Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FVrcd-mU5N8ZpFSBNaDIomwSooE.roa
File: FVrcd-mU5N8ZpFSBNaDIomwSooE.roa (raw, json)
Hash identifier: q/vPvG5haS4GKdk8/4mKvtJa+bxei0rELvlw4aBu81I=
Subject key identifier: 15:5A:DC:77:E9:94:E4:DF:19:A4:54:81:35:A0:C8:A2:6C:12:A2:81
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018DE7243D4EEA56C2679FE2FE3ED1F3BBDE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FVrcd-mU5N8ZpFSBNaDIomwSooE.roa
Signing time: Mon 26 Feb 2024 20:38:48 +0000
ROA not before: Mon 26 Feb 2024 20:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 45.67.117.0/24 maxlen: 24
85.159.117.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
89.40.161.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/24 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 25 Mar 2024 04:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:24:3d:4e:ea:56:c2:67:9f:e2:fe:3e:d1:f3:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Feb 26 20:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=155adc77e994e4df19a4548135a0c8a26c12a281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:a6:4f:cd:b3:69:fa:79:71:03:45:4a:8e:
1a:dd:ad:a1:13:7e:9f:ab:01:6d:74:06:58:d2:5f:
ef:07:4d:56:29:4f:83:7a:89:37:5e:8f:c8:91:5d:
0b:6e:d6:f7:d9:2a:ad:c5:15:01:52:56:04:1a:98:
3f:91:ed:7d:fa:cb:be:70:31:86:56:d4:f4:17:7a:
d7:20:e8:cd:79:99:64:77:45:9d:9d:fe:a5:9c:1c:
03:bd:0a:33:39:eb:ff:77:6c:3c:f5:c8:88:24:e7:
58:46:57:77:2c:8a:21:0c:65:a2:15:5c:94:5c:27:
5d:fb:58:51:e5:fd:dc:6d:44:1b:ca:78:60:32:29:
b5:d1:da:c5:67:c3:60:a4:69:20:24:d6:a5:04:79:
77:53:8d:7a:c3:57:f0:2b:b5:cf:fc:68:c7:0b:1f:
dc:38:bc:8a:ca:fe:1a:f2:0a:69:57:cc:99:8c:15:
52:36:6b:81:69:2e:40:c3:29:0f:03:8d:ba:79:7a:
2b:b9:a5:66:bd:06:a6:c0:28:d3:32:4a:42:0a:9a:
23:8b:bd:0f:e7:37:6f:5a:9e:58:6a:a6:bd:82:17:
f4:63:e1:be:a4:e2:d5:fe:87:6d:4e:f0:b1:11:e9:
78:e6:c8:0a:48:c3:ef:28:85:b3:16:af:6d:ec:85:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:DC:77:E9:94:E4:DF:19:A4:54:81:35:A0:C8:A2:6C:12:A2:81
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FVrcd-mU5N8ZpFSBNaDIomwSooE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
85.159.117.0/24
89.39.242.0/24
89.40.161.0/24
91.242.70.0/24
91.242.72.0/22
91.242.103.0/24
91.242.105.0/24
94.231.198.0/24
185.40.105.0/24
194.50.200.0/23
194.50.206.0/23
195.138.103.0-195.138.108.255
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.116.0/24
195.138.118.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
5a:b1:64:3d:e0:20:eb:16:bd:da:c9:7d:44:e7:85:c8:f7:42:
a1:a7:7e:c5:48:2d:e1:0d:1d:79:ad:5e:82:24:45:cc:9f:8a:
f0:94:cd:b5:f4:53:6d:92:9e:4d:02:84:40:b6:cb:3b:01:19:
dc:3c:dd:3f:86:d4:82:bc:33:01:43:83:b5:ea:54:33:05:73:
68:b7:9a:fb:37:e1:1e:99:00:f6:6a:a4:22:36:bd:b0:2a:1e:
b4:39:ba:59:4e:59:7d:9e:54:5b:bf:1f:9d:d8:a3:64:f1:cd:
b6:3c:36:c8:6c:01:6d:94:85:fe:ef:e1:7a:e3:90:9c:2f:3f:
cb:9c:33:06:be:48:27:ef:67:69:bc:21:15:14:68:c1:61:f5:
7d:a3:cf:90:34:c7:ca:50:d5:eb:fe:2d:ed:a6:62:4a:ac:c5:
db:9d:80:eb:85:5e:19:e0:df:5b:f1:6d:91:15:17:8c:03:9c:
3d:fc:ec:d4:30:0e:7c:84:f1:8a:2c:83:1d:cb:79:6c:78:56:
cc:5e:7f:3d:3a:ff:d2:5d:5b:ac:c4:b2:0d:4a:f7:80:7e:ca:
16:f1:c7:65:32:0d:bf:ae:53:ff:ba:bf:14:5e:7b:9a:ab:d1:
20:01:b1:5c:88:29:d7:b3:79:fb:17:71:f1:2f:00:b2:ca:b6:
19:dc:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 05:37:44 2024 by rpki-client on console-fra.rpki-client.org