674852ABB
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fTqiDsb1NCiVbJpogFXqmjvSVKI.roa
Signing time: Mon 02 Jan 2023 03:35:53 +0000
ROA not before: Mon 02 Jan 2023 03:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44881
IP address blocks: 185.117.30.0/23 maxlen: 23
93.94.232.0/21 maxlen: 21
109.68.208.0/22 maxlen: 22
2a05:ce80::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 17 Aug 2023 18:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:cb:ba:3a:36:5e:c3:d3:0a:da:26:74:85:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Validity
Not Before: Jan 2 03:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d3aa20ec6f53428956c9a688055ea9a3bd254a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:ff:60:15:25:a5:79:ae:fa:31:a3:35:32:
37:5a:14:22:50:71:d9:b8:89:ed:35:8c:d1:6b:9b:
ef:75:29:ed:99:08:96:fd:6a:3b:79:1f:4e:4a:e1:
90:90:fa:69:86:d2:9a:ba:4f:91:f4:9f:64:53:79:
aa:5c:ca:aa:b9:a0:b2:2c:8d:fa:ef:77:b1:79:a9:
3c:b5:1a:2c:cc:91:17:54:9d:80:fb:b9:64:7f:9e:
08:1b:4d:19:fe:f8:16:0c:9b:25:f3:f3:cf:1b:9b:
d1:83:c6:dc:d3:80:9e:da:c3:99:e6:d5:a0:e2:fd:
96:69:c3:1a:fa:5b:d0:5a:dd:53:4a:03:f3:f7:e7:
9f:07:a6:c8:0d:4d:a1:ce:14:02:55:9d:7d:9d:ac:
0c:f8:e0:81:6c:c6:27:f1:f4:10:f9:a5:25:e6:d2:
08:ca:2a:d3:89:58:47:0f:a6:5d:6a:b6:f8:c0:4f:
0a:b0:f0:c8:7f:ae:eb:5e:ff:6e:31:37:02:79:b8:
83:59:c2:2c:ee:73:dc:ef:28:25:59:57:46:4d:6f:
76:06:d6:b6:c2:ca:02:c5:41:28:c0:80:10:db:79:
fe:82:64:6e:69:15:b2:e7:43:c2:ee:6d:08:98:79:
b2:9e:2e:7e:5b:3e:03:54:5a:c6:2f:66:89:da:c1:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:A2:0E:C6:F5:34:28:95:6C:9A:68:80:55:EA:9A:3B:D2:54:A2
X509v3 Authority Key Identifier:
keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fTqiDsb1NCiVbJpogFXqmjvSVKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.232.0/21
109.68.208.0/22
185.117.30.0/23
IPv6:
2a05:ce80::/36
Signature Algorithm: sha256WithRSAEncryption
6d:2c:fe:8e:0e:c6:eb:15:a7:2f:cc:9f:1e:d9:ed:9f:4e:e6:
bc:98:58:01:36:93:ee:b3:92:95:a3:bc:70:81:b1:af:85:1c:
6b:de:57:18:d7:45:82:28:dc:57:86:34:73:42:62:e4:b0:41:
2b:5c:dd:21:89:40:da:41:02:d6:f4:8a:53:1a:0a:ad:5b:a9:
32:2f:56:b5:b7:9c:4b:52:6e:e3:b0:09:68:85:52:bf:59:52:
a1:05:ce:b8:0c:fe:dc:77:38:2e:5b:87:41:3c:d5:78:8d:e8:
a8:40:33:c0:78:8a:1e:d0:3b:3a:74:fe:a6:1f:96:ce:06:9b:
0e:85:8e:df:5c:13:6b:05:5d:90:79:de:35:9f:c5:a8:d0:d9:
ea:67:2c:e0:95:bf:95:13:64:1a:2c:96:34:a9:3d:6f:c7:80:
2b:9d:f0:25:7b:02:89:55:24:b6:dc:e3:80:c0:d8:c1:6d:16:
50:31:14:63:0f:78:34:49:d6:06:a0:35:53:12:cc:e6:d1:a2:
38:49:7b:2f:de:0e:2b:01:4c:ce:ff:01:d8:57:25:61:6a:97:
4b:11:c4:38:34:8c:2a:df:4b:6a:fb:4a:89:f2:17:5b:2b:11:
dd:5e:51:59:ef:0d:31:7f:71:20:0c:b3:3a:8e:80:6e:71:8d:
f3:9b:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:23 2024 by rpki-client on console-fra.rpki-client.org