Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/FaPyi7zv55XWcq2xX3A8T9ll6Vg.roa
File: FaPyi7zv55XWcq2xX3A8T9ll6Vg.roa (raw, json)
Hash identifier: WhHgb4lLOge4fGItwrPDD6hAwwM/uUF3pawN19zJZPE=
Subject key identifier: 15:A3:F2:8B:BC:EF:E7:95:D6:72:AD:B1:5F:70:3C:4F:D9:65:E9:58
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA688DF04AABEF3DAF41F42EB1D58AC
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/FaPyi7zv55XWcq2xX3A8T9ll6Vg.roa
Signing time: Sun 01 Jan 2023 18:44:45 +0000
ROA not before: Sun 01 Jan 2023 18:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 45.138.84.0/22 maxlen: 24
193.36.116.0/22 maxlen: 24
45.133.192.0/22 maxlen: 24
141.98.212.0/22 maxlen: 24
45.146.220.0/22 maxlen: 24
195.80.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:88:df:04:aa:be:f3:da:f4:1f:42:eb:1d:58:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15a3f28bbcefe795d672adb15f703c4fd965e958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:f4:ce:0a:f1:d7:85:c2:76:db:0a:b7:13:
66:59:53:bd:7e:15:0c:60:c7:86:4a:55:26:a0:4d:
95:29:f4:2d:a3:23:b8:e9:ec:a9:91:e1:62:59:bc:
c9:68:6a:9a:e4:ed:e3:25:40:1f:b2:9b:74:a8:9b:
e7:97:58:de:f9:64:d9:b5:93:61:3c:fc:93:b4:82:
a0:d0:75:b9:f1:70:38:96:76:a0:e9:0f:a5:bd:d7:
3a:93:5d:fa:6a:99:ee:bf:79:e5:1d:3d:ab:93:f7:
c0:b5:8c:7e:a5:8c:bb:6c:0a:52:d5:a3:8b:b5:62:
6d:17:2f:ca:b6:c0:dc:da:0e:70:01:af:bf:3c:fd:
e9:b4:bd:39:df:8c:a2:e2:48:c8:c8:d7:82:0f:bc:
fd:1c:68:b0:05:5c:fe:20:20:56:2b:45:11:5e:12:
a1:f6:a6:7b:1b:28:b8:00:30:7a:de:c7:39:45:ed:
96:73:63:c8:8d:cc:c1:55:48:29:71:8b:15:33:a8:
17:95:d3:55:fa:3a:a5:78:ae:bb:49:cd:09:cf:4c:
08:8e:ce:c3:48:93:49:31:84:12:9b:38:a8:d8:61:
c4:26:09:12:3f:e5:2e:72:2d:d0:56:3f:41:94:2b:
0d:06:be:80:69:30:12:74:e3:36:38:67:55:a8:c3:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:F2:8B:BC:EF:E7:95:D6:72:AD:B1:5F:70:3C:4F:D9:65:E9:58
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/FaPyi7zv55XWcq2xX3A8T9ll6Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.192.0/22
45.138.84.0/22
45.146.220.0/22
141.98.212.0/22
193.36.116.0/22
195.80.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:cf:57:a9:63:57:1f:a6:36:52:42:2d:92:4b:82:92:0e:91:
ee:a0:52:bf:ad:05:87:e8:b6:91:7e:91:ae:0e:a9:84:33:dd:
5e:cf:17:0d:56:3a:69:b5:6a:b3:8c:6e:27:16:08:dc:d1:59:
84:0f:3f:4b:04:4a:68:e4:78:16:43:4d:a3:e1:bb:2b:3a:f7:
be:1d:c4:27:9e:e0:2e:b0:ae:2d:fe:70:ce:ee:81:40:6f:22:
32:cb:b2:e4:66:d6:35:e6:a4:b1:d6:3c:05:01:5b:64:59:fa:
b3:3c:3c:fa:0f:9e:8b:05:2b:80:c6:d2:a5:d1:2c:6d:dc:fb:
5d:53:a8:d7:ff:22:f3:8a:61:e8:28:e5:1e:e2:84:e4:cf:69:
11:d3:ee:c7:06:c1:71:f9:13:2b:88:14:26:e8:1e:7a:a2:e3:
4b:e4:42:2a:25:a5:cc:ff:50:b6:df:0f:b1:99:1c:0a:f9:68:
dd:00:c5:d4:71:f8:52:e0:93:73:4c:78:46:58:1d:7c:45:da:
d2:89:c3:7f:87:b5:be:4a:2f:d5:d1:3c:56:dc:71:7e:a4:98:
3c:da:80:26:e5:a5:1a:03:d5:c5:19:b8:0a:55:41:b0:ca:be:
20:7f:f2:b0:3b:20:c8:94:f0:bf:b5:49:69:68:a6:5c:c5:ac:
ad:9b:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org