Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fEENLXhIyVSJU_Is6EmOY7-nfFA.roa
File: fEENLXhIyVSJU_Is6EmOY7-nfFA.roa (raw, json)
Hash identifier: K+11zsKBzeTqC0RS5XeyMvhpZk2kCj3baVgU7dJ0Ghw=
Subject key identifier: 7C:41:0D:2D:78:48:C9:54:89:53:F2:2C:E8:49:8E:63:BF:A7:7C:50
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01882BC338A8471AA7128CB212EE9ED12A14
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fEENLXhIyVSJU_Is6EmOY7-nfFA.roa
Signing time: Wed 17 May 2023 22:09:54 +0000
ROA not before: Wed 17 May 2023 22:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 95.164.60.0/22 maxlen: 24
95.164.84.0/22 maxlen: 24
94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/21 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.115.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/23 maxlen: 23
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 15:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:c3:38:a8:47:1a:a7:12:8c:b2:12:ee:9e:d1:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: May 17 22:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c410d2d7848c9548953f22ce8498e63bfa77c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:7b:d8:1a:e8:28:62:b9:1c:cd:39:b4:4a:
59:e6:c2:27:1e:30:fc:d1:1c:09:ad:5d:fc:7a:45:
2f:ab:72:73:ac:c7:c7:ec:77:2a:6a:0a:f3:3f:16:
84:b6:e9:23:9d:57:77:f3:38:ed:43:25:f7:1e:56:
1f:9f:81:fa:26:70:92:ce:bb:d4:3c:a4:e2:9b:5a:
ea:74:fb:03:c5:ae:ce:9f:37:7f:6c:08:c7:5f:28:
13:b8:b4:53:d0:54:e9:0f:b3:d6:88:eb:e1:0b:14:
35:4d:e1:31:0f:ce:38:3e:4c:b4:43:f0:86:d1:22:
26:fb:bc:a8:fe:7c:a8:7d:0a:1f:95:82:7a:9b:eb:
5f:67:f9:0c:e4:22:02:c5:36:fc:63:3f:ac:c0:7b:
6b:c4:c1:1e:6d:37:ac:e6:e8:55:63:fa:0f:12:78:
7b:cc:29:b1:95:6c:7c:40:43:21:d4:94:2e:d7:a5:
93:d2:37:14:75:ae:fa:2d:17:ee:74:75:03:16:9e:
74:e9:76:99:ec:6f:9f:6d:e5:91:7f:d2:b2:f0:03:
0f:2e:31:a4:4b:ca:13:13:a1:81:7a:16:27:41:5c:
10:c0:34:ce:f0:78:4d:b5:49:14:da:b8:46:48:b1:
53:f5:c5:8b:8e:ad:3f:6d:4f:47:5f:d4:2b:90:2b:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:0D:2D:78:48:C9:54:89:53:F2:2C:E8:49:8E:63:BF:A7:7C:50
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fEENLXhIyVSJU_Is6EmOY7-nfFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.8.0/21
94.131.96.0/21
94.131.105.0-94.131.119.255
95.164.8.0/22
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.84.0/22
Signature Algorithm: sha256WithRSAEncryption
28:1f:8d:56:ee:7e:e7:5c:be:d3:37:c4:3c:f5:26:4d:5b:99:
31:19:98:4a:72:8e:ff:1f:74:d4:4c:ad:ca:ec:55:5a:e5:e9:
86:b0:62:0a:ea:3d:63:6d:d3:fa:97:67:6c:31:8a:42:54:b0:
c0:a8:fc:06:97:07:c5:f4:40:8c:f9:d2:fd:c4:e9:ac:25:2a:
65:e0:2a:79:48:27:16:c4:2f:ec:5f:89:f7:f3:aa:55:a3:f7:
aa:5a:0c:4a:88:c9:9b:e1:a9:4e:26:2e:85:19:c6:bd:87:6b:
59:0f:b6:12:05:1c:e9:af:fb:e9:52:6b:d0:b5:93:57:8d:23:
40:0a:8f:57:b8:87:1d:98:47:dd:72:28:e3:a8:14:5d:c0:62:
c6:4a:59:60:4d:0e:7e:19:af:1b:09:89:6c:84:c1:8f:29:14:
45:48:e8:a5:b8:fa:4b:b2:09:f8:64:c5:04:87:3c:9b:92:6c:
62:75:99:57:3d:43:95:a7:2f:3f:1e:4b:08:ef:d2:58:a3:2d:
0c:81:c0:52:f3:e7:fa:bb:75:e1:33:97:67:f0:70:3a:aa:69:
a7:00:d4:3f:98:12:48:fb:6d:d4:72:f7:04:6d:b5:e7:70:f8:
c7:3f:22:68:1b:23:1b:33:9b:88:ce:6d:fa:4b:8d:b2:f2:2e:
5d:19:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org