Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/FZBs-XiLDeWJ5aTItPXxNu7Xzpc.roa
File: FZBs-XiLDeWJ5aTItPXxNu7Xzpc.roa (raw, json)
Hash identifier: b4T5BvA81dEB8ElpdVi4hUo3lNvOB+Zwv1/5R0+869I=
Subject key identifier: 15:90:6C:F9:78:8B:0D:E5:89:E5:A4:C8:B4:F5:F1:36:EE:D7:CE:97
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 018CCA29397155506072885163EBD79443BE
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/FZBs-XiLDeWJ5aTItPXxNu7Xzpc.roa
Signing time: Tue 02 Jan 2024 12:32:28 +0000
ROA not before: Tue 02 Jan 2024 12:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42228
IP address blocks: 77.108.128.0/18 maxlen: 18
45.137.48.0/22 maxlen: 22
77.108.154.0/24 maxlen: 24
77.108.158.0/24 maxlen: 24
77.108.160.0/24 maxlen: 24
2a00:6300::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:39:71:55:50:60:72:88:51:63:eb:d7:94:43:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Jan 2 12:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15906cf9788b0de589e5a4c8b4f5f136eed7ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:02:04:6a:cf:ef:ab:e6:26:c8:53:f2:01:
36:76:d5:5c:97:88:2f:22:80:fa:a9:77:f7:1b:cf:
53:0a:a2:87:d0:28:64:98:32:06:71:20:d9:23:86:
1e:1e:89:64:bc:48:fa:8e:bd:c2:88:13:85:67:de:
c7:5e:03:2a:01:7a:9e:eb:01:f3:3a:57:6b:08:49:
3a:96:19:f2:28:70:19:f7:82:ca:97:f6:7a:82:62:
85:f7:11:2a:b5:75:34:61:64:50:99:3e:35:2e:d2:
56:78:71:88:16:e6:74:fa:8a:b4:de:b7:09:72:8c:
01:1e:f3:10:dd:ba:5b:37:c7:64:8c:2b:4e:2a:8d:
e5:ec:d1:06:33:43:67:f4:fb:3e:f4:3d:4f:61:50:
6d:34:56:00:55:53:54:75:7c:ec:b4:9b:25:90:ec:
79:6a:04:d1:0d:13:07:83:2d:5c:78:fb:62:9f:6b:
e1:dc:77:a1:46:1c:dd:da:90:03:b9:23:b2:52:4b:
c4:f5:7b:6c:f0:fe:12:d1:70:48:b3:d0:7e:1a:32:
c9:ab:69:66:01:54:df:ff:66:f4:28:3e:94:63:65:
fb:21:3f:dc:ab:eb:cb:5c:24:59:9e:e3:61:29:66:
4c:c1:99:bc:fa:87:cd:4c:85:24:d8:d0:74:70:06:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:6C:F9:78:8B:0D:E5:89:E5:A4:C8:B4:F5:F1:36:EE:D7:CE:97
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/FZBs-XiLDeWJ5aTItPXxNu7Xzpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.48.0/22
77.108.128.0/18
IPv6:
2a00:6300::/32
Signature Algorithm: sha256WithRSAEncryption
7b:cc:b8:11:ca:b8:48:8d:1a:e1:54:d2:9d:c4:db:cc:d9:45:
5e:ad:7e:b4:63:e5:8c:77:0d:f8:19:3b:90:9d:e0:bd:95:f5:
53:99:c6:04:4b:23:dc:99:ec:c3:91:5a:49:79:5c:e2:15:42:
46:11:ac:f0:f3:42:f8:f0:0c:ef:48:91:0b:35:98:ef:5a:33:
51:6e:15:07:25:bd:38:b2:3f:94:88:88:2b:c7:86:00:ce:f7:
6e:c7:d8:cb:da:72:42:ab:34:97:31:f6:5a:9c:41:49:70:1b:
72:21:d1:25:dd:fc:da:c4:de:2b:2c:6e:07:ce:a7:31:9e:bf:
fa:7a:c9:66:e1:fc:92:69:a8:a7:73:d2:3d:41:ba:e1:c0:4c:
0c:f6:8a:3a:79:b6:fe:7e:30:86:e9:bb:c0:e5:32:10:95:f9:
c0:bd:6c:a9:3d:ee:c6:11:45:c9:be:28:73:ce:83:f0:8d:a2:
54:6e:11:62:68:a2:39:bd:15:d7:8b:00:ce:63:69:7d:f7:42:
a6:27:59:5b:f6:40:4d:3d:88:5b:61:f3:79:94:29:31:60:35:
e7:ee:ef:72:e1:7f:fd:a1:a4:28:cc:94:1d:da:1e:95:0f:54:
3b:69:57:e4:e8:2a:f7:8d:c8:4f:1d:2e:d0:9b:18:13:5e:cd:
25:88:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:47 2025 by rpki-client