Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fm_WG-4xDcmUN-PHDQQTjDFNGCo.roa
File: fm_WG-4xDcmUN-PHDQQTjDFNGCo.roa (raw, json)
Hash identifier: 2+oIRI6a3bwO0hygywU9TO2Jcjw5DzcIJpg4lsVnwB4=
Subject key identifier: 7E:6F:D6:1B:EE:31:0D:C9:94:37:E3:C7:0D:04:13:8C:31:4D:18:2A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018682F5D2C823FC20B2C469FEB015FDF8DE
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fm_WG-4xDcmUN-PHDQQTjDFNGCo.roa
Signing time: Fri 24 Feb 2023 10:26:33 +0000
ROA not before: Fri 24 Feb 2023 10:26:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 45.147.50.0/24 maxlen: 24
80.66.198.0/24 maxlen: 24
141.98.199.0/24 maxlen: 24
94.124.118.0/24 maxlen: 24
185.200.65.0/24 maxlen: 24
185.200.67.0/24 maxlen: 24
149.62.45.0/24 maxlen: 24
185.194.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:f5:d2:c8:23:fc:20:b2:c4:69:fe:b0:15:fd:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 24 10:26:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e6fd61bee310dc99437e3c70d04138c314d182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:eb:53:9c:66:50:21:cd:e5:b7:5f:33:96:
28:db:0b:39:9d:de:7a:18:e0:aa:bf:0b:11:cc:ac:
9e:a9:2a:54:c3:c9:25:73:2b:de:a5:72:61:a0:87:
64:fa:f2:19:02:d7:45:6f:ac:df:70:ca:8e:73:05:
26:d8:0f:9d:ec:79:35:4b:b4:d2:23:6f:3e:22:c9:
74:b1:21:7f:22:68:b2:c5:27:99:51:85:50:4f:41:
97:84:cb:4b:58:98:1e:dc:42:87:e2:6c:66:64:e3:
97:56:6a:90:bf:e9:b5:33:d9:9f:eb:f3:9f:ce:b9:
33:f7:13:70:d2:e0:06:e8:aa:2d:2c:12:84:30:3f:
0a:02:3e:b5:7c:8a:79:9f:42:d8:78:9d:42:40:c0:
9b:d2:ba:2d:92:62:9d:ba:12:61:66:8f:07:ff:df:
79:0f:ac:92:45:82:df:c6:26:b3:ce:94:0e:d7:b0:
d2:2b:b4:b2:a7:a7:b8:48:18:49:58:78:95:31:e3:
a4:f7:75:22:62:4d:d2:96:9a:aa:f4:02:14:e6:af:
13:20:6b:e3:86:af:64:b1:3e:41:d3:32:e9:f0:b4:
73:67:62:9b:3c:92:f7:2a:41:79:e2:19:36:86:76:
ca:56:83:34:af:fa:22:62:cb:96:1d:9b:4c:f1:45:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:D6:1B:EE:31:0D:C9:94:37:E3:C7:0D:04:13:8C:31:4D:18:2A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fm_WG-4xDcmUN-PHDQQTjDFNGCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.50.0/24
80.66.198.0/24
94.124.118.0/24
141.98.199.0/24
149.62.45.0/24
185.194.55.0/24
185.200.65.0/24
185.200.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e0:ea:45:e1:4b:a3:96:4e:b0:6b:9c:3a:1c:57:2f:a7:56:
f2:a2:8d:f5:df:a0:58:cb:07:3b:b0:90:3d:89:62:78:e4:c2:
90:43:75:9b:1d:6f:35:45:9e:d2:99:f8:83:eb:47:6a:da:03:
5a:b8:04:02:ef:45:cf:73:9f:47:bd:f9:b3:34:ec:db:c5:bc:
a6:fe:dd:8f:da:87:1c:74:c9:ce:c6:0d:a6:d8:84:66:50:86:
59:d8:24:55:e3:d4:f9:90:a1:8f:3c:f3:b2:48:54:f3:d8:6f:
1e:15:a7:a4:1f:90:a8:0a:e2:97:02:ec:a3:57:da:e4:43:89:
5a:aa:58:38:ce:91:ab:5b:5c:72:3d:50:69:ee:3e:a9:cc:13:
e4:d6:ef:96:cb:79:9c:4f:a0:41:2f:85:bb:be:08:a2:61:c3:
8a:a3:87:92:f3:64:f1:c8:f9:22:0f:a8:f3:f8:83:47:42:05:
8c:f2:d0:60:c1:d8:41:4a:76:87:25:9a:fd:6b:56:1c:89:5c:
58:3f:28:89:30:fd:88:d2:b5:10:e4:84:7c:5e:52:ad:18:36:
10:27:ed:d7:3c:68:e8:cb:dd:43:53:7e:15:00:77:fa:2c:ed:
bc:04:02:1e:8d:79:f9:b2:f5:30:8d:49:f7:4d:d0:a8:1d:db:
12:dd:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org