Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/FBeDX97PkyjuzswU1D6u5vBwRcU.roa
File: FBeDX97PkyjuzswU1D6u5vBwRcU.roa (raw, json)
Hash identifier: rgrkfz4wDGksTB6xsLrc93MAxebiu+3FvEgVP9ZfcTM=
Subject key identifier: 14:17:83:5F:DE:CF:93:28:EE:CE:CC:14:D4:3E:AE:E6:F0:70:45:C5
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0186359341B3EB43C09719CD08297B48B832
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/FBeDX97PkyjuzswU1D6u5vBwRcU.roa
Signing time: Thu 09 Feb 2023 09:48:08 +0000
ROA not before: Thu 09 Feb 2023 09:48:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 18 Feb 2023 10:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:93:41:b3:eb:43:c0:97:19:cd:08:29:7b:48:b8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Feb 9 09:48:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1417835fdecf9328eececc14d43eaee6f07045c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:ae:8b:fa:42:e7:05:9f:70:3e:7f:59:27:
e5:bf:99:5e:ed:31:fe:74:d5:44:91:d4:b5:78:cf:
d5:bc:b3:90:a5:99:f3:e5:58:7a:71:e2:61:6f:ac:
4c:33:c4:26:c4:3a:84:d7:92:3f:ea:7d:99:c5:49:
94:a6:25:51:a4:64:21:c8:37:7f:4d:96:e7:49:52:
01:ab:6a:d9:de:e2:3d:5b:0d:1c:0a:c7:02:c3:4b:
23:67:32:4e:ad:e0:53:8d:d9:8a:b5:4e:ea:76:10:
f7:f7:c8:4e:8d:de:87:8d:6a:18:e7:ea:05:f0:94:
bd:f4:23:19:99:2a:0e:d3:aa:9e:a1:01:a1:39:97:
f1:5e:03:24:4c:5c:c5:7f:06:87:44:bf:fc:50:7f:
15:ad:84:da:f2:3c:cf:93:d3:f6:49:3a:fb:87:e7:
2e:b8:0c:71:e8:a0:5c:15:2f:38:69:fd:a4:ea:35:
55:ef:d7:5c:5e:42:77:80:51:fd:26:89:64:92:43:
af:9b:5f:64:ef:96:79:19:5d:ae:fb:c0:9c:22:3e:
10:7d:35:87:1a:43:31:3c:b1:e9:d3:8b:cd:54:c1:
dd:01:46:92:24:f2:18:03:48:80:ab:84:c4:c9:9e:
5b:c1:41:ab:ab:7e:79:f5:57:40:44:52:59:c4:ad:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:17:83:5F:DE:CF:93:28:EE:CE:CC:14:D4:3E:AE:E6:F0:70:45:C5
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/FBeDX97PkyjuzswU1D6u5vBwRcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/24
193.164.4.0/24
193.164.6.0/23
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:07:fc:83:a7:1a:da:8f:e0:de:d1:ed:22:00:5d:68:53:b3:
4e:b7:6a:c6:4f:f5:4e:d0:58:8b:f2:5f:60:dc:50:54:0c:07:
8c:b3:03:4d:1b:38:17:e2:7a:b3:7a:36:8f:9d:e5:cc:01:70:
84:96:94:b7:55:67:30:47:69:f5:71:f0:60:e5:73:4c:6c:b7:
4d:ef:9c:fe:70:bf:41:e3:18:c1:d8:71:b9:58:1c:52:b2:e3:
63:b6:98:89:a6:bc:51:b5:60:20:6f:3e:1a:16:7b:df:f6:1d:
18:41:22:c7:60:c8:2b:ed:07:6c:b2:97:0e:35:ab:d5:06:86:
c6:71:f1:e9:c2:31:cb:80:0d:e9:27:85:6c:20:87:6b:b0:3b:
85:4d:f4:af:f8:78:b4:6b:b1:6e:ff:e9:5c:13:9f:ad:70:e4:
39:6f:de:1c:f7:f0:70:e1:f7:16:e1:6f:50:31:75:5b:5d:d0:
13:1d:2a:59:dd:27:01:d4:0f:dc:c0:dd:04:cd:35:5a:7d:92:
53:00:63:bd:0e:28:6a:f1:28:23:b6:d5:a0:b1:7c:ed:be:87:
17:c7:62:4b:33:e8:83:00:c9:bf:a6:3c:21:d3:b7:62:64:99:
06:b1:6e:b3:01:77:d9:6f:4d:67:6a:29:59:e5:dc:0e:d3:98:
4a:1f:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org