Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Fgwq9qW2DSUU8f2vme8jGUo5oWc.roa
File: Fgwq9qW2DSUU8f2vme8jGUo5oWc.roa (raw, json)
Hash identifier: ZzNYKTVKgWSxF9Y5kAWdRxPni6Cbxrn7phoEELrDdy0=
Subject key identifier: 16:0C:2A:F6:A5:B6:0D:25:14:F1:FD:AF:99:EF:23:19:4A:39:A1:67
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E52679A3B02B99F1149C8605469DCBB21
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Fgwq9qW2DSUU8f2vme8jGUo5oWc.roa
Signing time: Mon 18 Mar 2024 16:31:45 +0000
ROA not before: Mon 18 Mar 2024 16:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.180.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 14:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:67:9a:3b:02:b9:9f:11:49:c8:60:54:69:dc:bb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 18 16:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=160c2af6a5b60d2514f1fdaf99ef23194a39a167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:08:3b:19:74:ed:cb:30:ef:57:1e:ac:71:
ad:0e:f9:2c:32:fa:88:f1:c0:49:53:3d:eb:c3:8f:
d4:b7:fc:af:10:7f:e5:d2:83:f6:bc:15:32:c9:c7:
39:3e:f4:60:84:75:9f:ae:f0:24:e4:a2:5b:4b:85:
c0:37:27:db:7b:46:32:47:0f:0a:9a:b5:9b:85:b8:
dd:b4:c4:c5:2b:79:66:36:88:58:00:54:7f:54:51:
48:8a:d0:5c:20:fa:02:53:7e:51:1f:52:6b:21:34:
af:18:ad:12:2e:9c:ae:5a:61:9f:33:54:64:e1:fd:
5d:0c:23:94:fb:6e:f0:bc:a2:c7:8e:1c:2f:fa:35:
86:72:28:6f:e5:51:c0:30:0a:0b:88:cd:ea:4c:14:
8c:a4:2b:d4:36:f8:d6:58:7d:18:95:01:42:bd:97:
0b:80:40:5e:cc:85:4c:37:7f:70:97:cb:5b:81:c8:
ef:84:5b:43:6f:b5:54:a3:6b:92:6f:62:54:1d:a5:
6a:e9:97:72:f5:7d:45:9c:cd:25:4e:b7:b0:85:82:
c0:15:fe:09:bc:0b:ed:02:db:73:e3:dd:2d:84:dd:
2b:f4:c8:86:71:f7:9c:ae:cc:0d:e8:f7:98:b2:8b:
b6:b0:7d:f9:06:ae:c5:4d:cc:9f:ae:e8:b5:6b:2a:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:2A:F6:A5:B6:0D:25:14:F1:FD:AF:99:EF:23:19:4A:39:A1:67
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Fgwq9qW2DSUU8f2vme8jGUo5oWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
45.135.182.0/23
89.34.106.0/24
91.132.50.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
60:88:1a:8f:d1:c3:7a:b5:0b:f0:a2:02:d9:6e:72:18:cd:a7:
5d:3b:fd:35:bf:92:00:8b:52:c3:4d:04:99:16:de:9d:c9:02:
00:64:85:9f:24:0f:8f:cb:77:d6:16:3d:ef:43:7d:6e:c9:20:
c2:f6:1d:09:34:5a:ef:70:6c:bd:13:1b:09:47:1f:77:fc:66:
f7:13:b3:83:d9:b8:80:1a:93:97:0b:4a:df:00:4a:45:ab:eb:
12:28:20:d3:08:c8:83:5b:af:14:a3:ef:84:b9:5b:0b:0f:7d:
f8:20:22:18:a8:0d:10:49:f6:c1:6a:d8:d7:41:f4:83:1c:58:
42:67:31:31:38:7b:06:5e:9e:4b:2c:fc:5d:69:3b:53:64:78:
a3:e4:6d:fa:09:9a:c0:26:f7:b9:68:75:cd:40:4b:d8:b1:9f:
67:33:74:2d:2c:dd:d0:15:5e:c8:c4:8f:5e:22:a2:7f:97:ff:
1e:7a:64:7b:4a:e6:1e:62:76:06:65:4f:23:e8:15:7f:f1:cc:
02:fa:e6:eb:71:7c:52:80:a5:ee:91:20:16:4a:35:48:98:b0:
8b:e6:3d:c7:f3:cc:89:04:1c:42:2a:8a:89:e7:5d:96:bb:89:
4e:9b:28:b6:17:f8:e7:d0:e3:f1:e8:09:d8:95:af:93:f9:e5:
60:65:aa:89
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY5SZ5o7ArmfEUnIYFRp3LshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMzE4MTYzMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjBjMmFmNmE1YjYwZDI1MTRmMWZkYWY5OWVmMjMxOTRhMzlhMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe8IOxl07csw71cerHGtDvksMvqI
8cBJUz3rw4/Ut/yvEH/l0oP2vBUyycc5PvRghHWfrvAk5KJbS4XANyfbe0YyRw8K
mrWbhbjdtMTFK3lmNohYAFR/VFFIitBcIPoCU35RH1JrITSvGK0SLpyuWmGfM1Rk
4f1dDCOU+27wvKLHjhwv+jWGcihv5VHAMAoLiM3qTBSMpCvUNvjWWH0YlQFCvZcL
gEBezIVMN39wl8tbgcjvhFtDb7VUo2uSb2JUHaVq6Zdy9X1FnM0lTrewhYLAFf4J
vAvtAttz490thN0r9MiGcfecrswN6PeYsou2sH35Bq7FTcyfrui1ayro6wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBYMKvaltg0lFPH9r5nvIxlKOaFnMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRmd3cTlxVzJEU1VVOGYydm1lOGpHVW81b1djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYe0AwQB
LYe2AwQAWSJqAwQAW4QyAwQAXXK3MA0GCSqGSIb3DQEBCwUAA4IBAQBgiBqP0cN6
tQvwogLZbnIYzaddO/01v5IAi1LDTQSZFt6dyQIAZIWfJA+Py3fWFj3vQ31uySDC
9h0JNFrvcGy9ExsJRx93/Gb3E7OD2biAGpOXC0rfAEpFq+sSKCDTCMiDW68Uo++E
uVsLD334ICIYqA0QSfbBatjXQfSDHFhCZzExOHsGXp5LLPxdaTtTZHij5G36CZrA
Jve5aHXNQEvYsZ9nM3QtLN3QFV7IxI9eIqJ/l/8eemR7SuYeYnYGZU8j6BV/8cwC
+ubrcXxSgKXukSAWSjVImLCL5j3H88yJBBxCKoqJ512Wu4lOmyi2F/jn0OPx6AnY
la+T+eVgZaqJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org