Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fRcBuaCsRenEcVAtN5udWVq6cik.roa
File: fRcBuaCsRenEcVAtN5udWVq6cik.roa (raw, json)
Hash identifier: q9zpZ6AjI48fxfUhpHMdlhWG+JjWSIogsVrRBExOaik=
Subject key identifier: 7D:17:01:B9:A0:AC:45:E9:C4:71:50:2D:37:9B:9D:59:5A:BA:72:29
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0188C08DE0CAE64523732586067402CBA895
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fRcBuaCsRenEcVAtN5udWVq6cik.roa
Signing time: Thu 15 Jun 2023 19:35:03 +0000
ROA not before: Thu 15 Jun 2023 19:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6762
IP address blocks: 89.43.43.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 07:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:8d:e0:ca:e6:45:23:73:25:86:06:74:02:cb:a8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 15 19:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d1701b9a0ac45e9c471502d379b9d595aba7229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:4e:1f:fa:55:2c:1b:1f:a9:24:3f:4a:72:
61:c3:ec:94:a7:3c:9d:e1:eb:39:26:13:cc:eb:78:
f0:4f:ea:a6:a0:d8:fa:0f:ff:2e:43:79:ee:96:99:
47:c0:d7:9f:61:e5:39:84:72:fb:1d:37:ee:00:2e:
92:dc:92:b3:74:fb:c7:09:88:72:2d:64:db:55:5a:
f0:f5:85:65:ff:2e:d5:ca:76:ff:cb:e3:d5:62:6f:
9d:e6:63:69:90:69:76:d4:35:12:ff:f3:ca:05:a5:
77:97:a1:ae:a6:8a:98:b7:32:11:29:7e:6d:c3:10:
a0:8b:0e:3e:cd:c6:24:b2:94:90:08:5f:58:79:43:
e1:76:ed:99:90:4a:f7:7b:cd:ed:41:cd:b4:70:b1:
75:37:c0:3b:b3:b5:41:c0:1e:75:ef:8b:be:da:88:
d0:90:3f:61:1a:96:4e:6e:6f:65:66:3e:c7:f3:e3:
5c:2f:c5:b9:be:9c:97:ee:01:b1:a6:a3:05:1d:fa:
ab:97:9c:79:e4:eb:02:33:6e:3c:b6:ca:9c:8d:f2:
a8:a8:d8:68:b5:8d:32:c8:9a:05:e0:09:2b:9d:28:
ab:e7:d3:2c:dd:60:68:c4:21:55:20:0c:c3:a3:d8:
b3:bf:3a:c8:90:6f:16:c5:d4:20:7f:d5:4f:d4:f1:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:17:01:B9:A0:AC:45:E9:C4:71:50:2D:37:9B:9D:59:5A:BA:72:29
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fRcBuaCsRenEcVAtN5udWVq6cik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
89.33.163.0/24
89.39.252.0/24
89.43.43.0/24
89.43.73.0/24
89.45.34.0/24
93.113.158.0/24
188.215.72.0/24
188.240.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e9:85:f0:fe:01:85:99:16:09:34:80:70:2a:08:f0:00:7e:
c1:c1:02:95:76:5b:af:ef:48:54:11:3b:a7:24:4f:2b:64:a6:
33:66:ef:97:3e:4f:a0:1f:26:f8:a6:39:85:5d:94:1d:66:c2:
0a:ff:81:85:6a:fa:1d:5e:69:1e:f2:2f:51:2c:99:f9:ab:86:
28:87:e2:76:52:8b:a3:ef:1a:a6:77:f3:e3:d5:60:e1:f9:5e:
cd:39:8d:0a:cd:3f:65:e7:a3:b7:9f:17:f2:04:fb:66:e9:d0:
b6:e2:74:38:c0:d3:c8:2a:d9:f7:61:f0:18:24:a4:ca:ac:5c:
a5:a3:f4:84:fc:88:78:e3:3a:7e:b1:b8:54:47:74:ff:98:0f:
29:25:d0:41:21:01:7d:55:3f:43:ba:96:6f:ac:db:09:1d:d6:
30:14:59:c4:81:38:d8:21:6b:ed:a0:31:b4:af:27:21:96:8c:
49:bc:89:09:2d:0b:c2:56:78:14:13:60:d0:5c:47:67:5d:c6:
3a:a4:76:39:88:7d:09:88:f1:92:d2:b9:7e:07:a4:82:1f:b9:
75:c0:5b:f8:94:3c:bf:b6:69:de:78:a3:eb:9b:b4:1f:6b:01:
b6:6e:16:fc:f9:d6:8d:a2:d8:cd:38:74:93:a7:82:28:e7:75:
4c:e7:d2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org