Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Frk4IVOc8M2u-g20-H_-N5lxik8.roa
File: Frk4IVOc8M2u-g20-H_-N5lxik8.roa (raw, json)
Hash identifier: ZDb+CSzlsO7OtoMIJeU7FO6cwCRSwczBw9/tGgJYeBU=
Subject key identifier: 16:B9:38:21:53:9C:F0:CD:AE:FA:0D:B4:F8:7F:FE:37:99:71:8A:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193D49E95779303255D1BD5342ED7CA9346
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Frk4IVOc8M2u-g20-H_-N5lxik8.roa
Signing time: Tue 17 Dec 2024 12:36:22 +0000
ROA not before: Tue 17 Dec 2024 12:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:9e:95:77:93:03:25:5d:1b:d5:34:2e:d7:ca:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 17 12:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16b93821539cf0cdaefa0db4f87ffe3799718a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:17:30:30:df:08:0a:09:29:2f:4f:95:1d:
68:c8:04:13:cd:3f:1d:70:b1:cc:99:6e:30:c8:e8:
1b:2f:78:dd:ba:df:e0:2b:79:81:b3:be:45:31:c9:
ea:e3:02:89:ca:63:26:89:11:ac:c6:e0:16:79:96:
c9:66:14:c7:87:aa:d5:a5:7f:32:12:1c:cb:d7:ff:
2c:99:61:72:2c:61:f0:3c:36:a1:44:19:f2:ac:fd:
92:67:49:75:a2:0f:e4:26:2f:c3:9e:9d:19:a2:1e:
6f:c7:c5:e4:ec:39:3f:04:94:d3:cc:c6:0b:f6:a0:
01:4e:db:1f:a6:a5:38:d4:bd:68:dd:8a:9a:b7:f4:
8e:91:49:22:50:87:ef:9d:de:fc:e2:51:39:3c:07:
f5:f5:a2:34:84:c1:a4:92:1d:33:e7:5d:1f:77:1d:
ca:78:76:88:32:a2:a1:96:4d:92:cd:1a:f7:c3:70:
0b:a2:73:5c:45:33:f9:be:6b:fc:69:53:48:0e:5e:
52:e6:f5:98:d1:0d:63:64:03:3c:d2:62:a6:8d:50:
72:08:39:17:e3:7e:28:ff:d0:34:2a:45:a3:07:df:
ac:80:e6:6a:ce:bb:22:20:df:c8:b2:29:df:85:0e:
42:63:13:4f:4c:97:c7:3f:6e:c9:5f:7e:77:c6:b6:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:38:21:53:9C:F0:CD:AE:FA:0D:B4:F8:7F:FE:37:99:71:8A:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Frk4IVOc8M2u-g20-H_-N5lxik8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.103.163.0/24
94.249.138.0/24
94.249.148.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
95.215.32.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
21:22:a5:fb:9b:12:35:c6:ca:43:a7:a6:fc:17:f7:80:de:a6:
c3:6a:bc:fd:22:6a:fc:53:08:66:48:73:c0:83:a7:1c:6b:c9:
69:3e:c2:fe:7a:80:e9:dd:61:bd:44:01:36:76:4a:06:c0:c7:
3d:87:a3:22:6d:16:89:68:95:b9:7a:c7:fe:8a:1e:48:8f:90:
d7:5b:7d:fc:90:98:d6:79:dc:6c:19:b4:a0:fc:a8:a3:1f:e8:
76:9a:c3:0c:d5:d0:19:55:a1:bc:6b:d9:85:4e:86:b0:47:7f:
fe:15:4c:ad:d1:1e:e2:35:be:34:26:51:ef:18:36:40:a2:1f:
84:4e:5c:44:09:93:1e:5d:65:64:bf:59:bc:52:6f:30:31:35:
2a:e1:7a:54:19:3d:ff:dd:ec:2d:17:e2:b6:70:46:d1:7b:84:
ea:c2:27:71:2d:7f:99:4c:10:dc:9e:2f:b8:5b:cd:29:3c:9a:
b6:57:8b:7d:ee:d6:ac:eb:fb:d0:1f:ae:bf:6f:6b:85:dc:b2:
19:59:a3:68:db:75:61:83:d2:b5:ff:7a:5a:d9:3c:0d:aa:8c:
62:08:46:be:a9:60:65:91:40:75:6c:a3:44:22:f7:6e:6a:a5:
1e:8e:d2:5d:f0:27:87:ad:b2:fc:93:8a:16:84:51:45:af:bb:
b6:49:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 03:57:41 2024 by rpki-client on console-fra.rpki-client.org