Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/fndMaGuJFrEPDsuNE--hkAyZPAo.roa
File: fndMaGuJFrEPDsuNE--hkAyZPAo.roa (raw, json)
Hash identifier: 9Qfip7tcHgUTXwk4kDIuWYYvEQI8VgsG1SpDhDYNRIg=
Subject key identifier: 7E:77:4C:68:6B:89:16:B1:0F:0E:CB:8D:13:EF:A1:90:0C:99:3C:0A
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 01856FE700506D93AB3D0EF0059C22A09BCD
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/fndMaGuJFrEPDsuNE--hkAyZPAo.roa
Signing time: Mon 02 Jan 2023 00:34:47 +0000
ROA not before: Mon 02 Jan 2023 00:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 81.208.64.0/18 maxlen: 18
93.60.0.0/15 maxlen: 15
81.208.0.0/18 maxlen: 18
93.43.0.0/16 maxlen: 16
93.33.0.0/16 maxlen: 16
89.97.0.0/16 maxlen: 16
93.40.0.0/13 maxlen: 13
2.232.0.0/13 maxlen: 13
93.37.0.0/17 maxlen: 17
93.40.0.0/15 maxlen: 15
93.40.0.0/14 maxlen: 14
93.32.0.0/13 maxlen: 13
2.224.0.0/13 maxlen: 13
213.140.0.0/20 maxlen: 20
83.103.0.0/18 maxlen: 18
213.140.16.0/20 maxlen: 20
83.103.0.0/17 maxlen: 17
93.39.0.0/16 maxlen: 16
89.96.0.0/16 maxlen: 16
89.96.0.0/15 maxlen: 15
93.32.0.0/15 maxlen: 15
93.32.0.0/14 maxlen: 14
93.36.0.0/15 maxlen: 15
93.36.0.0/14 maxlen: 14
93.32.0.0/12 maxlen: 12
93.56.0.0/14 maxlen: 14
83.103.64.0/18 maxlen: 18
93.46.0.0/15 maxlen: 15
93.48.0.0/13 maxlen: 13
85.18.0.0/17 maxlen: 17
92.223.128.0/17 maxlen: 17
213.156.32.0/20 maxlen: 20
85.18.0.0/16 maxlen: 16
213.156.48.0/20 maxlen: 20
93.38.0.0/15 maxlen: 15
37.186.192.0/18 maxlen: 18
93.42.0.0/16 maxlen: 16
93.42.0.0/15 maxlen: 15
85.18.128.0/17 maxlen: 17
93.62.0.0/15 maxlen: 15
93.44.0.0/15 maxlen: 15
62.101.96.0/19 maxlen: 19
93.44.0.0/14 maxlen: 14
93.40.192.0/18 maxlen: 18
93.34.0.0/15 maxlen: 15
93.40.128.0/18 maxlen: 18
62.101.64.0/19 maxlen: 19
185.7.112.0/22 maxlen: 22
62.101.124.0/22 maxlen: 22
93.37.128.0/17 maxlen: 17
151.0.128.0/17 maxlen: 17
93.41.0.0/16 maxlen: 16
2001:b00::/29 maxlen: 29
2001:b00:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:00:50:6d:93:ab:3d:0e:f0:05:9c:22:a0:9b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jan 2 00:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e774c686b8916b10f0ecb8d13efa1900c993c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:9b:72:ec:11:8c:1e:21:a2:dd:b2:51:7b:
58:41:43:19:3c:20:48:cf:16:11:1e:2d:ca:24:d0:
86:67:6c:51:75:aa:28:ca:cf:f5:b3:8f:de:0b:2f:
dd:12:bd:1f:bd:8b:cf:b8:d0:08:de:db:08:f2:1b:
79:e5:62:8c:3c:df:75:0d:a6:e5:94:dc:b1:06:5a:
bc:29:b8:b2:9a:6e:33:f7:7b:1e:1e:7a:07:b6:f2:
44:a7:ba:c9:e5:c9:f5:2f:b3:3e:46:8e:db:31:b3:
24:cb:2a:70:2a:81:4a:fe:db:ab:fd:ab:44:de:a4:
2f:6b:30:89:fd:2d:bf:ba:50:10:64:63:59:37:d8:
7c:6c:80:9e:59:23:92:e2:8a:b8:1c:95:bf:87:16:
df:df:2c:f6:e7:c6:81:b2:57:c2:a4:ad:c2:31:c8:
d1:88:6e:22:44:6f:6d:1e:8b:28:6f:50:40:00:e1:
fc:ab:d6:8b:c7:3e:ca:44:78:af:66:91:36:8a:b7:
dd:65:a6:c6:7c:63:63:47:f2:cf:9d:0a:8a:47:a1:
3e:45:0d:73:dc:df:d7:63:b0:1b:91:aa:4f:db:44:
25:44:59:a8:db:45:ae:80:b8:3a:cd:a2:6f:06:33:
28:d1:ff:6e:08:69:9e:44:ea:9f:28:f0:96:b0:49:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:4C:68:6B:89:16:B1:0F:0E:CB:8D:13:EF:A1:90:0C:99:3C:0A
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/fndMaGuJFrEPDsuNE--hkAyZPAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.224.0.0/12
37.186.192.0/18
62.101.64.0/18
81.208.0.0/17
83.103.0.0/17
85.18.0.0/16
89.96.0.0/15
92.223.128.0/17
93.32.0.0/11
151.0.128.0/17
185.7.112.0/22
213.140.0.0/19
213.156.32.0/19
IPv6:
2001:b00::/29
Signature Algorithm: sha256WithRSAEncryption
8c:6f:be:e5:a8:03:36:59:70:4c:9b:24:91:c6:da:b2:b8:fb:
60:aa:b3:f2:d3:e1:24:d6:07:6b:3a:8a:2d:74:6a:1c:58:5e:
ce:27:05:c2:55:73:11:a6:b6:12:48:dc:6e:c9:70:a3:46:91:
6c:61:31:34:53:26:15:df:39:6c:d7:9f:c5:b3:ca:35:92:03:
08:e9:e1:b9:96:c5:e8:f8:c5:25:5a:93:e2:3a:21:c7:97:9d:
fe:a3:66:bd:db:00:ff:3b:65:ce:7c:50:d2:32:fa:3a:d0:47:
49:d2:8d:9a:f4:d3:04:28:20:e7:e3:a4:6c:52:b6:ae:6f:f6:
3a:ad:ae:b0:08:e9:f1:15:02:5e:fe:00:2f:2e:54:1e:e2:ab:
94:ef:23:3a:74:30:cb:81:10:2e:da:00:a8:5c:15:a8:21:42:
3e:dd:c2:8f:45:0b:07:bf:e2:5a:6e:68:50:39:b5:bc:62:df:
92:56:5d:47:db:c1:23:ce:56:33:eb:94:70:90:61:43:2b:50:
86:cb:08:bc:b1:1a:24:39:da:bb:40:dc:73:59:ca:e3:72:9a:
4a:51:97:08:13:93:cc:fb:d4:bd:b8:58:15:72:9f:a7:23:86:
8d:a0:17:a2:80:85:06:e3:42:2b:fe:b0:fd:a3:53:06:0e:d5:
c8:b2:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org