Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FhxSixKAgxks6hlxpJe9dlCpXOk.roa
File: FhxSixKAgxks6hlxpJe9dlCpXOk.roa (raw, json)
Hash identifier: UjjCG365rHSGz1vlSdLCFaK03ojLxE8799cfpCzzAb0=
Subject key identifier: 16:1C:52:8B:12:80:83:19:2C:EA:19:71:A4:97:BD:76:50:A9:5C:E9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DB2D380629A7DAAE5B83AC8DED6F0A8C3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FhxSixKAgxks6hlxpJe9dlCpXOk.roa
Signing time: Fri 16 Feb 2024 16:50:21 +0000
ROA not before: Fri 16 Feb 2024 16:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.139.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 23:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:d3:80:62:9a:7d:aa:e5:b8:3a:c8:de:d6:f0:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 16 16:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=161c528b128083192cea1971a497bd7650a95ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:fc:d4:ad:f8:63:a9:df:56:51:8b:d1:f9:
c3:0c:2f:da:ca:7e:bc:ec:88:b8:b6:c4:f9:86:a2:
52:e0:62:61:e6:37:0a:0b:ee:3a:54:2f:f0:54:91:
24:0d:d8:e9:24:40:d9:87:f6:c2:a4:ca:b9:44:30:
0c:05:15:8c:a5:27:c0:30:78:2c:f3:4e:18:e0:ae:
42:71:25:05:51:93:be:a4:f7:a2:5a:cf:8f:d3:99:
6c:60:1d:d5:a8:79:67:2e:d4:b6:81:53:45:ac:df:
ed:61:fe:5e:a8:61:93:bc:90:8a:60:8e:28:55:67:
c2:7e:22:98:bd:1f:dc:d9:7b:16:ec:c9:47:93:39:
99:63:91:ad:b7:f1:ce:45:bf:08:fc:df:03:d0:4d:
16:a7:93:15:8f:d1:03:99:81:f9:ec:c4:f4:41:7f:
a1:54:69:d1:d8:54:df:61:0c:92:23:b4:8a:35:fd:
78:1d:50:cb:40:1e:c6:15:23:16:15:5a:c2:7c:42:
95:8a:7a:4d:e3:d8:bd:34:95:13:60:99:49:97:77:
fd:f1:a9:47:bf:1f:a5:b9:94:4b:7a:70:0d:51:66:
b2:23:b7:e1:cf:ec:7e:60:33:c5:25:55:90:af:10:
22:b0:73:8e:2e:85:99:05:ea:f6:35:07:25:33:39:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:52:8B:12:80:83:19:2C:EA:19:71:A4:97:BD:76:50:A9:5C:E9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FhxSixKAgxks6hlxpJe9dlCpXOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
45.94.171.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b9:11:f8:80:66:29:80:5c:0e:35:84:af:01:73:0c:4f:91:
68:8d:4c:5b:58:ff:39:6b:d5:85:a2:73:63:be:50:32:3e:4e:
64:db:c8:ab:ce:2b:86:16:11:9a:bb:c1:b7:11:08:9f:23:80:
d2:c7:ee:14:0a:77:81:00:8d:8e:21:77:35:5c:cd:6d:8f:52:
f3:03:09:35:bd:7b:e1:72:a7:1e:c6:c3:44:60:58:a0:19:d6:
ab:d4:ff:07:9a:47:43:21:c6:cd:a1:ec:9b:9f:e7:05:5f:e1:
a9:cc:8d:f3:af:76:d8:36:80:f4:2b:67:13:4b:5e:4c:00:79:
b9:d4:e6:2a:13:6d:02:86:bc:b5:11:f6:c0:d7:e4:fc:a5:b2:
56:6b:79:fe:f0:d2:bc:bd:f6:1a:f9:cd:cf:61:7a:0c:89:d5:
4f:ce:84:d8:1d:bd:64:5b:40:2b:62:2c:3f:ab:c3:8c:09:13:
95:ea:95:9c:01:92:53:09:c5:09:19:99:d2:d1:8b:7a:76:8c:
23:bf:d3:4f:ca:21:47:83:00:96:d5:05:4a:ea:ab:72:2b:93:
4a:87:42:67:3f:7b:f2:8f:40:fa:74:0b:8c:9d:a7:2a:ef:9c:
b8:05:d9:26:b5:ec:f2:83:58:6c:79:26:e5:95:af:b5:12:3e:
05:6d:54:6f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY2y04Bimn2q5bg6yN7W8KjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMjE2MTY1MDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjFjNTI4YjEyODA4MzE5MmNlYTE5NzFhNDk3YmQ3NjUwYTk1Y2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2X81K34Y6nfVlGL0fnDDC/ayn68
7Ii4tsT5hqJS4GJh5jcKC+46VC/wVJEkDdjpJEDZh/bCpMq5RDAMBRWMpSfAMHgs
804Y4K5CcSUFUZO+pPeiWs+P05lsYB3VqHlnLtS2gVNFrN/tYf5eqGGTvJCKYI4o
VWfCfiKYvR/c2XsW7MlHkzmZY5Gtt/HORb8I/N8D0E0Wp5MVj9EDmYH57MT0QX+h
VGnR2FTfYQySI7SKNf14HVDLQB7GFSMWFVrCfEKVinpN49i9NJUTYJlJl3f98alH
vx+luZRLenANUWayI7fhz+x+YDPFJVWQrxAisHOOLoWZBer2NQclMzmh1wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBYcUosSgIMZLOoZcaSXvXZQqVzpMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvRmh4U2l4S0FneGtzNmhseHBKZTlkbENwWE9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALViLAwQA
LV6rAwQBVdF4AwQAkhN9AwQAwR7xAwQAwTkpAwQAw7FfMA0GCSqGSIb3DQEBCwUA
A4IBAQAmuRH4gGYpgFwONYSvAXMMT5FojUxbWP85a9WFonNjvlAyPk5k28irziuG
FhGau8G3EQifI4DSx+4UCneBAI2OIXc1XM1tj1LzAwk1vXvhcqcexsNEYFigGdar
1P8HmkdDIcbNoeybn+cFX+GpzI3zr3bYNoD0K2cTS15MAHm51OYqE20Chry1EfbA
1+T8pbJWa3n+8NK8vfYa+c3PYXoMidVPzoTYHb1kW0ArYiw/q8OMCROV6pWcAZJT
CcUJGZnS0Yt6dowjv9NPyiFHgwCW1QVK6qtyK5NKh0JnP3vyj0D6dAuMnacq75y4
Bdkmtezyg1hseSblla+1Ej4FbVRv
-----END CERTIFICATE-----
Generated at Sat Feb 17 00:15:50 2024 by rpki-client on console-ams.rpki-client.org