Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/FmwbeaFaaggaLG4Z1VjB_T7-_J8.roa
File: FmwbeaFaaggaLG4Z1VjB_T7-_J8.roa (raw, json)
Hash identifier: ScmPmI4+ZOs0EUpm+lJpevZdEpzGQbQ30GrGKqyKHHc=
Subject key identifier: 16:6C:1B:79:A1:5A:6A:08:1A:2C:6E:19:D5:58:C1:FD:3E:FE:FC:9F
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01898C0CA3AD9A53897E4A96E16DD7DCAF63
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/FmwbeaFaaggaLG4Z1VjB_T7-_J8.roa
Signing time: Tue 25 Jul 2023 07:56:25 +0000
ROA not before: Tue 25 Jul 2023 07:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264617
IP address blocks: 45.113.238.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 07:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:0c:a3:ad:9a:53:89:7e:4a:96:e1:6d:d7:dc:af:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 25 07:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=166c1b79a15a6a081a2c6e19d558c1fd3efefc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:9a:34:17:d3:56:7a:e3:57:66:63:a4:94:
db:5a:cf:dd:b5:ec:43:b2:ff:b2:e3:9b:10:fd:06:
3f:91:28:29:65:9f:02:fb:c8:a6:c3:f2:49:71:a1:
8d:0c:01:f9:f7:a0:ac:4e:ea:7f:7c:7b:24:8c:f1:
54:63:3e:26:9e:58:79:b2:66:79:59:d4:ff:37:d4:
5f:0c:73:1c:81:77:78:d6:43:6d:e5:59:97:60:84:
6b:0a:ed:70:e6:b6:e6:ba:7a:02:71:72:83:cd:62:
db:cb:d6:0c:70:80:01:b0:15:c2:80:14:b9:5c:4b:
3c:2a:42:77:0e:d2:c1:20:2e:9a:6f:84:f9:12:3a:
dd:df:85:43:2a:69:66:86:10:e5:4d:90:46:90:a3:
cf:22:79:6c:4f:0e:7f:55:a8:6d:69:04:09:26:e2:
b8:f6:cc:dc:e3:9e:96:71:ee:14:ba:d5:b1:f8:06:
77:ab:08:77:96:b8:7e:81:b6:4c:6b:c0:9f:41:e7:
8c:f8:6c:24:61:fa:b3:af:7b:93:eb:28:c2:4b:c4:
8d:e7:da:af:de:a2:98:bf:5f:9e:83:7a:86:59:aa:
f2:69:67:1c:1e:bf:26:8a:9b:2d:ce:cd:e7:a5:7b:
ec:cb:a0:31:23:89:c1:a5:e2:2e:0a:de:e9:1d:38:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:1B:79:A1:5A:6A:08:1A:2C:6E:19:D5:58:C1:FD:3E:FE:FC:9F
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/FmwbeaFaaggaLG4Z1VjB_T7-_J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.238.0/24
147.185.217.0/24
193.36.86.0/24
193.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
22:aa:5a:c6:23:0a:ab:1b:fd:00:5e:f6:0f:90:5d:f1:99:8f:
7a:4a:57:d9:20:46:7c:1a:b7:e8:5b:38:b7:d0:a9:8f:d5:c6:
32:ac:a3:ad:71:37:2f:7f:16:8f:3b:90:0a:8c:aa:93:c0:1d:
6e:40:5f:1d:4f:ca:e6:c6:03:a0:cd:8b:b4:74:0a:e1:db:72:
7b:e1:c1:aa:c2:c5:56:1f:ce:5f:05:f7:c7:52:37:87:e6:2d:
b9:35:76:c0:62:c0:dc:2e:23:23:8c:ee:03:0d:2a:c9:0d:c3:
a1:b5:ec:c8:97:41:9a:cb:26:d0:f1:7a:19:7b:a3:05:6b:8a:
d7:e2:d3:6f:67:f1:75:48:df:4c:a4:b2:b2:c3:af:0e:27:2b:
bf:2f:53:88:18:3e:66:8b:97:56:a9:a1:ec:64:46:81:d8:c4:
f2:5c:89:86:e9:7e:b0:bb:1e:6c:02:85:7f:f9:93:94:59:3b:
7b:28:f9:2f:c5:9f:43:c8:d8:22:ed:ae:1a:cd:5f:b4:1e:c7:
09:d8:d6:3b:b0:40:e8:00:76:3f:b4:07:84:20:ee:21:8f:98:
0b:9d:26:52:9b:8a:78:af:90:68:13:27:f9:75:cb:ad:a8:8e:
b4:2c:71:03:40:4f:d9:5e:98:af:26:dc:3f:44:42:be:33:6c:
6d:74:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org