Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/mWDqFYlmoZAmZXRbhVfwNhxS47I.roa
File: mWDqFYlmoZAmZXRbhVfwNhxS47I.roa (raw, json)
Hash identifier: Q1uwFjgzBTkta1b2TS6n8J4KpQh1oJLBJaObN2Yyc5k=
Subject key identifier: 99:60:EA:15:89:66:A1:90:26:65:74:5B:85:57:F0:36:1C:52:E3:B2
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018CC26D0148E46EC4B8BCD15529500C4240
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/mWDqFYlmoZAmZXRbhVfwNhxS47I.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203098
IP address blocks: 93.118.38.0/24 maxlen: 24
43.230.56.0/23 maxlen: 23
43.230.58.0/23 maxlen: 23
89.42.8.0/24 maxlen: 24
94.176.106.0/24 maxlen: 24
103.49.84.0/22 maxlen: 22
89.43.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 06:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:01:48:e4:6e:c4:b8:bc:d1:55:29:50:0c:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9960ea158966a1902665745b8557f0361c52e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:5a:1e:d6:84:d8:83:30:0e:df:c8:99:ba:
a8:ea:c3:cf:a2:0a:59:d2:bd:f2:23:ad:1d:02:8b:
95:c7:df:89:76:40:c4:b9:7d:6f:69:0a:22:2a:86:
70:60:22:f6:16:b8:93:c5:a9:2a:f9:1c:a7:5a:d2:
29:f8:7a:3b:d0:c8:95:e1:18:2a:1a:9b:07:18:07:
66:86:43:17:f5:11:33:ab:3c:2e:25:40:8c:4c:51:
29:fb:b1:99:3c:40:08:4d:a6:a8:c4:8e:65:1e:16:
8a:2c:f6:54:24:7b:f9:0e:8e:d5:ca:e3:81:31:10:
29:17:b5:71:fd:3c:25:d9:6c:20:9c:81:86:c0:5e:
cf:cb:3d:09:9d:fa:b7:41:34:2b:7c:12:d0:0f:38:
8e:c4:f3:44:58:6e:de:43:28:65:69:89:a2:e5:14:
20:2f:59:67:86:85:be:a6:05:0b:f6:18:8f:c6:4a:
4a:75:99:d9:bc:4a:54:05:ed:12:dd:78:88:d6:d3:
6b:3e:a4:20:a0:57:72:02:2c:ba:b6:5a:8b:04:1f:
20:0a:2c:b5:cc:2e:65:bc:31:e8:4d:6d:8f:e9:59:
33:05:a4:08:8f:8a:d6:71:be:c6:d9:f7:5b:69:22:
df:cb:3e:84:4e:88:48:53:6f:45:d0:84:c3:e7:a5:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:EA:15:89:66:A1:90:26:65:74:5B:85:57:F0:36:1C:52:E3:B2
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/mWDqFYlmoZAmZXRbhVfwNhxS47I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.56.0/22
89.42.8.0/24
89.43.32.0/24
93.118.38.0/24
94.176.106.0/24
103.49.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e5:fa:05:10:ef:6a:3d:9b:b6:d2:09:88:f9:a3:77:c9:53:
66:f4:93:61:50:0d:d2:d8:10:37:37:7e:84:de:eb:86:7a:96:
51:04:3c:71:8b:23:f9:b7:c4:e5:32:53:eb:d8:7f:9d:e9:29:
44:d5:70:15:2f:f6:d6:a0:4f:f5:ac:01:84:0a:f5:ca:4c:08:
67:cc:80:d9:cb:ee:88:24:3e:cc:f9:32:bd:a7:1f:c6:b5:15:
e1:58:07:6d:b3:a2:ce:fc:f5:5d:b4:dd:e6:11:97:df:a2:90:
7a:55:3a:b6:29:04:5f:bd:69:6a:43:28:00:e1:66:b4:96:39:
18:b9:a6:34:80:15:5e:ce:a2:6e:32:48:40:5f:e9:48:9b:c1:
38:50:af:e1:7f:a2:25:5a:5c:44:22:63:7f:4e:4a:a0:21:9e:
b8:b6:05:23:ca:f2:70:8e:69:30:f6:3e:e9:f6:d0:7f:12:39:
f8:b3:71:58:2f:6c:79:06:d4:9b:7c:c5:bb:aa:3a:03:09:f9:
5d:51:6e:6b:eb:43:20:b4:ee:d1:89:8e:04:85:d9:cb:17:a8:
47:d9:06:5e:39:d3:9c:56:36:b5:ea:fc:53:7b:70:56:90:cc:
d0:e5:ee:dd:0b:a8:f2:39:05:aa:15:31:94:79:ab:d2:43:4f:
51:5c:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:15:52 2024 by rpki-client on console-ams.rpki-client.org