Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FTZ1J73GqQUDknE9TcxpC6oLtUg.roa
File: FTZ1J73GqQUDknE9TcxpC6oLtUg.roa (raw, json)
Hash identifier: UtgKutK/ain9L10imRWGToRM3uT8RoA6xmp3l+zdK3o=
Subject key identifier: 15:36:75:27:BD:C6:A9:05:03:92:71:3D:4D:CC:69:0B:AA:0B:B5:48
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192BC1FDA0B127F0DF132D6375043F03F86
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FTZ1J73GqQUDknE9TcxpC6oLtUg.roa
Signing time: Thu 24 Oct 2024 01:24:16 +0000
ROA not before: Thu 24 Oct 2024 01:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 04:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bc:1f:da:0b:12:7f:0d:f1:32:d6:37:50:43:f0:3f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 24 01:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15367527bdc6a9050392713d4dcc690baa0bb548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:62:30:d8:ed:dd:3d:32:90:3c:97:f8:de:
57:10:41:b8:a8:21:82:5d:39:0c:8d:60:61:60:61:
93:06:99:8c:56:5f:4d:a5:76:42:a5:5d:6e:b6:ae:
ef:a1:28:b5:d6:ec:ee:7e:a7:f4:ee:24:8b:92:02:
d0:4e:45:62:45:54:22:fd:2a:df:7b:13:59:47:05:
a8:3d:e9:ae:e3:f4:b5:45:78:77:9e:e8:74:e0:f6:
c1:4c:40:cc:ef:eb:45:d4:a6:2c:05:d3:78:93:64:
ab:d4:1b:7c:df:da:b9:ba:ec:06:69:78:59:e6:bc:
08:75:0f:5b:69:1c:70:58:01:b9:e7:5d:81:b3:3e:
f5:d8:44:f9:21:ab:4d:4b:41:13:3e:80:26:df:fc:
9a:50:0e:c7:43:ee:ff:56:a2:11:8e:2c:92:e2:80:
e4:05:bb:fc:4a:0d:97:c2:58:72:19:4d:dc:8f:2d:
a9:f0:d6:a6:c7:e1:3d:ea:f0:7f:e1:3d:12:57:2e:
46:63:2f:be:0d:fe:8a:19:04:7c:8f:a5:df:6e:4c:
04:29:53:12:78:7b:f9:69:b8:f2:97:2c:dd:eb:18:
18:a8:ef:7a:9a:f5:c9:0c:0a:23:4d:57:31:05:33:
0c:08:59:36:5b:1a:7a:f2:3e:19:b7:6c:e0:e6:e2:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:75:27:BD:C6:A9:05:03:92:71:3D:4D:CC:69:0B:AA:0B:B5:48
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FTZ1J73GqQUDknE9TcxpC6oLtUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
5.231.70.0/24
77.90.42.0/24
77.90.54.0/23
85.118.162.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c4:08:83:ac:6d:b3:df:2e:52:81:93:e0:48:f3:2b:48:eb:
72:de:3d:0d:c6:7d:15:f4:fe:8f:2f:f1:92:54:99:1e:a6:e3:
48:26:3e:d4:8b:74:a0:4d:e2:3f:84:56:e4:05:e7:3a:0a:3b:
c6:52:13:ed:f6:2a:01:a6:aa:94:4f:47:da:08:d5:2a:6d:e8:
a9:9b:62:89:8d:ae:42:b4:37:8b:38:f5:db:95:c6:bc:bc:3d:
23:33:ab:f7:d1:21:8e:75:98:40:23:05:62:06:34:bf:40:2a:
87:c0:1e:8b:1e:01:df:7d:f7:0c:96:d2:b5:d6:37:cb:ce:49:
d0:23:52:dc:50:a6:7c:83:7f:56:d2:a2:e9:f7:fd:25:9a:e9:
bb:93:bd:74:7a:52:cc:de:ed:cf:41:47:f3:1e:87:7e:4f:54:
51:2f:8d:d1:1b:3f:49:c4:0d:d3:2a:fb:80:ec:fd:00:9a:f3:
2a:69:5e:e5:2a:b0:77:90:dc:a1:cb:55:58:dc:54:7d:8a:c7:
55:d5:d4:c4:58:e8:a5:b3:bd:5c:a8:a3:49:0e:33:01:87:9f:
4c:63:14:97:8d:8b:68:5d:ce:02:be:56:5c:a4:88:b6:69:ab:
28:71:7c:c1:7f:45:6a:13:d1:bf:8a:ca:fd:8a:98:7e:6c:a7:
b6:6f:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 05:43:34 2024 by rpki-client on console-fra.rpki-client.org