Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/FBJjePxw-ZZns2XBOecfHtC9JFs.roa
File: FBJjePxw-ZZns2XBOecfHtC9JFs.roa (raw, json)
Hash identifier: yuiZcfDPZj3UK4aqOVvV9b9/iVe3ntlNO273URjpmBE=
Subject key identifier: 14:12:63:78:FC:70:F9:96:67:B3:65:C1:39:E7:1F:1E:D0:BD:24:5B
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 018BDCB9F3C29906AE182E7A1200E0CA200C
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/FBJjePxw-ZZns2XBOecfHtC9JFs.roa
Signing time: Fri 17 Nov 2023 10:00:55 +0000
ROA not before: Fri 17 Nov 2023 10:00:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48954
IP address blocks: 85.91.40.0/22 maxlen: 24
185.40.87.0/24 maxlen: 24
45.147.84.0/24 maxlen: 24
195.88.100.0/23 maxlen: 24
37.48.240.0/21 maxlen: 24
185.83.120.0/22 maxlen: 24
2a00:7640::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:b9:f3:c2:99:06:ae:18:2e:7a:12:00:e0:ca:20:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Nov 17 10:00:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14126378fc70f99667b365c139e71f1ed0bd245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:6e:d7:5e:ef:e0:0b:be:24:96:e3:64:4a:
63:18:5b:ca:47:3d:09:75:ae:0b:64:2b:bb:0f:38:
02:07:9d:4d:80:9f:6d:48:4c:2b:40:97:48:27:20:
29:db:37:7e:96:92:f2:3a:bc:1a:e0:6a:72:f6:5d:
b7:46:f2:0c:98:a8:65:ce:44:fe:5b:bd:1d:f7:7e:
32:36:d7:d5:be:70:1f:c4:91:46:83:7f:cc:ac:bc:
c3:70:d2:9e:d3:68:09:72:77:50:9b:ba:c8:1f:27:
b8:a3:28:c5:a3:21:d0:6a:f1:35:be:67:b5:5a:b1:
31:bb:04:c8:44:6e:d2:ec:6d:5b:4b:25:7e:82:1b:
4d:31:17:e8:ae:be:0a:56:7d:a6:83:1d:ea:b5:2c:
01:20:94:79:80:b2:60:0d:28:93:52:5c:38:08:62:
5b:1b:0d:7d:7f:be:b3:06:dd:8a:e4:c0:a6:3b:92:
c0:05:79:74:bf:40:50:71:b5:98:db:5d:19:16:c9:
f0:bf:7d:80:68:f9:8f:9c:f6:e4:19:58:3d:34:8f:
85:6d:55:01:aa:0c:9c:b2:91:f4:4c:0e:35:7d:30:
41:2d:5e:eb:68:cc:51:f6:0c:70:14:2b:2a:b5:d1:
19:5a:c2:ce:32:f6:6d:09:21:18:e5:52:43:96:46:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:12:63:78:FC:70:F9:96:67:B3:65:C1:39:E7:1F:1E:D0:BD:24:5B
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/FBJjePxw-ZZns2XBOecfHtC9JFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.240.0/21
45.147.84.0/24
85.91.40.0/22
185.40.87.0/24
185.83.120.0/22
195.88.100.0/23
IPv6:
2a00:7640::/32
Signature Algorithm: sha256WithRSAEncryption
94:de:61:d0:a0:23:06:73:e3:f5:86:71:a6:b0:80:80:3d:9f:
c6:9c:52:36:98:2d:d7:53:99:22:03:47:bb:82:a9:f9:40:83:
ab:c1:50:64:92:59:c3:26:0d:a7:fe:21:10:38:47:12:95:b5:
e9:15:14:1c:c9:90:22:47:bd:8a:27:1e:74:e0:45:32:6a:f1:
a9:b8:4e:ac:2d:c6:2e:8b:3d:0f:6b:52:9a:42:e0:10:41:92:
a9:e7:60:f3:aa:36:cf:80:3c:90:61:a2:1f:48:b5:eb:40:c5:
e5:2d:57:b4:5e:78:bc:f3:11:39:9b:e6:97:a9:41:fc:6f:ce:
4b:31:f0:8d:39:96:af:30:77:96:71:56:83:e0:06:b7:a7:86:
38:98:1c:a3:b8:37:69:74:c1:08:ff:56:ca:9a:09:3d:4f:27:
41:d0:8b:90:b1:1a:44:84:bc:e1:24:27:96:0e:a1:eb:2e:b3:
3e:b1:ec:6b:01:44:af:21:01:b9:1c:a1:e8:e9:09:ca:58:36:
5b:0c:a9:07:49:13:72:15:9d:42:31:81:57:39:49:9f:e2:93:
f8:cc:e2:18:08:35:71:e9:e0:ba:94:62:d0:36:e0:81:b0:8c:
00:fc:63:73:02:0b:c8:35:4f:7f:2c:cd:44:60:c8:16:84:0b:
2e:89:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:27 2024 by rpki-client on console-fra.rpki-client.org