Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/FSOnKxh5OXhT8hFPZMfgqyNNrT8.roa
File: FSOnKxh5OXhT8hFPZMfgqyNNrT8.roa (raw, json)
Hash identifier: QH7T8n61DJPXMh7qZWM/v5rgWcYmJmq1TB1NJ/hciw0=
Subject key identifier: 15:23:A7:2B:18:79:39:78:53:F2:11:4F:64:C7:E0:AB:23:4D:AD:3F
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 018E3371E304ED0CFBFD847CB17C5C7B7F43
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/FSOnKxh5OXhT8hFPZMfgqyNNrT8.roa
Signing time: Tue 12 Mar 2024 16:14:45 +0000
ROA not before: Tue 12 Mar 2024 16:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.204.212.0/22 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a04:e9c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 13 Mar 2024 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:71:e3:04:ed:0c:fb:fd:84:7c:b1:7c:5c:7b:7f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 12 16:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1523a72b1879397853f2114f64c7e0ab234dad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:44:61:0d:30:8c:2c:c9:fd:a3:81:30:d8:
f9:a9:60:0b:05:7f:51:15:3f:d1:9b:cc:91:9a:6e:
4b:97:b1:9b:48:2f:25:97:4d:99:6c:6d:c8:aa:43:
f6:68:1f:80:04:81:10:a0:2d:85:4a:6f:a1:c7:64:
f9:08:e5:cb:75:2f:6b:0f:e4:c6:95:00:af:14:fa:
f7:61:14:36:30:83:30:e2:b6:09:c5:d6:28:28:dc:
a8:4e:96:39:c3:01:92:66:f5:e4:1a:78:26:9b:71:
a8:26:c8:a0:55:c1:dd:b8:4b:37:e4:d0:88:9d:5f:
a7:e4:5e:13:d7:3a:d7:94:d2:4e:8d:43:d0:98:59:
da:2f:55:bf:4f:31:97:59:ef:04:ee:d2:79:f0:79:
17:81:2c:db:3f:59:43:f2:75:a6:6c:77:4d:98:7b:
48:b4:1c:df:02:c5:af:e1:8a:70:90:0e:34:f0:e9:
94:6a:40:34:90:27:ce:32:44:90:89:be:1a:24:5e:
8c:e3:a2:df:68:fb:68:9d:1d:4e:79:80:8e:ef:0b:
2c:68:ba:39:6c:b8:5c:32:f3:cb:8c:75:63:c0:97:
c8:a4:9f:81:48:52:77:1f:c4:c6:ee:54:7c:ef:1f:
65:90:11:05:1b:31:c6:62:06:b7:b9:b5:2c:3f:6f:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:A7:2B:18:79:39:78:53:F2:11:4F:64:C7:E0:AB:23:4D:AD:3F
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/FSOnKxh5OXhT8hFPZMfgqyNNrT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
80.74.240.0/20
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
185.79.184.0/22
185.94.204.0/22
185.99.76.0/22
185.178.216.0/22
185.204.212.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
212.11.68.0-212.11.75.255
IPv6:
2a00:f1c0::/32
2a04:e9c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:86:6a:36:b0:42:c8:6a:71:f4:3e:2e:c1:a9:23:e5:6f:b0:
06:ea:86:a9:a1:2a:57:93:83:d3:3b:3c:e2:89:e1:d1:1d:0b:
9f:a4:0c:91:c8:d6:ca:d7:0d:59:d9:cc:1e:07:2c:72:63:73:
a9:a5:41:39:97:6d:b9:0f:fd:8b:17:98:be:52:ad:c3:ba:fd:
f9:84:e3:cf:df:a4:a6:37:f8:f9:da:cc:0c:91:b6:83:82:40:
c8:8e:d0:67:8d:95:34:81:54:1b:1c:c2:f6:2e:97:e1:6a:26:
e0:9a:43:27:d8:fe:26:0b:c0:9d:a1:48:dc:f9:fd:41:07:06:
de:1c:bf:fc:2c:64:13:7e:87:c4:ff:8b:cf:b7:ae:8b:67:1c:
72:77:c2:ca:5d:c4:f1:c6:a5:06:a5:c7:92:52:23:f4:04:e6:
0c:4a:cf:c4:80:bc:eb:91:21:22:bd:c1:03:c5:19:1c:1c:4e:
c6:df:cd:ac:87:6a:c3:7c:51:e1:b2:2c:22:79:b1:50:11:8c:
19:fa:d7:0b:ee:13:db:e7:6c:cc:0e:a5:db:c7:a8:e4:fb:70:
b1:27:b6:bd:ae:fc:a9:26:e9:34:f8:01:cf:61:80:e6:3a:32:
64:f8:16:2b:d9:ca:f9:cf:a6:6f:d3:17:49:cf:d5:77:66:4f:
e8:bc:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:55 2024 by rpki-client on console-ams.rpki-client.org