Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/FkpmsbJxiJjv7Ti_CB86kGPvwOM.roa
File: FkpmsbJxiJjv7Ti_CB86kGPvwOM.roa (raw, json)
Hash identifier: rPUY85FEfWmmRXKsuoCVqhxrzKgXH33+Z36NLYHJcUc=
Subject key identifier: 16:4A:66:B1:B2:71:88:98:EF:ED:38:BF:08:1F:3A:90:63:EF:C0:E3
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018CC424839F328BD32B51C09EF353C74FF9
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/FkpmsbJxiJjv7Ti_CB86kGPvwOM.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34871
IP address blocks: 185.240.148.0/22 maxlen: 22
185.240.148.0/23 maxlen: 23
185.240.148.0/24 maxlen: 24
185.240.150.0/24 maxlen: 24
185.240.149.0/24 maxlen: 24
185.240.151.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 16:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:83:9f:32:8b:d3:2b:51:c0:9e:f3:53:c7:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=164a66b1b2718898efed38bf081f3a9063efc0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:17:85:d4:51:c3:70:95:ef:3e:c9:77:87:
c7:75:a1:0e:d6:a3:54:27:36:9d:14:12:e2:b6:84:
26:9b:64:91:f0:63:16:20:1c:fd:72:39:07:6a:79:
a2:25:ff:c0:29:d0:18:ed:8e:d4:13:6a:f9:d0:73:
04:94:3f:79:1d:14:b1:2f:fc:cc:65:d3:16:5f:52:
78:59:13:69:4a:7c:f7:e2:20:1b:06:b0:c6:7b:30:
ee:d9:2b:55:49:fc:a1:c5:bf:12:5c:ee:23:22:e3:
26:87:c6:0e:20:fb:58:f3:fc:d7:7d:02:c6:1e:22:
22:db:11:a5:4a:f1:49:95:de:ad:19:41:bb:3a:05:
6a:d3:52:31:36:9c:e8:92:e9:c8:19:bc:dc:8e:00:
41:91:c8:19:8a:67:e0:5f:b6:bd:40:c5:bd:76:a4:
df:cd:d9:bc:93:da:ef:5b:f1:03:ba:cc:74:97:a7:
ad:1d:ad:d9:ad:fe:da:34:8a:81:63:ff:b5:91:0d:
88:94:80:59:4b:e2:be:f6:bc:5b:88:a9:ff:5c:76:
d2:ba:6b:dd:35:7d:c4:29:ee:20:a3:00:28:a7:9e:
e1:3a:b5:b7:70:b2:f6:7c:4c:f6:09:82:28:b9:de:
02:2d:53:50:96:fe:c1:8f:f0:4a:4c:dc:1d:58:63:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:66:B1:B2:71:88:98:EF:ED:38:BF:08:1F:3A:90:63:EF:C0:E3
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/FkpmsbJxiJjv7Ti_CB86kGPvwOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.148.0/22
195.238.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:73:3b:90:1c:56:28:a7:66:82:b6:ba:9f:c9:d8:33:6a:4c:
11:22:1e:87:50:43:aa:df:5e:61:fa:3b:37:a2:7d:01:8c:92:
69:58:a9:d2:06:71:21:95:b1:b8:3b:d0:2a:c9:b3:63:39:e4:
47:af:05:2f:30:db:8f:2e:d7:d0:84:99:9f:5d:95:45:29:40:
1f:4e:8d:b9:78:89:d3:a6:6e:d7:27:f9:fc:88:2a:dd:c9:1e:
b0:db:a2:29:78:6e:2e:1f:4f:17:d7:9d:43:6d:5f:c2:27:89:
8c:ca:4f:4f:81:e7:33:59:47:92:dc:0c:b8:75:7b:10:fb:61:
aa:2f:08:6b:0e:5e:47:8e:22:4f:50:f4:fb:2d:91:dc:dd:50:
51:d2:b6:f5:b8:47:fc:3e:16:77:47:7d:13:ef:3e:57:57:8e:
bf:06:2c:13:aa:b7:8a:00:93:9c:b4:ff:b0:5a:f0:6a:15:3f:
19:7e:bb:e0:3c:8d:65:8d:67:ef:cb:ab:a3:e1:84:d9:6a:33:
94:d5:43:4d:35:5f:fa:2b:55:d6:b1:6e:b2:bc:3b:72:fd:22:
bd:71:80:99:e4:13:89:d9:83:12:b7:6b:54:4d:cb:17:19:fa:
12:de:6a:73:a1:5a:81:45:6e:68:4f:93:cc:ba:70:f5:43:63:
89:02:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:17 2025 by rpki-client