Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/_LeYjqVuniHDYAFQYEaXEd3Ca24.roa
File: _LeYjqVuniHDYAFQYEaXEd3Ca24.roa (raw, json)
Hash identifier: ZDXn2R8WsFbwrnoxcqVoVJCZR8vYq79K4QFWhqqU0SY=
Subject key identifier: FC:B7:98:8E:A5:6E:9E:21:C3:60:01:50:60:46:97:11:DD:C2:6B:6E
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018CC64A7DA749A238E19262F9F070F0F557
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/_LeYjqVuniHDYAFQYEaXEd3Ca24.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203847
IP address blocks: 185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
185.122.44.0/22 maxlen: 22
45.142.15.0/24 maxlen: 24
2a01:57e0:200::/39 maxlen: 39
2a01:57e0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 03 Jan 2024 09:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7d:a7:49:a2:38:e1:92:62:f9:f0:70:f0:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcb7988ea56e9e21c360015060469711ddc26b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:5a:3a:86:1c:10:7e:4f:7e:47:16:35:1c:
53:e0:65:13:24:c1:41:b0:e9:7c:b3:ed:9f:58:16:
fa:51:a0:a2:5b:35:0d:88:b3:35:f8:c0:50:2a:dc:
17:38:d1:69:fc:a6:f1:79:9d:65:89:1f:17:46:e4:
d8:03:00:3a:d1:71:0c:f7:9e:eb:ef:d3:a9:54:61:
2b:7f:94:d8:cf:d5:d6:51:90:e7:4f:55:dc:d8:45:
43:b7:d2:1b:e7:14:ff:fe:04:6b:a5:c5:7f:58:96:
f5:cc:f5:65:8d:1e:44:95:0b:dc:e2:b4:10:9d:6d:
34:16:23:14:a2:66:6d:e9:f6:b1:13:29:c1:f1:30:
5e:06:5a:2a:33:05:6a:57:ef:06:9f:46:72:fd:f2:
92:ae:85:9e:9c:c1:6b:e6:64:74:62:c5:5d:17:d5:
ba:fa:24:c5:ee:82:55:b3:9d:62:ba:4f:de:a1:02:
da:87:84:ce:13:32:19:0b:bf:97:7c:bc:f1:86:b6:
cb:e0:8a:da:66:73:15:81:cd:b6:e3:8c:ed:e3:6a:
78:62:28:36:a1:ae:ec:67:13:64:1d:5b:eb:2d:f2:
72:fb:b1:4f:9b:72:72:15:a1:b0:37:53:1a:c7:12:
16:e2:7a:f9:83:d3:94:77:f1:27:f4:4b:90:d4:51:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:98:8E:A5:6E:9E:21:C3:60:01:50:60:46:97:11:DD:C2:6B:6E
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/_LeYjqVuniHDYAFQYEaXEd3Ca24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:d5:e7:6b:8e:3e:08:04:de:07:d5:2c:11:e0:a4:7a:49:c3:
c1:4c:e7:d4:4a:41:1b:0e:9a:1d:f6:56:8c:4a:c6:cf:6e:ce:
04:93:15:88:31:70:5d:a2:5f:dd:6d:56:9b:fe:05:03:13:f4:
50:af:7e:8b:b1:1a:24:2a:af:2c:7e:14:9b:b2:4a:4e:b8:49:
ae:c0:b8:71:c9:2b:59:47:59:09:27:18:c7:c9:26:71:56:1f:
74:8b:8b:43:67:99:a6:af:e5:2c:a7:cd:84:e2:aa:20:bd:dd:
90:ea:c6:a9:0e:e2:5a:8a:78:aa:6b:a7:4a:b8:8a:fe:0c:57:
fb:9c:e1:44:11:95:fe:14:7b:05:97:45:b1:5c:9a:ba:09:6a:
7a:3e:c2:21:0d:d1:4a:a7:cd:0b:4e:d8:95:27:9a:4d:10:ec:
96:f4:15:99:c6:ba:95:c3:9e:1b:8c:b8:e6:79:5f:d1:77:ac:
22:bb:c3:71:59:59:60:9a:a9:d8:85:93:9e:36:ff:77:cc:45:
3e:f2:8b:55:43:06:68:c0:81:68:74:07:f1:99:a8:9c:d7:03:
c5:9a:da:03:05:52:24:3c:de:38:44:91:c6:a0:a3:41:ef:42:
93:07:b1:0d:62:e6:ad:d8:bf:60:86:bc:d0:0e:4c:d0:3a:8b:
c5:fc:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org