Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/kiPHXYc5Kq8gXBF1pQk5vQCd9K0.roa
File: kiPHXYc5Kq8gXBF1pQk5vQCd9K0.roa (raw, json)
Hash identifier: 8kqoOc1D6B6P28CnDAzAcj2Txs/1fvtp+DmGrotAMTY=
Subject key identifier: 92:23:C7:5D:87:39:2A:AF:20:5C:11:75:A5:09:39:BD:00:9D:F4:AD
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018FE88EDE03930F7FBA7304C9404B19DBB5
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/kiPHXYc5Kq8gXBF1pQk5vQCd9K0.roa
Signing time: Wed 05 Jun 2024 13:20:28 +0000
ROA not before: Wed 05 Jun 2024 13:20:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.251.60.0/22 maxlen: 22
86.104.215.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
162.218.158.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 07:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:8e:de:03:93:0f:7f:ba:73:04:c9:40:4b:19:db:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jun 5 13:20:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9223c75d87392aaf205c1175a50939bd009df4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:22:19:b0:a7:e3:fe:dc:62:88:00:9b:e9:
db:c7:ca:4a:88:00:f6:a9:85:6c:3e:cc:21:9f:12:
9d:7b:07:c4:4c:a6:92:d3:29:e3:82:7b:89:ae:d4:
51:e1:5f:af:dc:39:b7:81:c5:c8:16:39:c1:95:ad:
4d:7e:5f:45:63:ab:98:7d:e3:da:1b:e2:2c:e3:44:
5a:b5:5c:ca:01:92:9e:5c:50:f8:0c:9b:fd:0e:78:
63:67:8d:f4:7d:b9:3b:96:f8:fe:2d:8b:27:aa:da:
d8:6b:6d:44:20:32:a0:26:4b:de:71:0f:9b:47:3d:
df:1b:79:d0:0c:de:e9:8c:22:cc:30:01:dd:40:10:
67:86:bd:cd:9f:78:70:fe:f7:a5:9e:27:7e:27:1e:
ac:44:57:ba:01:9d:5c:74:95:53:a1:d5:d2:2e:b7:
6c:0c:61:4d:f8:52:f2:0d:5e:4d:2d:62:a3:a6:5d:
af:ff:ea:86:97:b2:da:c1:27:da:d4:6e:0a:e1:72:
0e:9c:9c:94:99:b4:36:66:17:08:44:ec:4f:a2:c8:
bf:84:8f:8c:35:28:9c:0c:8e:80:c2:9c:01:04:1b:
1f:6e:d0:d2:e4:7b:96:9d:ef:45:64:17:c3:c4:0a:
b4:f2:3d:15:dd:97:bf:91:1e:c5:24:46:1d:89:6f:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:C7:5D:87:39:2A:AF:20:5C:11:75:A5:09:39:BD:00:9D:F4:AD
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/kiPHXYc5Kq8gXBF1pQk5vQCd9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.60.0/22
86.104.215.0/24
89.32.204.0/24
89.33.83.0/24
162.218.158.0/24
194.26.149.0/24
212.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4c:5b:67:aa:e8:69:f7:5f:6b:52:20:4c:d0:d9:e3:cb:1c:
76:c1:cc:c2:6a:cb:25:05:6f:1e:53:5c:a6:05:32:74:24:0d:
65:c3:05:39:9a:b7:c0:dc:44:92:d0:59:b8:15:1c:83:6e:4f:
d2:f2:bd:c9:bb:01:87:30:7b:9a:0e:c4:a9:7f:a5:45:13:2e:
99:24:ac:4a:85:94:ea:b1:f1:f5:fb:c5:ea:a9:2d:37:53:fd:
7b:3c:fe:09:3e:8f:d9:2a:8b:08:27:31:b4:54:be:b7:2a:c3:
89:98:98:cf:74:b5:4f:d0:75:e2:12:be:10:fb:88:ee:33:7e:
57:62:78:87:45:7e:03:9d:bf:00:d3:f7:74:a1:53:c2:2c:7b:
47:a1:45:2a:f8:26:3e:95:c3:f0:d0:70:fb:62:c2:7e:ae:2d:
0b:85:2b:6c:fc:4b:5b:71:71:1c:52:67:d2:bc:11:f6:9f:77:
71:d2:89:47:a7:04:23:6d:9d:8b:77:07:b2:14:c9:50:34:1d:
95:23:b9:39:57:0a:b6:36:f1:d4:bf:e2:87:55:de:60:f6:c0:
f6:a7:01:51:1c:96:16:21:34:1c:34:d7:c9:84:d0:49:12:a5:
12:57:e3:0e:ef:0e:1e:f7:40:76:d5:05:91:57:04:8c:ff:a7:
4f:4c:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org