Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/faFSzhoX7QxVlIk2wIBiQhbMrsg.roa
File: faFSzhoX7QxVlIk2wIBiQhbMrsg.roa (raw, json)
Hash identifier: 59QQxBKnEL6kOyjUofmZlEMaRexvWZoW3+bFSiJoTlw=
Subject key identifier: 7D:A1:52:CE:1A:17:ED:0C:55:94:89:36:C0:80:62:42:16:CC:AE:C8
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0189632367F560AAAA159992F3E02CEFE3C8
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/faFSzhoX7QxVlIk2wIBiQhbMrsg.roa
Signing time: Mon 17 Jul 2023 09:16:52 +0000
ROA not before: Mon 17 Jul 2023 09:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 79.133.183.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 12:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:23:67:f5:60:aa:aa:15:99:92:f3:e0:2c:ef:e3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jul 17 09:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da152ce1a17ed0c55948936c080624216ccaec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:63:87:f8:30:82:0d:4e:0b:66:67:42:ed:
b0:ea:a9:ce:95:e8:7a:fc:0d:35:bd:56:df:25:5b:
dc:79:65:40:ac:c9:49:93:ed:2c:85:e9:65:58:ed:
65:14:de:3d:77:67:97:6b:54:c2:4d:24:30:83:9c:
d3:96:5d:c5:a6:d6:fb:8a:ef:db:58:fc:5a:1b:26:
0f:e0:2f:2b:6a:52:14:b6:4b:6b:04:5d:2a:f6:72:
bc:c8:b3:b1:ad:18:f6:ad:ea:7e:a1:23:07:39:17:
15:7f:d3:e3:03:a5:74:2e:d6:2b:79:b4:ed:0c:29:
72:55:af:92:69:d4:f4:04:d9:34:80:f8:41:80:f6:
df:47:c5:b4:68:83:a2:4c:7a:e3:46:47:0d:87:72:
ea:4a:de:8c:d6:2b:58:0d:9c:3e:c1:47:e7:96:30:
95:32:a2:d8:a7:44:71:70:01:cf:98:d3:26:d7:99:
f5:ee:69:f5:9a:98:f5:5c:b9:e6:7f:f8:32:93:31:
6b:f3:a2:36:3d:ad:82:65:28:ca:33:4c:3b:e2:80:
6a:d0:fc:f3:54:3c:0f:78:1a:67:90:fd:63:59:9b:
c6:99:a4:bd:a5:fe:1d:07:b2:58:5d:d0:ee:1a:05:
06:65:ce:ea:24:e6:65:16:8b:18:b3:c9:d8:af:d0:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:52:CE:1A:17:ED:0C:55:94:89:36:C0:80:62:42:16:CC:AE:C8
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/faFSzhoX7QxVlIk2wIBiQhbMrsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.181.0-79.133.183.255
91.200.84.0/24
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
193.187.96.0/24
Signature Algorithm: sha256WithRSAEncryption
22:80:3d:19:18:04:4c:ba:d3:48:7b:7f:13:1c:07:25:de:32:
05:09:25:84:b4:8b:f5:b9:78:90:09:a0:c1:66:d5:45:c4:e4:
52:42:6a:d7:12:a1:42:32:40:47:1d:e0:b6:4b:9c:a5:22:9c:
3d:bb:d1:e1:20:6f:d7:82:45:8a:41:5c:79:14:b5:52:a0:a7:
3b:23:0d:bc:d7:d7:db:19:ac:be:4d:c7:e6:b4:ae:f2:17:e8:
43:1d:5a:06:42:fc:89:8a:1a:7d:d0:c9:38:23:03:99:5e:c6:
62:4b:2f:af:63:a4:10:e1:63:ab:52:cb:2e:37:e4:05:21:62:
ad:78:b1:dd:dc:9a:75:63:cc:90:5c:2e:96:30:76:59:11:f4:
78:f0:b7:98:a9:e2:de:db:43:8a:4f:0e:71:b3:1f:e7:e1:67:
b5:b7:d7:de:7e:9f:be:8f:ea:17:68:3b:23:8b:d9:19:f0:fb:
88:c2:14:f7:5e:9b:a2:a0:73:f4:c5:5f:13:bc:70:79:3c:67:
04:23:24:da:1c:28:e8:87:0a:12:be:dd:6f:04:16:69:65:41:
8e:dd:15:4d:70:dc:96:cd:4c:02:32:c1:91:72:78:3d:75:22:
5a:43:12:8d:72:b4:21:53:b2:2d:25:0a:99:38:12:5c:d9:7c:
01:9a:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org