Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FtmXJIZur1cjArHYWeoJWve8JdI.roa
File: FtmXJIZur1cjArHYWeoJWve8JdI.roa (raw, json)
Hash identifier: czwllAEsS4X9JOgeqHtS/k7dKPP0Y0HVzSBAOqNKJOQ=
Subject key identifier: 16:D9:97:24:86:6E:AF:57:23:02:B1:D8:59:EA:09:5A:F7:BC:25:D2
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0185D8CA59050A3399806AEC308287C01261
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FtmXJIZur1cjArHYWeoJWve8JdI.roa
Signing time: Sun 22 Jan 2023 09:23:37 +0000
ROA not before: Sun 22 Jan 2023 09:23:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 109.122.43.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
91.226.59.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 07:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:ca:59:05:0a:33:99:80:6a:ec:30:82:87:c0:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 22 09:23:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16d99724866eaf572302b1d859ea095af7bc25d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:a5:2d:34:01:c5:f9:39:95:bf:7d:d6:d9:
72:52:2c:77:60:f0:f4:8e:43:da:d4:b7:84:75:a6:
a1:f6:23:81:15:0d:86:46:0c:39:d2:ce:ed:71:17:
a8:64:7c:54:2b:73:8f:43:12:68:0d:ed:68:13:19:
b5:c2:98:c7:11:4c:91:91:e3:da:f0:3e:50:3a:86:
79:01:97:d4:31:31:95:f6:ae:1f:e8:e6:5e:87:94:
0e:a3:9c:55:9f:30:c9:e6:17:05:6b:4f:71:7a:6a:
44:6d:ba:7e:03:47:ac:45:0c:a6:3a:ad:9e:64:e4:
9e:d7:41:8c:74:e1:53:2b:ab:aa:c1:55:73:68:50:
7c:39:00:82:f0:dd:d9:20:1a:83:a4:c6:33:91:fa:
40:4d:d7:77:9f:b5:bf:f8:9f:56:b5:ec:32:45:89:
a0:af:c3:ce:25:96:8f:ea:be:af:f8:e1:de:9c:e7:
9c:7c:56:b2:6d:96:0e:fe:78:b8:2e:b1:27:e7:b3:
69:14:d8:e0:58:50:e0:66:86:42:a8:89:a1:04:db:
36:0c:2a:5f:ea:04:ee:41:f0:58:e5:4c:52:53:84:
25:7c:d0:64:41:8f:d5:b1:92:96:73:a4:fe:00:0c:
5b:9f:85:7c:d0:48:6e:16:7b:3b:f3:b9:2c:dd:c0:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:97:24:86:6E:AF:57:23:02:B1:D8:59:EA:09:5A:F7:BC:25:D2
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FtmXJIZur1cjArHYWeoJWve8JdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.57.0/24
91.226.59.0/24
109.122.43.0-109.122.44.255
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
38:45:5b:5e:ad:be:2a:b7:46:9b:1d:f4:6b:12:79:ea:d2:28:
92:78:7c:e0:8f:a4:02:c2:ba:6b:81:79:9f:2f:12:8e:bf:30:
01:09:b5:09:1c:10:96:a3:ed:c7:99:6e:7b:ca:82:eb:ef:ab:
2f:b0:23:11:a2:28:42:79:0f:53:64:92:34:06:3e:13:4f:42:
9c:51:47:2d:71:e4:e8:e8:ee:49:60:70:47:72:ad:1f:a6:31:
57:de:2d:b6:46:78:44:87:a0:f6:56:45:e7:94:81:6b:01:f2:
2b:ab:9b:05:15:40:48:24:2e:16:04:0b:11:b3:a2:27:05:23:
8d:3d:f2:44:90:50:5b:f2:a5:95:d6:5e:08:a6:eb:df:4f:73:
76:2c:c5:48:c5:2c:11:92:aa:f0:00:b8:1c:9d:1b:96:ef:55:
86:0c:64:75:e2:9f:84:46:ce:92:2d:5b:80:0c:87:ea:6b:fd:
18:fd:53:5b:66:46:26:7b:af:3c:0b:c6:bc:08:11:26:7e:45:
aa:e2:0d:51:f3:60:11:b6:cf:b8:55:83:10:fb:4a:18:7b:33:
1c:3e:77:59:91:62:67:82:23:bd:68:8b:03:05:d6:4d:ef:17:
83:5d:30:ea:d4:a7:f5:19:49:37:86:a9:ac:db:a0:a7:dd:20:
45:8c:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org