Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/_FfxvutkzOeLNuVR5RID5xOSgNY.roa
File: _FfxvutkzOeLNuVR5RID5xOSgNY.roa (raw, json)
Hash identifier: v3HrDDpLfqzynK9/vO6BgslVFzPdMyBOpNkZhzjZ5Gw=
Subject key identifier: FC:57:F1:BE:EB:64:CC:E7:8B:36:E5:51:E5:12:03:E7:13:92:80:D6
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 018E92608DE1CB5D9689238351B994618751
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/_FfxvutkzOeLNuVR5RID5xOSgNY.roa
Signing time: Sun 31 Mar 2024 02:39:45 +0000
ROA not before: Sun 31 Mar 2024 02:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41155
IP address blocks: 45.91.151.0/24 maxlen: 24
45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
45.158.139.0/24 maxlen: 24
77.75.231.0/24 maxlen: 24
109.107.134.0/24 maxlen: 24
185.34.103.0/24 maxlen: 24
185.89.23.0/24 maxlen: 24
185.222.215.0/24 maxlen: 24
188.244.116.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
194.1.200.0/24 maxlen: 24
2a0d:8e80:2659::/48 maxlen: 48
2a0d:8e80:8080::/48 maxlen: 48
2a0d:8e80:8a80::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 May 2024 20:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:92:60:8d:e1:cb:5d:96:89:23:83:51:b9:94:61:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Mar 31 02:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc57f1beeb64cce78b36e551e51203e7139280d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:56:73:90:33:a8:5f:06:1a:cc:b5:1f:50:
5e:f1:3d:9c:f2:b1:a1:b1:87:b2:79:f0:53:ec:50:
fd:64:29:c1:d6:57:87:15:1e:93:07:d5:a8:c4:d8:
45:4a:3d:4f:61:ec:59:29:39:85:ff:e4:ba:f4:fa:
96:89:db:f8:cf:8d:be:bb:17:92:9b:80:37:8a:67:
32:32:4b:c8:91:90:0a:61:ec:79:5a:4f:85:69:e4:
32:fb:dd:09:37:59:45:4f:48:29:07:bc:86:07:cb:
26:0b:65:00:70:32:db:68:c3:3c:10:9c:0a:67:ad:
8c:34:4d:d2:25:e4:f3:3f:46:33:e7:66:df:32:55:
7d:67:f4:c8:c3:ce:e9:01:20:ce:dc:07:9e:1e:97:
42:7c:bc:0e:d7:8f:c1:71:6d:e0:f7:11:cc:f1:48:
3f:4e:81:f9:f4:4d:6f:ba:29:f1:84:20:8b:e6:a1:
9a:a4:37:23:06:28:9c:85:16:e4:dd:81:9c:fe:6d:
4c:6f:27:c9:c3:61:f1:75:a9:4b:77:88:ab:8e:5c:
69:e0:b2:ba:5a:54:f1:d6:42:c8:66:9e:a3:29:55:
88:a8:ea:90:73:11:32:6f:95:48:ba:19:bb:ec:e5:
ab:b2:9f:65:ed:8a:89:fb:c3:73:3f:b6:1b:5d:47:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:F1:BE:EB:64:CC:E7:8B:36:E5:51:E5:12:03:E7:13:92:80:D6
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/_FfxvutkzOeLNuVR5RID5xOSgNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
45.156.72.0/22
45.158.136.0/22
77.75.231.0/24
109.107.134.0/24
185.34.103.0/24
185.89.23.0/24
185.222.215.0/24
188.244.116.0/24
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
194.1.200.0/24
IPv6:
2a0d:8e80:2659::/48
2a0d:8e80:8080::/48
2a0d:8e80:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
2f:28:d1:3e:36:ba:d1:b2:a2:27:b4:11:de:f0:4a:9a:3c:7a:
93:90:f0:eb:b2:5b:01:ef:1b:9c:9a:71:e8:e0:8a:b1:71:4a:
11:3b:c8:9d:21:71:c3:9e:46:e8:55:45:09:8d:42:5c:a7:7a:
fc:e2:4f:39:be:c3:15:65:d6:ba:8b:cd:6c:30:ac:00:88:c7:
51:60:63:f4:7e:bf:38:73:fd:2c:7d:46:ce:3d:bc:2f:b4:83:
21:15:30:23:73:96:c5:7a:14:4e:ea:52:75:3f:21:e3:08:8f:
1e:2d:30:2a:30:8d:20:50:69:68:60:8e:b8:77:7e:b1:b7:ea:
dc:a8:01:7f:b5:55:01:51:aa:98:9f:d8:42:91:2e:3f:bc:48:
4b:ee:f7:f3:e4:b7:60:28:06:7f:f1:08:1a:51:b0:c8:13:a9:
de:fc:6b:b5:89:58:3f:96:bc:e8:bc:25:96:d1:af:d8:21:19:
cc:fb:15:dc:54:d6:b8:21:da:6b:82:48:70:93:9b:f9:02:5a:
65:61:55:44:9b:61:10:63:74:2a:25:df:b6:be:e6:26:60:c7:
97:3c:c6:31:57:7e:b5:66:64:5c:ee:df:dc:35:27:b6:58:a6:
c7:cc:78:d7:b8:96:fe:66:44:d2:b1:f1:e5:3c:16:00:ee:5b:
04:48:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org