Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/FAbx-v3T9m43X6aW-0njRD6ChVk.roa
File: FAbx-v3T9m43X6aW-0njRD6ChVk.roa (raw, json)
Hash identifier: YRsgjXxHLKUuNrUe1nLZ27sw7cBaNU6nKz9ctKMhLYo=
Subject key identifier: 14:06:F1:FA:FD:D3:F6:6E:37:5F:A6:96:FB:49:E3:44:3E:82:85:59
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0187E0DF9AF56CD2C3383D8F10304F55C98C
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/FAbx-v3T9m43X6aW-0njRD6ChVk.roa
Signing time: Wed 03 May 2023 09:09:23 +0000
ROA not before: Wed 03 May 2023 09:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41164
IP address blocks: 82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
46.212.0.0/17 maxlen: 17
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.126.192.0/19 maxlen: 19
188.113.71.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.126.214.0/24 maxlen: 24
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
109.108.216.0/21 maxlen: 21
78.156.0.0/19 maxlen: 24
185.71.208.0/22 maxlen: 22
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
46.212.128.0/17 maxlen: 17
185.138.32.0/22 maxlen: 22
62.141.128.0/19 maxlen: 19
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
176.74.208.0/21 maxlen: 21
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 May 2023 09:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:df:9a:f5:6c:d2:c3:38:3d:8f:10:30:4f:55:c9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 3 09:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1406f1fafdd3f66e375fa696fb49e3443e828559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:60:84:63:c0:df:09:05:28:2f:28:04:9b:
4a:a2:74:7b:9c:5c:b9:15:36:0e:06:46:e5:70:29:
d7:44:69:3c:4c:de:12:f6:53:3e:21:cd:38:7f:14:
5b:e7:d4:b5:9d:b5:5d:49:c7:36:6c:98:01:7e:a4:
73:98:1a:f3:c2:a5:18:b8:36:50:d7:35:f7:49:33:
a4:dd:4e:a1:af:61:9d:2f:05:c6:55:48:9b:38:20:
8a:1c:16:f4:67:ee:b9:e0:51:98:de:0b:21:7a:2a:
ca:4b:00:0b:17:56:22:88:8b:64:71:0d:c9:8f:fd:
32:78:8b:e9:a3:8b:f8:71:84:87:73:f0:e7:76:e2:
30:fa:ba:f0:84:e7:ec:7d:ce:27:94:fb:b1:9f:4b:
07:9a:d7:33:94:a1:2a:b4:d1:67:39:35:9c:2f:d8:
40:c3:c6:59:d1:15:d4:10:33:f0:89:ce:be:3e:2c:
54:ba:ea:dd:ca:e4:36:78:0a:d1:3b:5a:2b:ea:77:
e3:90:b5:c5:82:15:63:75:ea:f2:44:c7:1b:35:10:
1e:27:4e:a4:8a:9b:9b:65:6b:7a:a3:e4:98:b8:6c:
de:66:17:c8:c6:88:7b:4d:53:90:c1:49:3d:54:40:
9d:83:91:10:77:a9:e6:f8:aa:f0:53:7a:42:a8:c9:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:F1:FA:FD:D3:F6:6E:37:5F:A6:96:FB:49:E3:44:3E:82:85:59
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/FAbx-v3T9m43X6aW-0njRD6ChVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
87:ce:0f:c3:11:a8:af:a9:e3:9d:b8:9e:64:ba:df:b3:e5:b3:
5d:9e:40:cf:f3:46:d5:e9:44:f7:fc:1c:c6:fa:5e:cc:8d:fb:
69:3f:4a:2c:aa:48:70:8d:22:8c:87:ae:2f:0d:1a:f2:4c:04:
29:6d:da:c9:d0:b8:36:b2:98:97:97:93:34:c3:ad:01:96:55:
2e:dd:4a:2c:42:fc:61:1c:a4:81:96:f7:92:75:dd:bd:37:ee:
1c:7f:d2:ec:66:dd:54:6b:e0:5c:e7:bf:2e:af:30:d4:e3:61:
65:5b:46:5a:b8:76:0e:31:1a:dc:62:f8:33:34:3a:4f:29:16:
10:78:a9:5d:08:62:dc:22:bf:2a:c2:ad:ad:cb:f6:e1:3d:84:
ad:e2:1a:48:c7:4d:56:75:56:f0:79:7a:d4:f7:ba:c0:ab:0e:
11:e0:f1:d8:41:18:74:07:c4:53:36:e3:b6:be:c3:71:60:27:
19:c8:c5:68:b2:fa:46:7f:0e:74:af:9d:ec:0c:a3:e6:83:bd:
81:84:c1:14:eb:06:38:a5:aa:b2:7f:83:82:ac:8b:a5:cd:d3:
d7:70:d1:f1:87:78:80:85:35:0b:0b:63:ad:c9:d3:55:b5:1a:
d4:7a:34:a4:bd:9c:78:83:05:55:11:ef:83:01:63:2c:40:d1:
05:ad:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org