Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/foq8yj3DfAinyhmhw9QHZBaSUHA.roa
File: foq8yj3DfAinyhmhw9QHZBaSUHA.roa (raw, json)
Hash identifier: i/JYuTWwfhJwLqgG/qlY5c/zs90pgevUplcnfSl9iRM=
Subject key identifier: 7E:8A:BC:CA:3D:C3:7C:08:A7:CA:19:A1:C3:D4:07:64:16:92:50:70
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01896550F5BA5DD2269989A02661E92A1D69
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/foq8yj3DfAinyhmhw9QHZBaSUHA.roa
Signing time: Mon 17 Jul 2023 19:25:51 +0000
ROA not before: Mon 17 Jul 2023 19:25:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 84.54.28.0/22 maxlen: 22
45.140.171.0/24 maxlen: 24
213.139.229.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.145.163.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.145.171.0/24 maxlen: 24
45.145.168.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
109.94.211.0/24 maxlen: 24
45.94.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:50:f5:ba:5d:d2:26:99:89:a0:26:61:e9:2a:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 19:25:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8abcca3dc37c08a7ca19a1c3d4076416925070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:b5:a0:ac:ad:1a:08:dc:28:6e:69:fc:0b:
24:6b:d2:c8:76:a8:a2:34:ed:23:b7:94:7e:72:5b:
8a:d3:8c:5f:f2:12:4a:8a:5a:ba:83:ec:fb:47:44:
74:0d:d3:67:f2:2b:e7:fc:31:6c:95:94:10:1c:d6:
b3:15:06:b4:f2:a3:a1:cc:bc:27:a0:88:d8:8c:e7:
d9:21:a3:3e:7e:b1:28:d9:5a:b7:d5:a5:e0:74:8c:
31:52:31:36:10:70:a0:86:bc:9c:6a:db:f5:cf:56:
00:e5:e4:6d:d0:1e:66:e6:79:1e:66:b1:c9:a8:d2:
28:ef:2d:08:a7:23:26:71:e1:50:e9:a5:a7:28:e7:
04:2e:b2:ee:72:31:72:2a:7d:2b:92:0a:c6:56:d4:
ed:1b:91:3b:6b:00:0d:46:4e:b2:a7:98:7c:cd:ab:
f1:f3:26:92:7e:7f:9a:24:38:89:cc:75:ff:9d:91:
1c:da:1b:b4:94:98:52:0c:34:94:eb:41:58:d5:6c:
79:88:6a:e2:38:73:08:60:b0:bc:2e:5d:c4:d5:b2:
5e:ea:95:19:ec:0a:15:c2:c6:db:c3:75:d9:d7:60:
bb:34:15:0f:42:5c:8d:e6:e7:86:33:3a:82:4e:65:
a7:2d:e6:46:a3:41:25:79:7e:83:ef:e0:67:0c:7a:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:BC:CA:3D:C3:7C:08:A7:CA:19:A1:C3:D4:07:64:16:92:50:70
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/foq8yj3DfAinyhmhw9QHZBaSUHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.23.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.163.0/24
45.145.168.0/24
45.145.171.0/24
84.54.28.0/22
109.94.211.0/24
213.139.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:05:db:1f:cf:35:9a:da:05:e8:2d:d8:27:09:70:33:b0:38:
17:d4:24:25:e3:cc:29:4a:9d:3c:28:2e:03:21:34:ed:6c:4a:
9e:3a:fc:07:da:bd:52:fe:fe:a8:bf:c0:00:a0:24:12:81:a3:
79:22:80:b3:f7:a4:c5:be:cd:5d:4c:67:f9:ee:e3:74:80:24:
0b:57:a5:11:46:88:ba:63:45:d3:bb:02:4f:f8:f1:12:09:b3:
68:62:6e:e9:db:2e:38:86:d9:26:36:a4:f4:53:82:e1:e9:5e:
a7:37:3b:a9:8b:47:86:de:54:1b:90:50:9f:16:2d:7a:ac:ff:
7c:12:64:31:1d:c7:85:35:37:a1:8d:4f:85:46:03:8b:0c:e8:
5c:e6:9f:32:70:ff:57:86:ba:ed:5f:eb:37:6c:58:3a:b4:fe:
5f:61:a1:1b:94:de:ed:7c:ea:6e:68:1f:9c:a8:ed:c1:88:fe:
95:a3:75:c8:a0:bd:66:ad:77:5e:10:19:f6:56:06:b5:ac:1f:
2c:12:57:f9:52:80:24:79:ff:f7:c7:33:bd:2b:62:e8:14:8a:
30:66:66:8c:e9:60:41:ad:04:d9:73:e2:92:05:de:38:6a:d1:
7e:8f:1d:04:02:11:da:c1:14:6a:2a:5c:35:5b:10:50:e4:ca:
41:93:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org