Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FKUlA4XnWwitoa0ejE7RELd_Ys8.roa
File: FKUlA4XnWwitoa0ejE7RELd_Ys8.roa (raw, json)
Hash identifier: 4wCYW8YWrS7ZnQacUpsoZsA5dwNCIjVYejs3ZXm/lJc=
Subject key identifier: 14:A5:25:03:85:E7:5B:08:AD:A1:AD:1E:8C:4E:D1:10:B7:7F:62:CF
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018675390848886B90BAE06FD3408B9F9921
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FKUlA4XnWwitoa0ejE7RELd_Ys8.roa
Signing time: Tue 21 Feb 2023 18:25:17 +0000
ROA not before: Tue 21 Feb 2023 18:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29262
IP address blocks: 193.38.44.0/23 maxlen: 23
194.56.186.0/23 maxlen: 23
193.38.46.0/23 maxlen: 23
85.235.74.0/23 maxlen: 23
85.235.72.0/23 maxlen: 23
139.28.35.0/24 maxlen: 24
139.28.34.0/24 maxlen: 24
139.28.33.0/24 maxlen: 24
139.28.32.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.92.0/23 maxlen: 23
83.171.244.0/22 maxlen: 22
37.221.78.0/23 maxlen: 23
185.254.54.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
141.98.50.0/24 maxlen: 24
188.119.68.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 Feb 2023 23:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:39:08:48:88:6b:90:ba:e0:6f:d3:40:8b:9f:99:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 21 18:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14a5250385e75b08ada1ad1e8c4ed110b77f62cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:f0:4a:60:dc:fc:bf:32:22:f0:6f:29:62:
4a:a3:6b:ea:53:76:54:59:01:7c:91:1c:7e:74:07:
8a:2e:ca:e9:a7:b4:78:c9:e1:1e:d3:3f:bd:99:6b:
84:15:4d:38:82:37:95:79:b8:26:e0:75:38:87:5b:
17:7f:16:4c:1e:81:d1:c5:a7:bc:08:be:7a:86:25:
1c:41:ba:91:97:d6:6b:99:9c:9e:20:99:79:69:a9:
ac:eb:ac:c5:c0:62:10:7a:f2:7f:f0:ad:4e:83:c2:
b9:0b:f2:75:3a:03:69:5a:ca:d4:a9:a2:de:f3:f7:
3b:26:32:1b:a2:50:9f:dc:c8:c0:fe:55:79:97:ac:
6d:8b:d0:5d:f7:91:ec:f0:37:2e:8d:e4:64:af:ea:
e7:c0:f7:51:b6:19:c4:b6:31:c2:02:8f:e6:4e:b3:
ee:03:87:06:84:d3:8a:6a:e4:24:ff:a9:63:7f:03:
31:ed:a6:dd:a3:ec:70:80:47:b7:a0:3e:33:62:da:
57:6b:22:98:31:40:f5:af:01:af:10:6e:ad:19:30:
df:23:04:0c:02:9f:f7:90:a2:be:46:28:c6:2a:6a:
bd:6a:fe:56:a1:cd:fe:eb:c4:ac:39:05:2e:fe:cd:
2a:bb:a7:78:f7:01:17:be:4e:f3:11:0a:80:0c:7f:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:25:03:85:E7:5B:08:AD:A1:AD:1E:8C:4E:D1:10:B7:7F:62:CF
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FKUlA4XnWwitoa0ejE7RELd_Ys8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.78.0/23
83.171.244.0/22
85.235.72.0/22
139.28.32.0/22
141.98.50.0/24
185.254.54.0/23
188.119.68.0/22
193.38.44.0/22
193.187.140.0/22
194.56.186.0/23
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:0c:6b:cb:a3:3b:ce:25:f5:de:aa:1e:af:7b:e7:49:a7:7b:
0a:5c:39:59:c7:50:96:80:41:67:b5:3e:73:2d:df:db:44:b1:
31:73:61:eb:b6:26:47:e2:49:81:67:b3:77:96:ae:f2:c6:08:
c9:15:83:ef:79:dd:45:0b:6c:9d:a3:e5:67:cc:73:6b:8b:80:
c4:86:14:04:a9:de:34:6d:8c:35:f6:cb:ad:fd:03:b7:68:b1:
87:66:32:a0:bc:3c:07:38:22:76:a1:44:bb:6d:05:82:2a:6c:
f4:b3:03:53:2c:6a:1b:73:13:f7:2a:65:11:12:d6:dd:10:ed:
9f:ba:52:92:d9:85:f4:cc:e9:a8:16:16:80:23:78:1c:08:27:
60:79:fe:f9:75:d6:45:e4:d9:ae:a7:53:cf:de:93:60:f6:d3:
b3:ac:27:23:7c:4b:2d:f8:0e:51:3f:08:1d:fe:0f:79:0f:21:
4c:15:16:61:71:92:e7:a3:46:d6:52:7d:3a:ef:7b:dd:56:45:
10:28:44:8e:fa:e3:e3:27:f7:de:b1:74:cf:38:db:13:f3:20:
bf:7f:0d:9f:73:23:72:02:48:ea:fa:2b:7f:61:a9:87:d7:89:
7a:a8:35:f0:ea:f2:bf:e3:a4:40:b8:d9:2e:64:42:54:0e:86:
ad:65:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org