Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/FdadFiIKXDrhIzq8M-UIzx_RBpY.roa
File: FdadFiIKXDrhIzq8M-UIzx_RBpY.roa (raw, json)
Hash identifier: fBZ7YSC4uvh31nv53Lcd0x7vsCB2KeToyASZ4A+xzcA=
Subject key identifier: 15:D6:9D:16:22:0A:5C:3A:E1:23:3A:BC:33:E5:08:CF:1F:D1:06:96
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01878ECD721B2226BD15B6F718A7660AFC9E
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/FdadFiIKXDrhIzq8M-UIzx_RBpY.roa
Signing time: Mon 17 Apr 2023 10:40:41 +0000
ROA not before: Mon 17 Apr 2023 10:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 185.12.0.0/22 maxlen: 22
185.120.176.0/22 maxlen: 22
94.177.28.0/24 maxlen: 24
77.81.49.0/24 maxlen: 24
89.37.107.0/24 maxlen: 24
130.93.0.0/17 maxlen: 17
185.137.72.0/22 maxlen: 22
130.93.128.0/18 maxlen: 22
193.84.89.0/24 maxlen: 24
45.81.212.0/22 maxlen: 22
93.114.176.0/22 maxlen: 22
94.177.144.0/24 maxlen: 24
185.9.248.0/22 maxlen: 22
185.133.128.0/22 maxlen: 22
185.122.160.0/22 maxlen: 22
2a02:ec00::/29 maxlen: 29
2a0e:4180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:cd:72:1b:22:26:bd:15:b6:f7:18:a7:66:0a:fc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Apr 17 10:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15d69d16220a5c3ae1233abc33e508cf1fd10696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:29:a3:b5:bf:6c:a9:b3:30:1e:28:85:77:
b2:a6:57:66:24:3e:9e:84:47:6b:a8:91:0f:39:c0:
f6:1b:aa:91:46:91:2f:51:ff:71:20:ad:e8:ed:47:
6a:82:96:e4:79:c4:7b:6a:95:fe:8e:2f:8d:96:ae:
bc:ff:09:fe:0b:5e:70:a8:59:50:b4:08:0f:57:77:
d6:c9:4c:81:6a:1a:12:cb:d0:b4:18:55:73:35:c4:
1d:5c:e2:bc:70:17:30:d7:a6:15:ad:b4:64:8a:c8:
37:8f:52:30:7e:07:89:ba:dd:01:e7:69:1c:3d:4c:
03:a1:87:e9:d8:8d:9d:4e:5e:ec:8a:38:4b:0c:61:
2a:6e:62:46:3f:5a:58:c6:01:2c:f7:2d:d4:fc:0e:
90:64:c8:e5:14:e5:47:1d:46:74:59:ab:e4:b3:9d:
57:98:d8:62:59:ba:c0:95:76:9a:84:cb:d7:32:4d:
e1:54:79:9d:e1:91:53:f4:6c:67:91:eb:5b:85:62:
62:7f:5d:49:6a:ef:eb:cd:35:66:1f:78:aa:ad:3c:
9b:d2:81:29:f8:72:c0:ba:22:bb:d3:49:f3:e6:b5:
2c:59:41:de:33:d5:26:ce:63:72:35:9e:08:a5:d1:
c6:d3:c5:52:c0:83:8e:ef:9a:45:75:0c:1e:ab:2a:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:9D:16:22:0A:5C:3A:E1:23:3A:BC:33:E5:08:CF:1F:D1:06:96
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/FdadFiIKXDrhIzq8M-UIzx_RBpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.212.0/22
77.81.49.0/24
89.37.107.0/24
93.114.176.0/22
94.177.28.0/24
94.177.144.0/24
130.93.0.0-130.93.191.255
185.9.248.0/22
185.12.0.0/22
185.120.176.0/22
185.122.160.0/22
185.133.128.0/22
185.137.72.0/22
193.84.89.0/24
IPv6:
2a02:ec00::/29
2a0e:4180::/29
Signature Algorithm: sha256WithRSAEncryption
3b:96:82:a3:98:f3:14:6f:16:ad:b9:66:5f:24:06:0d:44:05:
bd:ba:de:52:1d:18:3b:c3:b2:41:24:cf:fe:d2:8c:00:f6:a0:
1f:3d:d2:c7:c7:59:3a:f6:da:f6:c8:b0:8b:fe:46:ec:ac:09:
4e:34:1f:92:4c:d7:43:72:8d:b2:aa:03:b6:df:53:80:c8:b4:
3b:6b:d1:9b:83:7c:f1:4a:33:0d:6f:c6:f0:c4:1c:ac:e1:15:
2f:24:d6:61:73:8c:6d:12:2c:f4:62:6f:ee:6a:d4:8a:f5:25:
70:42:ec:a2:b6:01:f7:c7:a2:00:ca:ba:3d:99:2c:ff:f1:d3:
0e:8b:ba:9a:6b:50:99:c4:36:f3:0c:f8:c3:44:bb:c3:40:57:
21:72:86:f9:87:7b:fe:be:8f:eb:20:1f:aa:5e:f4:82:fe:69:
0b:02:88:30:a1:a1:36:a9:fa:fb:59:97:2b:d3:ff:bd:8e:73:
6d:29:74:b8:09:d9:d9:4c:e8:72:d9:eb:7c:0e:95:3c:cc:e9:
fb:1d:ef:43:12:ea:8f:fa:0b:12:f1:b7:c6:4a:bd:e6:da:b1:
81:4f:1b:d9:13:5a:e8:75:54:60:8d:9b:a1:43:ab:71:58:de:
72:ac:ca:28:dc:70:0f:c1:be:02:1c:74:86:2f:17:10:8c:eb:
3f:7b:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org