Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/FFSDyCtUsOOFItnlq2e8Yxu1a6Y.roa
File: FFSDyCtUsOOFItnlq2e8Yxu1a6Y.roa (raw, json)
Hash identifier: 1NR4jnD6MJC/GYV0p8cVnZwOV9qZIBp7MYq4Io8uBjw=
Subject key identifier: 14:54:83:C8:2B:54:B0:E3:85:22:D9:E5:AB:67:BC:63:1B:B5:6B:A6
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018613551A5A175705246B0D03A33900E0B5
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/FFSDyCtUsOOFItnlq2e8Yxu1a6Y.roa
Signing time: Thu 02 Feb 2023 18:13:09 +0000
ROA not before: Thu 02 Feb 2023 18:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 185.112.56.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.95.100.0/23 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
185.175.225.0/24 maxlen: 24
185.175.224.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.68.245.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
185.110.130.0/24 maxlen: 24
185.110.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 06:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:13:55:1a:5a:17:57:05:24:6b:0d:03:a3:39:00:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 2 18:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=145483c82b54b0e38522d9e5ab67bc631bb56ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:cd:59:f5:f4:16:04:9b:7b:6b:c7:64:92:
81:82:80:d6:d2:81:a9:c4:a1:f1:c9:f1:34:c8:35:
be:da:13:75:de:4c:fd:54:81:e7:67:6d:71:83:fa:
f7:bc:be:51:83:92:ba:2f:e0:86:20:d5:2a:a6:3c:
de:dd:d7:5e:9d:7c:84:72:f3:89:5b:79:52:f8:8b:
13:f7:44:5c:7f:ad:63:66:05:e2:4a:6c:5e:c2:c1:
98:4c:4c:28:cc:48:2f:2f:8e:ed:13:e5:c8:b7:17:
2f:e7:a8:95:9d:20:42:a0:2e:a1:2b:e9:cb:fe:34:
e8:1c:9d:9d:2c:54:62:77:2b:ce:51:fb:b7:92:4b:
61:4b:fc:bd:3f:3f:21:cd:a9:61:76:24:7d:be:b2:
fd:0e:e4:35:f8:f2:9b:99:c6:cb:88:86:20:66:24:
b3:72:7f:b8:21:2d:46:b9:81:55:23:6f:bf:75:52:
6d:13:ee:c9:3e:2f:bf:f1:7b:47:47:dd:37:53:6a:
fe:7b:11:28:52:d9:2b:a6:28:2e:40:a3:56:59:07:
71:d7:79:7e:c4:11:06:ab:11:6d:cd:e6:43:a1:d9:
6a:83:a9:97:a3:b9:d6:2a:18:db:ec:89:d2:9d:cb:
b2:91:e7:05:9d:95:27:7c:7a:2a:82:8d:b3:db:e3:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:83:C8:2B:54:B0:E3:85:22:D9:E5:AB:67:BC:63:1B:B5:6B:A6
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/FFSDyCtUsOOFItnlq2e8Yxu1a6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.57.0-89.19.59.255
185.68.245.0/24
185.95.100.0/22
185.110.130.0/23
185.112.56.0/23
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4a:49:7c:12:82:32:ec:06:a4:e4:4b:c0:ba:82:54:3d:6a:
e7:1b:90:1c:19:26:80:21:39:ee:2b:92:df:af:ff:64:14:93:
ea:fc:22:b3:1a:d4:53:f7:a9:36:38:71:71:a2:19:aa:cd:65:
a2:38:b6:8b:30:2b:b9:04:53:36:b8:89:80:20:84:8e:68:07:
10:1b:a7:35:2a:74:91:66:e5:17:83:59:41:a3:e8:a1:6d:1e:
d6:00:7d:13:ff:a8:0a:4f:ec:4f:de:fd:6e:58:26:1c:76:35:
96:6f:a5:2a:9a:8a:1c:53:da:c7:f0:7d:b6:ed:45:bd:89:10:
39:79:34:61:f0:a7:14:c5:28:37:f9:1d:99:46:e8:fb:36:5c:
68:f4:d5:fa:b2:40:d4:a4:0a:4d:f6:fe:ff:a6:f4:6c:1f:ab:
fa:07:e1:73:7d:fc:5c:6e:6c:32:99:3a:19:dd:14:d9:78:9d:
1e:03:71:eb:a2:9d:7e:c0:9a:86:8d:ee:f5:5c:1f:65:bc:7f:
dc:1f:29:de:51:1e:e8:d2:b2:f6:a3:d6:15:d4:b5:05:db:ab:
08:aa:df:c8:d8:ff:6a:7c:4e:d0:49:3c:66:d9:41:f8:50:35:
c4:b8:a0:b7:ce:6a:c6:1d:f3:31:f2:ec:32:45:2c:84:48:9e:
93:8a:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org