Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/FzgE-fE9Us0XqDQ4GxClCOB8kv4.roa
File: FzgE-fE9Us0XqDQ4GxClCOB8kv4.roa (raw, json)
Hash identifier: fheoVWRjRFt4CSyc+lUQPNCpqUxfSsZGYLsbCsssvj8=
Subject key identifier: 17:38:04:F9:F1:3D:52:CD:17:A8:34:38:1B:10:A5:08:E0:7C:92:FE
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 0185724C9902ABBE47C3FFF5FE2F89FFEF63
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/FzgE-fE9Us0XqDQ4GxClCOB8kv4.roa
Signing time: Mon 02 Jan 2023 11:45:00 +0000
ROA not before: Mon 02 Jan 2023 11:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8362
IP address blocks: 5.158.240.0/20 maxlen: 20
79.141.192.0/24 maxlen: 24
79.141.193.0/24 maxlen: 24
79.141.197.0/24 maxlen: 24
79.141.206.0/23 maxlen: 23
195.146.224.0/20 maxlen: 20
37.220.48.0/20 maxlen: 20
46.162.128.0/18 maxlen: 18
195.146.240.0/20 maxlen: 20
62.64.32.0/19 maxlen: 19
2a01:8e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 25 Jul 2023 04:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:99:02:ab:be:47:c3:ff:f5:fe:2f:89:ff:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Jan 2 11:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=173804f9f13d52cd17a834381b10a508e07c92fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:2f:bd:1c:b0:f8:ea:0c:d6:d5:8a:e4:df:
df:f3:f7:0d:b8:6e:83:1e:1e:a3:2f:44:7c:65:3c:
4a:88:fb:67:c8:cb:9b:05:ce:61:de:00:69:fe:48:
e6:9f:87:e0:ad:a4:3b:e9:d4:45:47:4f:7e:ed:2a:
bb:23:52:a6:e9:5f:0d:c9:5b:b7:99:ce:a5:f4:d0:
4a:49:1b:71:28:db:e2:0e:e0:e0:53:75:2f:fe:fe:
2b:4e:9c:bb:93:cc:7d:a3:4c:ef:f4:0c:51:ec:66:
dd:24:a9:48:e1:93:be:82:af:75:dc:97:b2:ce:d5:
4e:da:82:88:9b:f4:44:0d:89:0e:33:11:39:eb:84:
01:33:2c:c1:2d:d2:43:db:f5:9c:cd:fe:54:e3:d3:
04:57:64:97:09:1c:26:09:84:8c:fb:47:82:1d:04:
88:d6:47:00:48:55:ff:24:d2:2d:2c:80:83:52:c9:
ad:31:e8:c4:6e:87:c9:2b:16:bd:60:4a:cb:be:af:
b6:4d:85:03:88:b3:ee:d5:23:ba:fb:74:ce:51:de:
72:a6:ea:66:de:e1:51:ad:82:22:d6:85:f9:e2:40:
f9:78:aa:27:0a:26:d6:fa:04:4e:d0:f4:4f:d4:34:
c1:00:ea:9c:e6:84:9d:bd:8d:a6:ff:52:a5:d7:f2:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:38:04:F9:F1:3D:52:CD:17:A8:34:38:1B:10:A5:08:E0:7C:92:FE
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/FzgE-fE9Us0XqDQ4GxClCOB8kv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.240.0/20
37.220.48.0/20
46.162.128.0/18
62.64.32.0/19
79.141.192.0/23
79.141.197.0/24
79.141.206.0/23
195.146.224.0/19
IPv6:
2a01:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
66:99:58:af:72:db:d1:ad:25:20:3b:e0:b5:83:c1:0c:89:d5:
de:34:03:3f:9c:17:c6:0a:69:b9:bd:cd:8b:9e:ee:51:3d:c4:
ce:0a:d5:2f:6b:9d:a5:72:06:04:c0:80:c7:92:dc:21:65:6a:
a7:c5:70:6a:03:2e:1c:9b:0f:86:2b:c9:81:8c:9c:8f:b5:cf:
dc:ac:4c:66:0c:e8:e2:fc:0d:45:55:b1:28:2f:d9:03:d3:cc:
3f:a1:87:34:48:d6:a9:7f:06:c8:11:6d:10:43:4a:9b:73:91:
8b:55:f8:7d:83:9d:80:5e:2c:bc:4b:84:b8:a9:8b:58:f0:a5:
dc:87:84:d5:20:2d:26:fa:26:91:5a:1a:44:ad:db:96:f5:44:
68:e7:11:73:8a:97:ce:ba:3c:8a:c8:9e:51:00:33:5b:3a:19:
d2:3c:19:5c:39:07:fa:1c:4b:2a:d5:df:ba:ec:05:6d:ee:d7:
71:5d:d8:dc:ad:3c:73:cf:d5:81:4f:1a:ee:0f:5d:9c:ac:48:
dd:f8:21:d3:34:fb:c8:12:f6:51:0a:95:30:6c:ea:66:8b:b9:
3e:0a:69:3b:36:0e:4c:a6:ea:10:ac:91:31:6f:d5:39:d6:b4:
ab:b1:f8:d4:ae:e0:f3:40:c3:a5:74:5c:cc:95:14:a6:59:c6:
d0:43:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:25 2024 by rpki-client on console-ams.rpki-client.org