Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/fCUQTaigLfb9F-wTgXMoHudA8sI.roa
File: fCUQTaigLfb9F-wTgXMoHudA8sI.roa (raw, json)
Hash identifier: FQQ5DSYvm3f2KDK8Stq3VMvQdU5eSD0nW9WjsJSS+aA=
Subject key identifier: 7C:25:10:4D:A8:A0:2D:F6:FD:17:EC:13:81:73:28:1E:E7:40:F2:C2
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 0187BD6230D123739F8E9F9C81A5666E8B24
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/fCUQTaigLfb9F-wTgXMoHudA8sI.roa
Signing time: Wed 26 Apr 2023 11:45:41 +0000
ROA not before: Wed 26 Apr 2023 11:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202779
IP address blocks: 213.173.96.0/19 maxlen: 24
213.244.248.0/21 maxlen: 24
185.154.156.0/24 maxlen: 24
185.154.159.0/24 maxlen: 24
185.154.157.0/24 maxlen: 24
185.154.158.0/24 maxlen: 24
91.201.220.0/24 maxlen: 24
91.201.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:62:30:d1:23:73:9f:8e:9f:9c:81:a5:66:6e:8b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Apr 26 11:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c25104da8a02df6fd17ec138173281ee740f2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:8f:87:03:76:59:64:3e:ed:7c:3c:21:ef:
86:bd:10:f9:50:eb:bd:3d:40:e6:a6:a0:6a:fc:77:
c7:83:0b:33:26:a1:f4:9d:2b:6e:0b:7a:86:4b:0b:
6f:b6:b7:4f:7e:43:ed:33:45:1b:48:47:07:ef:ab:
13:18:b8:15:10:59:40:52:f6:28:78:2c:ce:12:03:
b2:52:be:de:37:b9:d2:4a:79:d7:d6:42:db:5f:8e:
a1:57:2a:b9:85:1e:9f:f6:e0:32:b4:98:e4:37:c3:
ec:a0:1e:3b:32:4a:e8:e6:a1:af:d3:c1:6b:a5:01:
44:14:a9:15:ef:ea:54:3b:b4:6c:49:de:73:ae:7d:
b6:cf:30:cc:6e:05:4c:27:6b:9f:d5:c0:ec:ad:4a:
55:e9:57:0f:83:05:08:e0:f7:cb:18:22:19:60:31:
29:c3:d3:3e:b5:d4:b4:3d:90:b6:2e:a8:2b:0b:34:
5a:a1:3e:95:cd:19:5c:c3:b4:5d:60:bd:e7:93:1c:
06:d2:4a:c9:df:e6:f0:40:7d:20:5f:86:23:06:ef:
41:9a:62:15:9f:1b:3c:08:40:fa:74:c7:14:3e:5e:
1b:f2:fa:f3:8d:2b:19:63:f5:c3:1e:71:37:c9:e9:
0b:3a:f7:01:65:b7:22:88:86:2a:42:66:98:37:33:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:10:4D:A8:A0:2D:F6:FD:17:EC:13:81:73:28:1E:E7:40:F2:C2
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/fCUQTaigLfb9F-wTgXMoHudA8sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.220.0/22
185.154.156.0/22
213.173.96.0/19
213.244.248.0/21
Signature Algorithm: sha256WithRSAEncryption
17:a0:7b:0c:59:ce:5d:ed:97:a9:8e:df:1b:9f:ea:43:b6:ee:
a1:16:26:46:d3:74:db:8e:2f:e7:89:f6:e8:be:3b:34:cd:33:
5d:f2:37:44:4d:9a:cf:72:da:b4:44:7c:6e:92:98:97:e6:6c:
15:79:64:96:5b:4c:70:48:ae:4b:19:a6:3a:81:3c:fa:a5:ba:
d1:27:13:9e:46:11:fc:1e:fe:84:b7:05:52:68:16:18:37:04:
5d:44:55:7d:0b:6e:98:87:0e:6d:2c:ad:8a:19:31:c8:c8:ab:
91:ee:de:76:68:a4:e3:16:e0:93:90:5f:14:07:aa:45:29:89:
46:86:1a:9e:90:86:d6:d9:3e:3c:4a:16:49:40:50:9a:fd:a6:
2f:d7:54:44:a0:7b:1b:8a:cd:bb:93:db:0e:a7:e2:d9:a4:11:
1f:a1:3a:bf:11:29:a9:3f:31:8b:cc:37:17:c1:e8:ab:79:6b:
40:ac:f8:dc:4b:81:1e:f2:6a:c9:c9:63:08:59:40:e9:5a:8b:
99:cd:be:80:fc:d7:59:7f:f1:60:07:6d:66:9e:0d:d5:4f:2d:
80:ef:fb:3f:d0:09:b3:a5:9e:b2:45:d0:81:6e:90:24:57:5f:
00:54:b3:d5:56:23:70:eb:2b:cd:c6:c2:1d:5e:ec:01:d8:ab:
47:26:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:56 2024 by rpki-client on console-fra.rpki-client.org