Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/FTHT9ZCQSL8MfDHricXE77EiPUA.roa
File: FTHT9ZCQSL8MfDHricXE77EiPUA.roa (raw, json)
Hash identifier: 69wt6PWLGSQRtPJztsYZnuYuLYBlT/KhNdOUkCpgx2E=
Subject key identifier: 15:31:D3:F5:90:90:48:BF:0C:7C:31:EB:89:C5:C4:EF:B1:22:3D:40
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0192FB7CEDC1F2691301880FDE339A98697C
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/FTHT9ZCQSL8MfDHricXE77EiPUA.roa
Signing time: Tue 05 Nov 2024 08:42:01 +0000
ROA not before: Tue 05 Nov 2024 08:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 195.216.164.0/22 maxlen: 22
213.182.195.0/24 maxlen: 24
213.182.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 05 Nov 2024 12:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:7c:ed:c1:f2:69:13:01:88:0f:de:33:9a:98:69:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Nov 5 08:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1531d3f5909048bf0c7c31eb89c5c4efb1223d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:ab:13:1c:44:00:63:d0:ba:ce:c3:e3:c1:
ac:74:1d:1d:13:87:53:b4:1e:75:01:74:38:c9:b5:
7a:fd:bd:a4:87:20:f0:f7:7e:43:82:a2:a0:07:44:
53:e1:83:c5:36:40:f6:34:65:ab:c9:8a:38:86:64:
4a:46:1b:a3:71:07:59:43:d4:09:6f:c6:4b:6f:09:
24:ac:99:b4:2a:2d:55:99:73:60:e5:4c:17:24:21:
45:8c:00:80:84:77:46:b7:cc:4f:fb:88:7a:de:a0:
6c:66:ee:07:9c:ca:7d:e1:38:de:3c:9a:25:58:f7:
f8:51:eb:38:02:24:43:eb:de:18:21:8e:07:22:4f:
d8:81:42:7c:b0:fa:47:9a:d7:31:1e:58:85:39:a3:
6e:cc:96:fb:28:3d:69:71:dd:bc:aa:9a:1a:98:49:
e8:c4:da:27:22:e0:fc:6f:a3:2e:2b:bc:d6:39:86:
0a:00:5f:f7:98:32:a8:48:64:11:89:a9:8c:b3:9d:
de:33:57:ae:cb:79:bb:d3:85:82:7f:a4:03:b2:fe:
25:c8:a6:62:44:75:a0:a9:21:a5:53:a1:e4:4c:05:
e4:1e:02:76:7e:91:28:b2:a0:29:a4:81:72:3b:c7:
b2:1d:b1:dc:ee:c3:41:1e:7d:cf:ec:b3:ab:87:c9:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:D3:F5:90:90:48:BF:0C:7C:31:EB:89:C5:C4:EF:B1:22:3D:40
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/FTHT9ZCQSL8MfDHricXE77EiPUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.164.0/22
213.182.195.0/24
213.182.212.0/22
Signature Algorithm: sha256WithRSAEncryption
93:4d:0f:45:d6:0d:4b:10:2e:82:d3:d6:5b:f6:6b:18:dc:35:
d9:8e:31:21:b3:bc:f3:96:12:91:b5:a2:07:47:09:b6:3c:94:
69:60:0b:d2:c5:8a:8d:67:f3:d7:64:07:61:b1:10:bd:35:94:
66:ba:97:37:7f:36:88:e1:68:54:cf:54:84:26:2a:2e:8f:bc:
bc:fe:3f:7f:d5:bd:ee:3a:29:28:04:3e:d5:52:bb:15:30:46:
d6:be:08:2d:1e:b6:ae:f9:fa:ad:74:8f:cd:de:45:21:8a:c6:
51:9d:ce:ed:84:2b:65:ef:ec:45:d7:b5:99:af:ec:82:93:b1:
b6:31:02:4a:a8:bb:8e:7e:91:d0:aa:58:87:27:bd:1e:3a:bc:
59:82:82:44:55:86:60:91:b5:69:49:64:03:ff:73:04:3a:8c:
1f:11:15:71:8a:6f:96:70:04:2c:3a:e1:cc:fd:b5:4e:ec:a4:
20:2c:27:fe:65:b0:29:31:68:4b:49:ba:c1:96:90:ee:a2:40:
92:e7:da:86:a9:8f:75:e8:e5:3e:65:75:71:75:c5:66:60:fb:
02:69:71:4a:3c:cf:df:0d:22:b8:c6:8b:3c:02:4e:bc:81:79:
6e:89:76:57:65:c6:1f:3f:09:5f:5c:4a:cb:87:46:40:a2:19:
74:6b:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:11 2024 by rpki-client on console-ams.rpki-client.org