Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/FIzW9OrEe39HOV92ZmT_tIZHueY.roa
File: FIzW9OrEe39HOV92ZmT_tIZHueY.roa (raw, json)
Hash identifier: LofPOq1P7ykZz9YcXivWjoXeT92cUyNcJPQ8eZ71dc0=
Subject key identifier: 14:8C:D6:F4:EA:C4:7B:7F:47:39:5F:76:66:64:FF:B4:86:47:B9:E6
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 018FE2CDC687582D22F3B332B7AEE5D28577
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/FIzW9OrEe39HOV92ZmT_tIZHueY.roa
Signing time: Tue 04 Jun 2024 10:31:27 +0000
ROA not before: Tue 04 Jun 2024 10:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42343
IP address blocks: 91.150.0.0/18 maxlen: 18
185.141.96.0/22 maxlen: 22
2a04:b080::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 12 Aug 2024 05:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:cd:c6:87:58:2d:22:f3:b3:32:b7:ae:e5:d2:85:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Jun 4 10:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=148cd6f4eac47b7f47395f766664ffb48647b9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:17:39:f5:71:b7:41:e9:26:f7:52:04:14:
ab:7f:a9:d7:66:65:14:93:8a:f4:1b:8a:45:d0:9e:
f8:0f:c1:bf:04:23:0c:01:b2:46:c1:b7:de:f6:e3:
77:b0:c7:5b:6f:b3:99:8b:52:97:8f:55:6a:27:e4:
de:99:12:95:38:9f:d0:ca:04:b5:e6:c9:19:e8:7a:
2f:2a:06:57:da:63:e5:99:f1:88:bc:21:3a:ca:d0:
75:ea:93:b8:6f:f8:87:a2:62:e6:cb:b6:53:46:da:
34:d3:fd:65:7a:2e:06:39:9b:54:65:bb:93:64:c3:
3c:1c:be:97:ae:4e:95:13:cb:71:4e:26:81:cf:cc:
26:b4:d2:62:fd:92:79:1d:96:a3:93:47:3c:69:39:
15:86:8d:8a:cf:fb:74:4f:b3:7c:82:91:3c:ad:ab:
fc:92:4f:2f:5c:32:10:c1:72:b2:93:e8:4a:22:1b:
31:f5:da:b2:5a:ad:44:48:d6:2d:26:5b:1d:c7:83:
5d:8b:eb:a4:ae:0e:70:49:b6:51:c9:28:47:38:b6:
4f:6c:31:35:37:b6:50:ed:99:ab:b2:58:ec:19:10:
35:70:dc:e4:7b:99:94:2e:97:df:61:a6:22:81:90:
db:9d:0b:15:b2:1f:83:7b:d3:71:e1:ac:cf:5c:f0:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:D6:F4:EA:C4:7B:7F:47:39:5F:76:66:64:FF:B4:86:47:B9:E6
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/FIzW9OrEe39HOV92ZmT_tIZHueY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.150.0.0/18
185.141.96.0/22
IPv6:
2a04:b080::/29
Signature Algorithm: sha256WithRSAEncryption
52:9c:bf:71:9e:ba:9c:cb:56:cc:38:48:dc:4d:69:c2:f8:7d:
68:4b:5a:59:4f:80:89:a8:f1:24:4a:a7:47:3e:d9:4f:ea:17:
a0:76:cd:29:66:b8:ee:ff:d0:97:f8:2a:c7:d5:ff:25:63:aa:
f0:32:12:86:69:0d:37:aa:04:05:b4:13:ec:f7:f8:10:55:9d:
3d:7b:b6:7d:7e:28:77:ca:78:b3:3d:01:82:fe:e2:f3:b0:b1:
39:51:10:b3:61:98:03:40:42:8b:21:c3:7c:5e:e9:5e:30:32:
1b:1d:28:b2:91:93:c1:ae:bc:f3:f3:09:20:ba:74:db:b5:0c:
5a:e2:55:65:eb:b5:2b:b9:0a:7c:ba:a1:88:5e:17:43:fe:ca:
e4:87:65:ab:11:14:22:29:ec:0c:cd:ad:e7:00:f4:26:53:64:
c8:e3:78:26:38:46:cb:8f:f2:1d:b0:42:d2:33:95:2e:04:2c:
95:b7:50:a5:2c:3e:be:d3:7c:01:26:85:c4:0f:ff:5c:67:03:
fb:5a:1e:2f:99:b3:ce:52:f1:a8:9a:67:4b:17:1e:fc:af:9a:
34:bd:4c:69:91:d3:bf:6f:18:ac:16:34:3f:0e:69:c4:b6:7f:
a9:2f:c7:72:76:83:f3:0b:6f:16:66:d9:20:2d:a9:33:8e:45:
70:41:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 07:06:50 2024 by rpki-client on console-fra.rpki-client.org