Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/FsfAjFkNfQBNRTvqQNCacxayiLk.roa
File: FsfAjFkNfQBNRTvqQNCacxayiLk.roa (raw, json)
Hash identifier: QKG7fyxgaXKEqor5/D4cSzvH2I12Ym5mq/01CrCH4pE=
Subject key identifier: 16:C7:C0:8C:59:0D:7D:00:4D:45:3B:EA:40:D0:9A:73:16:B2:88:B9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C456DE0609A67BD6A4AFC2B733A8FA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/FsfAjFkNfQBNRTvqQNCacxayiLk.roa
Signing time: Wed 07 Feb 2024 18:11:16 +0000
ROA not before: Wed 07 Feb 2024 18:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35048
IP address blocks: 2.59.50.0/24 maxlen: 24
5.183.130.0/24 maxlen: 24
45.11.20.0/24 maxlen: 24
45.11.21.0/24 maxlen: 24
45.15.236.0/24 maxlen: 24
45.15.237.0/24 maxlen: 24
45.84.176.0/24 maxlen: 24
45.84.177.0/24 maxlen: 24
92.119.193.0/24 maxlen: 24
94.158.190.0/24 maxlen: 24
193.53.168.0/24 maxlen: 24
194.32.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 15:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:56:de:06:09:a6:7b:d6:a4:af:c2:b7:33:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16c7c08c590d7d004d453bea40d09a7316b288b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:c4:1c:4c:22:b2:ab:d6:2a:56:d0:fd:05:
4d:0b:fe:10:33:aa:e3:be:63:1e:e8:0f:f9:29:8e:
9b:2f:6b:7f:15:cc:61:3c:1b:7d:68:bb:53:45:ab:
e1:8f:6c:1a:82:78:73:6b:05:1d:68:89:09:b5:f3:
36:65:7f:1d:97:ba:31:20:f6:58:0f:bf:aa:30:bc:
f1:2d:18:f6:69:bb:16:c8:a8:80:f8:25:ff:44:1b:
d5:da:31:dc:4a:a2:05:8a:b4:65:70:56:c8:47:e9:
b1:92:08:a6:fb:bc:0e:ad:d7:d6:a9:50:f9:4b:27:
cd:82:d7:31:40:b9:1c:51:06:f5:54:d2:fb:30:04:
45:fa:12:0d:83:c0:f1:69:25:30:68:fd:ee:5b:10:
e3:af:79:7d:38:8e:3d:4a:4b:4f:35:2c:49:ee:86:
d2:06:eb:19:d3:20:d2:3d:28:80:19:5e:c5:5e:e5:
36:75:48:b9:67:84:ea:88:8c:1d:56:22:dc:ad:13:
08:42:ea:8f:20:ba:0d:14:df:e4:7a:62:f5:84:e6:
d2:dc:71:90:8b:c1:1a:70:16:ca:16:7d:fd:27:df:
c6:60:7a:f4:cf:f6:48:a3:38:55:fc:73:f2:9b:fc:
96:b1:11:0f:be:32:a6:a4:93:d8:67:e8:e5:7d:4a:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:C0:8C:59:0D:7D:00:4D:45:3B:EA:40:D0:9A:73:16:B2:88:B9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/FsfAjFkNfQBNRTvqQNCacxayiLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.50.0/24
5.183.130.0/24
45.11.20.0/23
45.15.236.0/23
45.84.176.0/23
92.119.193.0/24
94.158.190.0/24
193.53.168.0/24
194.32.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1d:97:3b:41:9b:c0:11:c1:a5:39:1d:cd:b3:8b:cf:8a:d5:
32:6d:dc:72:ea:c6:e4:78:b7:e5:76:5e:e8:60:a5:a1:c0:de:
cc:49:d9:ca:4c:17:af:c1:bd:70:fc:9e:56:82:08:0b:e2:34:
93:b5:51:b4:bc:78:22:42:30:c3:f1:1a:48:3c:a6:60:6e:b1:
47:1b:c9:de:b6:9b:4e:ad:0e:bc:9f:ac:8a:db:9c:8e:1f:f6:
22:ec:76:b5:36:9c:69:c2:6a:0a:6c:61:82:d7:2a:f6:5a:f4:
0a:f8:82:45:60:21:d2:b3:82:76:f0:56:1b:01:5f:3f:92:78:
59:d4:97:74:ec:a0:9a:c0:79:d9:6e:77:91:7e:0c:ee:e3:fd:
6d:02:e4:57:69:bc:cb:dc:77:fe:6f:56:3c:d3:1f:95:1c:15:
33:f8:a8:6b:aa:2d:c7:76:81:61:fd:4d:b4:0c:4f:c2:63:cf:
7a:ba:47:c5:58:66:2d:f0:51:66:4b:b2:48:32:1d:6b:c6:94:
ca:b6:81:59:b5:4f:d5:c6:6c:ea:f3:21:40:7a:81:9e:b1:32:
ac:cc:c6:6b:32:d1:d5:80:43:18:a0:a0:c2:83:bb:4e:64:4d:
ba:ee:2a:ec:66:8a:b9:ab:09:3d:c4:60:93:08:87:b0:55:65:
c1:f9:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org