Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/FmDEEp9NG46xn5NzRDqAaKlxHbs.roa
File: FmDEEp9NG46xn5NzRDqAaKlxHbs.roa (raw, json)
Hash identifier: vMhyDLxV+Uxaqfk4WFo0tbd8ee+x0u1NxbpoYv86qKI=
Subject key identifier: 16:60:C4:12:9F:4D:1B:8E:B1:9F:93:73:44:3A:80:68:A9:71:1D:BB
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0190E96406FEF5E6ECC0B42B0A3E1A13EB0D
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/FmDEEp9NG46xn5NzRDqAaKlxHbs.roa
Signing time: Thu 25 Jul 2024 10:16:04 +0000
ROA not before: Thu 25 Jul 2024 10:16:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34476
IP address blocks: 45.139.200.0/22 maxlen: 24
185.254.94.0/24 maxlen: 24
212.102.103.0/24 maxlen: 24
2a0f:8c80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Aug 2024 11:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:64:06:fe:f5:e6:ec:c0:b4:2b:0a:3e:1a:13:eb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jul 25 10:16:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1660c4129f4d1b8eb19f9373443a8068a9711dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:b8:66:73:b2:34:ae:1d:16:2f:73:8b:53:
f2:c8:19:92:18:5c:32:a2:bb:3a:73:82:27:76:81:
a5:99:d6:b0:31:ab:c7:47:93:13:2d:37:7e:92:de:
d6:56:c5:64:fd:11:fd:27:3f:92:92:f8:cc:d5:8d:
22:4a:49:07:5c:c1:f3:3b:ae:f6:37:6c:49:36:ed:
b6:6d:1c:9e:9b:21:5a:88:57:6d:e2:ed:58:86:52:
58:21:ff:c4:04:98:36:7e:76:fe:b9:a2:95:23:63:
64:f2:d3:6a:ae:3d:af:be:c0:80:5f:8a:5e:c8:d9:
d7:a3:4e:65:8a:2c:5c:42:d2:c4:2a:5d:7b:a5:28:
b8:c2:7a:23:98:4a:c9:06:39:fe:47:9f:43:fa:7d:
1c:5c:5f:13:84:6e:21:ea:a9:dd:04:82:de:71:46:
35:29:86:f5:df:4b:0d:69:94:1d:4e:f6:e6:3c:f3:
ee:f9:6c:dd:f8:59:d1:87:41:4d:e0:5b:1c:3f:e7:
93:ac:84:39:a1:48:c4:98:2b:20:be:50:39:d2:68:
0f:f8:7f:85:68:e3:40:1d:7b:43:be:65:07:77:33:
f9:2d:74:52:7f:01:4e:c6:56:b1:b6:1b:f6:de:49:
eb:ca:55:a3:6d:2b:b2:88:40:ae:1f:35:44:67:10:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:C4:12:9F:4D:1B:8E:B1:9F:93:73:44:3A:80:68:A9:71:1D:BB
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/FmDEEp9NG46xn5NzRDqAaKlxHbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.200.0/22
185.254.94.0/24
212.102.103.0/24
IPv6:
2a0f:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
52:21:3b:a9:d9:69:38:ff:f2:92:8b:1e:2e:40:20:22:c1:63:
0c:f6:aa:05:52:0f:f0:97:93:c1:6c:be:8d:05:fc:69:0a:0f:
ef:62:5c:bb:7d:7c:a1:8a:06:a4:92:a2:52:e9:cb:16:3a:b2:
19:01:91:df:06:33:9e:0e:34:31:e0:9d:99:3b:bf:45:e8:17:
7a:ae:4e:85:83:1e:4c:be:ce:7f:be:c5:41:46:9f:9f:10:ae:
9e:0f:cf:9e:cd:f6:67:e6:8d:ae:59:97:91:ae:66:b6:ef:41:
30:f1:db:e5:84:d8:83:7a:15:64:b7:8d:08:54:d8:ff:39:d3:
26:d0:23:c2:1e:3c:e1:90:9b:25:29:e5:16:b8:11:b4:2b:28:
bc:6a:4b:8e:84:1c:fc:bd:61:8a:9c:92:a7:90:28:96:ba:7f:
18:5b:42:1d:68:83:f3:9a:63:b6:9b:6c:03:c4:84:cb:d8:a4:
be:86:23:e7:cc:17:34:6f:84:78:3a:e2:e3:ed:69:49:08:17:
d8:fe:ce:8c:d4:01:ac:38:0c:3f:34:92:89:af:8e:04:9f:0d:
f4:33:36:39:91:b3:bd:c9:3c:cf:0b:ee:8b:60:d7:0b:04:6e:
79:2e:e7:6e:2e:a9:e1:89:21:35:3d:e0:87:80:92:47:35:a4:
d2:0a:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 15:20:46 2024 by rpki-client on console-ams.rpki-client.org