Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fRlHBnbFzdwGThez3hig93Z_MiA.roa
File: fRlHBnbFzdwGThez3hig93Z_MiA.roa (raw, json)
Hash identifier: 8V8k/PL3x0f51xtErwRLXUWjglUOQSABBmYFxgGz49I=
Subject key identifier: 7D:19:47:06:76:C5:CD:DC:06:4E:17:B3:DE:18:A0:F7:76:7F:32:20
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BE7437C019D8A8C66108D3A5BF1E486CE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fRlHBnbFzdwGThez3hig93Z_MiA.roa
Signing time: Sun 19 Nov 2023 11:07:21 +0000
ROA not before: Sun 19 Nov 2023 11:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:43:7c:01:9d:8a:8c:66:10:8d:3a:5b:f1:e4:86:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 19 11:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d19470676c5cddc064e17b3de18a0f7767f3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:7e:29:3f:1f:50:ff:38:ea:83:94:0d:20:
e2:6a:ea:3b:bb:f6:9f:f2:16:95:8e:fe:fd:b3:ba:
b7:3f:fe:ba:43:92:c1:92:bc:83:4d:bd:5a:f4:72:
f3:58:10:fe:36:50:69:69:6f:e4:ad:7b:a9:99:62:
c8:b6:52:4a:7d:23:b8:20:95:4a:9c:df:68:6f:bb:
36:ba:c0:43:80:2c:7a:7d:f6:91:50:0a:f1:e6:88:
31:5f:4e:54:97:21:42:31:2c:28:97:d2:dd:67:36:
06:f2:5f:5e:9c:c0:2c:a0:45:3d:89:39:57:a7:ce:
90:bb:f3:34:9d:5b:84:a6:43:3d:a8:6e:c0:8c:c3:
4a:26:aa:d3:eb:72:fe:83:e2:eb:7b:b6:ba:ff:15:
83:03:1f:30:98:22:b7:79:a3:35:51:59:94:e8:4d:
3f:dd:4f:10:c0:99:22:58:4a:b9:ab:9f:9e:fd:d7:
75:26:1b:1c:9e:b5:c2:a8:28:1b:d8:75:be:77:d5:
4a:7e:9a:e5:ce:3b:00:71:65:51:21:82:5e:68:ae:
a5:e5:86:13:82:e2:e7:3d:ca:32:8f:2f:19:ea:03:
8d:b0:4d:2d:c3:42:71:22:26:93:87:63:58:98:91:
be:71:ea:2b:7d:0e:20:88:c4:82:ae:b0:c3:f6:f0:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:47:06:76:C5:CD:DC:06:4E:17:B3:DE:18:A0:F7:76:7F:32:20
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fRlHBnbFzdwGThez3hig93Z_MiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.110.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
193.57.41.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
88:27:f6:d4:2f:32:de:e5:9f:40:20:9d:23:37:16:53:b4:a6:
3a:19:ff:1f:6d:53:ce:92:e8:eb:8d:e1:d2:55:45:be:7b:7b:
92:30:53:03:ba:44:af:db:34:38:7c:37:c2:b7:b7:50:83:4f:
d3:fb:93:e6:7d:b7:0c:7d:fd:41:e5:dd:0c:40:23:89:45:79:
ea:df:fc:7c:e2:61:99:64:1e:0d:97:c7:37:b7:e6:ed:87:7d:
57:6e:75:7c:d2:2c:e6:a1:d8:3d:45:02:12:47:10:d5:ac:28:
aa:52:e8:b8:fa:7c:23:f0:3e:6a:c3:52:e6:80:98:c5:de:e9:
ff:26:7c:2b:ef:76:cd:1d:2f:01:cc:a6:be:d3:65:c4:8b:ad:
24:4f:eb:86:64:48:63:28:36:0a:4a:3f:8c:3c:eb:f8:4a:32:
c6:2b:02:f6:06:f0:17:01:61:ce:1d:af:88:b5:1a:4f:dc:04:
01:e4:8e:bb:eb:dd:aa:35:32:29:d6:14:5e:0c:f6:36:d2:00:
e8:80:65:60:ee:e0:52:a0:4c:d0:00:e8:87:70:42:a8:16:e7:
a7:ea:12:e1:b0:63:a4:fa:ac:fb:90:ef:b6:e0:b9:0f:42:25:
6c:17:51:2b:70:1a:f1:76:73:74:f2:55:d2:9d:9d:f2:95:ad:
94:f2:c1:c3
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYvnQ3wBnYqMZhCNOlvx5IbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMTE5MTEwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDE5NDcwNjc2YzVjZGRjMDY0ZTE3YjNkZTE4YTBmNzc2N2YzMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtN+KT8fUP846oOUDSDiauo7u/af
8haVjv79s7q3P/66Q5LBkryDTb1a9HLzWBD+NlBpaW/krXupmWLItlJKfSO4IJVK
nN9ob7s2usBDgCx6ffaRUArx5ogxX05UlyFCMSwol9LdZzYG8l9enMAsoEU9iTlX
p86Qu/M0nVuEpkM9qG7AjMNKJqrT63L+g+Lre7a6/xWDAx8wmCK3eaM1UVmU6E0/
3U8QwJkiWEq5q5+e/dd1JhscnrXCqCgb2HW+d9VKfprlzjsAcWVRIYJeaK6l5YYT
guLnPcoyjy8Z6gONsE0tw0JxIiaTh2NYmJG+ceorfQ4giMSCrrDD9vBzMwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFH0ZRwZ2xc3cBk4Xs94YoPd2fzIgMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZlJsSEJuYkZ6ZHdHVGhlejNoaWc5M1pfTWlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAAjhuAwQA
LVFxAwQALVFzAwQALViLAwQALV6rAwQATVMnAwQBVdF4AwQAwR7xAwQAwTkpAwQA
wz4YAwQAw7FfMA0GCSqGSIb3DQEBCwUAA4IBAQCIJ/bULzLe5Z9AIJ0jNxZTtKY6
Gf8fbVPOkujrjeHSVUW+e3uSMFMDukSv2zQ4fDfCt7dQg0/T+5PmfbcMff1B5d0M
QCOJRXnq3/x84mGZZB4Nl8c3t+bth31XbnV80izmodg9RQISRxDVrCiqUui4+nwj
8D5qw1LmgJjF3un/Jnwr73bNHS8BzKa+02XEi60kT+uGZEhjKDYKSj+MPOv4SjLG
KwL2BvAXAWHOHa+ItRpP3AQB5I67692qNTIp1hReDPY20gDogGVg7uBSoEzQAOiH
cEKoFuen6hLhsGOk+qz7kO+24LkPQiVsF1ErcBrxdnN08lXSnZ3yla2U8sHD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org