Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1-8Z8tnxSKHkGJXwsLBzD_Pm8jF4.roa
File: 1-8Z8tnxSKHkGJXwsLBzD_Pm8jF4.roa (raw, json)
Hash identifier: RXzh/9+NRTD2nWc+WbJvCTPx20JHAvhRhEHARBjZUS0=
Subject key identifier: FB:C6:7C:B6:7C:52:28:79:06:25:7C:2C:2C:1C:C3:FC:F9:BC:8C:5E
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0190B5D72582B5412B8462396EABBC033DB0
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1-8Z8tnxSKHkGJXwsLBzD_Pm8jF4.roa
Signing time: Mon 15 Jul 2024 10:01:34 +0000
ROA not before: Mon 15 Jul 2024 10:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50149
IP address blocks: 45.150.188.0/22 maxlen: 22
62.122.216.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
89.104.119.0/24 maxlen: 24
89.104.125.0/24 maxlen: 24
94.154.128.0/22 maxlen: 22
185.228.88.0/23 maxlen: 23
185.228.90.0/23 maxlen: 23
2a00:ab01::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 18 Nov 2024 07:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:d7:25:82:b5:41:2b:84:62:39:6e:ab:bc:03:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jul 15 10:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbc67cb67c52287906257c2c2c1cc3fcf9bc8c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:48:da:27:cf:15:8b:1b:62:07:06:40:16:
d4:5f:3e:04:39:71:6a:a6:ef:ec:2f:cd:99:12:65:
a7:4b:ea:0e:34:9a:93:0b:f8:8d:f1:ee:ec:d0:ed:
ee:6a:de:80:a6:28:22:a2:a8:63:31:1c:95:67:ad:
65:cf:22:0f:b1:ff:05:68:b6:c0:13:35:ff:0f:08:
bd:c5:1e:fd:3f:76:63:12:45:e3:28:a7:83:c8:4d:
b0:0f:e7:0a:ed:70:2f:e7:cf:26:f4:01:40:72:09:
2d:f4:ab:08:57:69:11:e2:94:19:2b:e1:fe:07:41:
d9:da:b5:47:77:d4:4e:6c:68:70:ab:31:c7:de:0e:
4f:7d:36:23:b4:68:1f:38:2c:cc:37:36:f9:9e:c1:
8d:2a:c9:69:7e:a5:f2:e5:fe:37:da:63:63:65:14:
fe:25:25:d4:50:a4:35:17:d8:58:60:8b:bd:6b:1a:
ab:9e:47:1f:50:5b:82:52:0c:0d:4a:a5:e2:e4:be:
19:54:ae:f9:2c:26:85:cb:6a:3e:70:17:40:1c:5f:
ed:35:8c:1f:5a:b9:a2:41:96:24:14:eb:6b:d9:d2:
c3:fb:8b:2c:71:f7:35:d1:af:37:b1:ad:ea:00:df:
39:33:fb:f4:f2:de:68:34:16:95:54:3f:82:4e:43:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:7C:B6:7C:52:28:79:06:25:7C:2C:2C:1C:C3:FC:F9:BC:8C:5E
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1-8Z8tnxSKHkGJXwsLBzD_Pm8jF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.188.0/22
62.122.216.0/22
89.104.107.0/24
89.104.119.0/24
89.104.125.0/24
94.154.128.0/22
185.228.88.0/22
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
48:04:ba:dc:3f:6f:2c:11:57:50:fb:3e:1e:bf:1d:bd:0f:95:
aa:e8:98:33:01:6d:cb:81:ff:fe:95:cb:08:01:6b:13:52:16:
4e:87:82:d9:ea:c6:6b:32:a7:27:16:d0:99:de:9a:48:89:52:
58:1d:37:78:7a:6a:9b:e3:b6:fc:73:d1:ed:12:bb:05:5e:00:
81:ab:fa:ec:f2:3c:8d:77:da:6c:ae:b2:5f:32:38:a3:c8:38:
ce:04:f1:72:5c:a4:15:d5:8d:d5:6a:42:fd:7a:2f:a8:2e:b4:
e5:dd:bc:97:f3:be:8b:4d:e3:c1:97:4d:c2:2f:00:23:1a:87:
8b:4d:50:9b:b8:e7:ad:8a:78:5a:5a:bf:75:1c:68:8e:5e:2e:
6f:5b:42:f8:80:9e:15:84:0b:64:0e:3e:5b:05:23:e9:04:6e:
c5:53:57:bf:43:b5:1e:ad:ea:c4:08:7d:df:c9:ae:4f:51:55:
2d:37:d8:6c:7e:c7:55:55:7a:4b:78:3f:29:ce:b0:8c:f9:3b:
0b:53:a8:d0:dd:a6:ea:e1:1a:54:f6:fb:f4:3d:bf:7a:73:99:
c9:c4:1a:9b:41:63:01:eb:49:c9:cd:60:65:75:a8:97:ab:ce:
89:4d:95:1f:eb:e6:93:94:b1:f1:fa:3d:99:2b:a7:48:f3:06:
b8:96:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 10:07:13 2024 by rpki-client on console-fra.rpki-client.org