Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FnseyOYKMZq7195nsFqGuz6Zom8.roa
File: FnseyOYKMZq7195nsFqGuz6Zom8.roa (raw, json)
Hash identifier: KCkZwiJZ+jsUIEGsk+5GLHpWCudN3fGADRyeThguaSo=
Subject key identifier: 16:7B:1E:C8:E6:0A:31:9A:BB:D7:DE:67:B0:5A:86:BB:3E:99:A2:6F
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018D80315DD152C301B86D793C33C56A2E0C
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FnseyOYKMZq7195nsFqGuz6Zom8.roa
Signing time: Tue 06 Feb 2024 20:52:15 +0000
ROA not before: Tue 06 Feb 2024 20:52:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 93.180.216.0/24 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.218.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.220.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
93.180.222.0/24 maxlen: 24
93.180.223.0/24 maxlen: 24
138.124.156.0/24 maxlen: 24
138.124.157.0/24 maxlen: 24
138.124.158.0/24 maxlen: 24
138.124.159.0/24 maxlen: 24
144.86.228.0/24 maxlen: 24
144.86.229.0/24 maxlen: 24
144.86.230.0/24 maxlen: 24
144.86.231.0/24 maxlen: 24
185.20.196.0/24 maxlen: 24
185.20.197.0/24 maxlen: 24
185.20.198.0/23 maxlen: 23
185.20.198.0/24 maxlen: 24
185.20.199.0/24 maxlen: 24
185.138.120.0/23 maxlen: 23
185.138.120.0/24 maxlen: 24
185.138.121.0/24 maxlen: 24
185.138.122.0/24 maxlen: 24
185.138.123.0/24 maxlen: 24
185.254.12.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
185.254.14.0/24 maxlen: 24
185.254.15.0/24 maxlen: 24
195.133.220.0/24 maxlen: 24
195.133.221.0/24 maxlen: 24
195.133.222.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 19:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:31:5d:d1:52:c3:01:b8:6d:79:3c:33:c5:6a:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Feb 6 20:52:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=167b1ec8e60a319abbd7de67b05a86bb3e99a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:81:ae:8c:0d:c4:9f:7c:d3:58:dd:4f:a3:
07:f8:01:59:bd:9b:9b:b4:54:a5:15:0b:88:a1:58:
c5:6e:88:03:89:10:ad:85:76:bb:b9:7c:45:b6:66:
64:43:06:d1:eb:60:cf:7e:b8:2a:1a:e4:7a:dd:62:
1a:22:44:fd:24:14:29:d2:a2:76:05:72:9b:a6:f9:
c3:0a:0d:e3:f9:b1:7b:f5:69:dd:63:e4:70:5f:3b:
35:9c:a2:67:a1:b6:a6:9c:15:1c:84:3c:e1:cc:65:
d5:34:39:c7:1f:36:95:91:a5:2c:17:4f:ca:98:61:
25:ca:fa:32:e8:b4:62:90:68:0c:06:4a:79:b4:50:
94:bb:20:22:62:c2:18:54:c5:f0:79:0d:a5:a4:e7:
28:2e:5b:9b:7b:88:ee:d9:f1:6a:09:cf:86:0d:b4:
69:14:9d:15:47:b2:7b:ec:82:3b:41:58:98:35:ad:
bc:a2:ed:15:7c:a4:0f:1a:9b:64:09:e6:f3:04:d8:
2e:5b:f6:14:af:d0:09:99:14:e7:77:8d:ba:fa:9c:
81:1e:de:91:ca:87:14:4e:42:1c:cd:a2:c0:0c:a3:
df:bf:96:27:ab:93:14:7b:03:95:08:ca:27:0e:f4:
5a:f3:e6:b1:0c:79:c9:8d:89:a0:3c:28:81:ae:b3:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:1E:C8:E6:0A:31:9A:BB:D7:DE:67:B0:5A:86:BB:3E:99:A2:6F
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FnseyOYKMZq7195nsFqGuz6Zom8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
138.124.156.0/22
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.12.0/22
195.133.220.0/22
199.74.189.0/24
199.74.191.0/24
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
7c:21:5f:f3:71:2f:bb:9d:f0:c0:f5:b8:15:30:45:fa:9a:9e:
e9:25:ab:e7:a7:eb:17:0c:e3:1b:dd:ce:b2:42:4c:5f:0f:e6:
5b:30:78:a0:b1:a6:82:43:67:bf:47:14:8b:99:7a:39:ae:ad:
08:18:b1:62:ab:49:ed:a3:32:8b:f9:07:67:b5:b7:7a:88:63:
6d:d2:88:5c:d1:34:bf:ac:8e:ab:33:e7:26:56:7a:c2:2d:b5:
e2:dd:f3:e8:1e:33:4b:ec:9b:cc:a7:45:c4:03:64:4c:e3:1f:
54:62:c0:9b:8f:5e:7d:82:8d:81:cc:ec:72:29:7b:bb:b5:7f:
f8:dc:d4:30:b9:c6:f5:99:a9:1b:71:07:e9:96:05:4b:4a:58:
36:2c:98:61:23:44:31:b7:54:d6:40:11:3f:7d:5e:d8:29:5d:
fb:ae:13:62:f2:3b:f3:46:8a:af:22:17:20:63:87:97:a5:1a:
91:05:21:6f:d4:a6:0b:d6:2e:7b:6c:05:ab:d2:f8:35:52:0a:
21:c6:e2:59:bd:bf:1c:4b:07:b4:e8:f6:3b:bf:c6:b5:3a:1e:
0e:0a:b5:ea:59:88:ed:cf:5e:f4:36:1c:27:31:87:64:bc:3e:
16:78:b7:ae:bb:fa:68:5f:c6:96:91:5e:49:65:27:7a:d3:81:
cf:8d:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 22:14:55 2024 by rpki-client on console-fra.rpki-client.org