Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FjxYNVBR07R2KU6M9vdoXvlPQZk.roa
File: FjxYNVBR07R2KU6M9vdoXvlPQZk.roa (raw, json)
Hash identifier: taX8aBt/cH2Eop81NbVyN+/HDJuSwEc/brAMpggJUig=
Subject key identifier: 16:3C:58:35:50:51:D3:B4:76:29:4E:8C:F6:F7:68:5E:F9:4F:41:99
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185780268472BDE9CCA9DC22516D24366BF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FjxYNVBR07R2KU6M9vdoXvlPQZk.roa
Signing time: Tue 03 Jan 2023 14:21:41 +0000
ROA not before: Tue 03 Jan 2023 14:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 94.177.145.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 05:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:02:68:47:2b:de:9c:ca:9d:c2:25:16:d2:43:66:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 3 14:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=163c58355051d3b476294e8cf6f7685ef94f4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:cb:d0:c5:48:28:57:1f:8e:4d:6c:dd:ab:
b5:96:02:ad:d9:ba:cf:94:ee:18:d3:03:74:65:bf:
64:c8:5c:40:57:b6:f5:71:bd:cb:19:25:84:a2:d1:
0f:ce:f3:c8:af:d2:c0:6c:77:26:e7:f2:1c:26:0f:
a1:f8:78:78:28:99:3d:ce:70:36:c6:32:12:c1:eb:
d2:b4:45:8a:ae:41:0d:76:d5:97:61:f9:89:e1:8f:
d9:16:d6:eb:42:f3:7d:9a:bf:2b:a7:ac:72:ea:01:
7f:5c:04:04:f0:eb:ce:67:7a:d0:23:0c:17:fb:db:
5e:a5:66:60:1c:35:4d:c3:71:20:e9:46:5d:40:29:
0e:7f:1d:b5:0c:4f:a1:17:67:ae:c7:0e:ba:9a:56:
5d:fe:08:c7:19:ad:9e:5e:93:ec:3a:27:22:4f:e5:
48:69:ae:d6:3a:82:73:1f:cb:d6:1e:16:f5:71:6f:
fc:2a:2a:eb:81:7a:6e:12:47:78:77:4d:1d:c9:9a:
b8:c9:9a:77:51:33:4a:ce:7f:83:6b:7c:ab:37:d3:
9e:c2:da:5f:d9:60:55:4b:e7:f1:c3:a2:83:81:c3:
8d:4d:15:5e:f5:04:67:af:b0:e4:a2:4e:53:56:a6:
93:36:96:46:59:a7:9c:4a:3f:47:cb:1e:54:27:56:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3C:58:35:50:51:D3:B4:76:29:4E:8C:F6:F7:68:5E:F9:4F:41:99
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FjxYNVBR07R2KU6M9vdoXvlPQZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
86.107.168.0/24
94.177.51.0/24
94.177.145.0/24
176.126.174.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
03:48:82:9e:e2:26:67:0c:06:85:7c:6f:65:19:81:3f:cb:35:
b4:8d:ed:b3:f6:c8:3b:87:2b:a9:45:ff:b2:f5:bb:66:a3:44:
79:f1:29:4e:44:1d:22:06:ab:a4:67:5c:ad:8a:28:9e:ce:78:
57:05:8d:46:b9:e8:79:14:7a:72:9d:09:f2:fc:4b:aa:aa:39:
59:14:6f:83:49:cc:d6:f6:57:0b:0f:77:b7:91:16:c2:5b:04:
67:70:02:f1:4d:b7:23:26:08:74:b6:d9:f8:1e:f6:36:f4:ec:
af:11:ba:9d:e1:8e:60:29:44:a3:61:6d:d1:2e:d9:10:ca:32:
c6:57:a9:f2:96:42:98:07:51:42:6d:74:ec:b9:b9:86:30:74:
91:81:e3:e6:9c:06:4c:f0:14:81:23:40:c7:ab:36:d1:b6:c5:
63:32:56:4e:32:cc:79:5c:2e:e4:19:4d:1b:a7:5e:6d:fd:9d:
b5:2a:72:e0:90:18:02:e1:42:b8:f4:ab:1e:38:13:fb:5c:bb:
b3:bb:11:a0:03:5c:ef:fa:ee:9e:bf:3c:fe:a4:6f:af:a8:40:
bd:57:ad:ad:09:dc:6a:f0:ae:a5:76:12:13:60:74:96:e2:21:
37:14:3f:b8:f5:6a:bc:a0:b1:fe:44:85:a5:c1:61:1a:c0:fb:
9a:20:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org