Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fbzQ87OwwH3whZxgvbzItllTkKY.roa
File: fbzQ87OwwH3whZxgvbzItllTkKY.roa (raw, json)
Hash identifier: bJ2OO0P8YufHjUL05M3umm2oNmBIrdk+g5eMGy3pYEo=
Subject key identifier: 7D:BC:D0:F3:B3:B0:C0:7D:F0:85:9C:60:BD:BC:C8:B6:59:53:90:A6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01909B1D6A8AD9C863518B1E96C0EE8EB31E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fbzQ87OwwH3whZxgvbzItllTkKY.roa
Signing time: Wed 10 Jul 2024 05:28:34 +0000
ROA not before: Wed 10 Jul 2024 05:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.83.29.0/24 maxlen: 24
45.88.20.0/24 maxlen: 24
45.88.22.0/24 maxlen: 24
45.89.36.0/24 maxlen: 24
45.89.38.0/24 maxlen: 24
45.92.2.0/24 maxlen: 24
45.134.138.0/24 maxlen: 24
45.143.54.0/24 maxlen: 24
45.145.46.0/24 maxlen: 24
45.146.187.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
87.247.148.0/22 maxlen: 24
91.190.96.0/24 maxlen: 24
91.190.99.0/24 maxlen: 24
91.190.104.0/24 maxlen: 24
91.217.250.0/24 maxlen: 24
178.239.205.0/24 maxlen: 24
185.184.135.0/24 maxlen: 24
185.205.189.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.240.75.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
2a0b:64c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:1d:6a:8a:d9:c8:63:51:8b:1e:96:c0:ee:8e:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 10 05:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbcd0f3b3b0c07df0859c60bdbcc8b6595390a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:d8:85:0e:91:0b:6f:a6:7f:85:92:c9:01:
b0:1f:15:26:96:9e:fc:cc:ec:d8:9d:9a:f0:74:a6:
78:b3:7f:6a:0e:cb:8e:60:0b:a0:37:8c:b2:58:db:
f6:f1:a7:57:77:90:72:1a:96:d7:ca:a3:3a:27:8b:
36:cd:d9:90:4b:df:da:1b:fa:94:44:42:d6:eb:f2:
7e:63:78:dc:8d:c5:71:b8:da:c1:8c:4c:93:5c:a4:
3c:32:0c:17:5a:91:6f:6a:45:15:cc:f7:66:17:4f:
0c:58:cf:59:16:02:08:d0:77:2d:18:02:ca:f8:f9:
48:d4:9c:14:be:58:de:27:90:3d:da:46:b4:88:0a:
55:ef:83:3a:bb:9a:3b:42:4e:9e:70:ab:ef:be:a5:
29:cf:2c:22:97:0b:82:07:d9:3a:83:88:69:dc:20:
d6:0b:18:e5:0a:bf:ef:82:12:3b:9d:c7:a5:d6:19:
a6:4c:bb:c0:1b:3c:b9:39:27:79:92:5c:3f:f7:76:
82:87:1c:b3:fa:02:1f:0f:00:d5:eb:fb:86:3a:8a:
1c:01:04:47:93:e1:d2:2d:13:fa:92:b0:0c:d4:c8:
f4:d6:d1:dc:96:ab:c7:dc:36:4c:6c:4e:a3:ba:e8:
a5:e2:f3:44:c6:64:43:8b:ce:cf:ed:77:69:88:c8:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:D0:F3:B3:B0:C0:7D:F0:85:9C:60:BD:BC:C8:B6:59:53:90:A6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fbzQ87OwwH3whZxgvbzItllTkKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.29.0/24
45.88.20.0/24
45.88.22.0/24
45.89.36.0/24
45.89.38.0/24
45.92.2.0/24
45.134.138.0/24
45.143.54.0/24
45.145.46.0/24
45.146.187.0/24
45.156.157.0/24
87.247.148.0/22
91.190.96.0/24
91.190.99.0/24
91.190.104.0/24
91.217.250.0/24
178.239.205.0/24
185.184.135.0/24
185.205.189.0/24
185.239.241.0/24
185.244.137.0/24
185.245.5.0/24
185.245.7.0/24
188.240.75.0/24
193.218.32.0/24
217.74.16.0/24
IPv6:
2a0b:64c1::/32
Signature Algorithm: sha256WithRSAEncryption
21:ce:68:80:d8:11:02:48:7f:d7:29:8e:93:be:b4:f9:ec:4d:
fc:80:43:ad:d4:3e:5f:e9:e6:85:e0:03:de:83:0e:02:48:02:
f8:f0:7c:f0:2b:10:2c:de:1a:60:ee:8a:d7:ab:ff:c0:68:e0:
9b:66:10:d9:9d:d4:c5:32:97:59:d1:f7:75:12:58:84:4d:1e:
8c:93:1a:2d:ef:f9:7e:21:49:e8:5e:df:1a:fb:ca:2a:ad:6e:
dc:de:db:a0:92:f9:a1:5d:0d:3f:ec:67:de:a2:c6:d1:3a:e8:
1c:63:0d:ad:ad:92:56:59:25:70:02:05:ff:11:e4:20:1f:f3:
01:ce:e7:af:d9:23:5d:a6:dc:04:9a:b1:05:78:0c:07:2f:ae:
ae:a8:72:66:1b:0d:62:e5:6b:00:75:93:0d:6d:92:05:75:3f:
9f:ea:15:ef:e6:41:a0:aa:7d:eb:be:d5:81:7f:80:68:66:ca:
a2:b5:86:c3:92:1f:56:df:cb:39:e0:2a:0a:3d:69:d1:b8:71:
cd:f8:2e:47:df:ec:b7:ab:23:6d:5f:4c:9d:8b:d3:a2:14:30:
a0:84:0d:a6:57:0b:1f:ee:8b:3e:30:d5:9f:bc:6d:1d:21:46:
b2:18:60:1b:1c:51:20:3b:b6:ff:65:60:8a:96:a8:db:59:ed:
52:8c:14:d2
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZCbHWqK2chjUYselsDujrMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwNzEwMDUyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGJjZDBmM2IzYjBjMDdkZjA4NTljNjBiZGJjYzhiNjU5NTM5MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqTYhQ6RC2+mf4WSyQGwHxUmlp78
zOzYnZrwdKZ4s39qDsuOYAugN4yyWNv28adXd5ByGpbXyqM6J4s2zdmQS9/aG/qU
RELW6/J+Y3jcjcVxuNrBjEyTXKQ8MgwXWpFvakUVzPdmF08MWM9ZFgII0HctGALK
+PlI1JwUvljeJ5A92ka0iApV74M6u5o7Qk6ecKvvvqUpzywilwuCB9k6g4hp3CDW
CxjlCr/vghI7ncel1hmmTLvAGzy5OSd5klw/93aChxyz+gIfDwDV6/uGOoocAQRH
k+HSLRP6krAM1Mj01tHclqvH3DZMbE6juuil4vNExmRDi87P7XdpiMhD+QIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFH280POzsMB98IWcYL28yLZZU5CmMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvZmJ6UTg3T3d3SDN3aFp4Z3Ziekl0bGxUa0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAAt
Ux0DBAAtWBQDBAAtWBYDBAAtWSQDBAAtWSYDBAAtXAIDBAAthooDBAAtjzYDBAAt
kS4DBAAtkrsDBAAtnJ0DBAJX95QDBABbvmADBABbvmMDBABbvmgDBABb2foDBACy
780DBAC5uIcDBAC5zb0DBAC57/EDBAC59IkDBAC59QUDBAC59QcDBAC88EsDBADB
2iADBADZShAwDQQCAAIwBwMFACoLZMEwDQYJKoZIhvcNAQELBQADggEBACHOaIDY
EQJIf9cpjpO+tPnsTfyAQ63UPl/p5oXgA96DDgJIAvjwfPArECzeGmDuiter/8Bo
4JtmENmd1MUyl1nR93USWIRNHoyTGi3v+X4hSehe3xr7yiqtbtze26CS+aFdDT/s
Z96ixtE66BxjDa2tklZZJXACBf8R5CAf8wHO56/ZI12m3ASasQV4DAcvrq6ocmYb
DWLlawB1kw1tkgV1P5/qFe/mQaCqfeu+1YF/gGhmyqK1hsOSH1bfyzngKgo9adG4
cc34Lkff7LerI21fTJ2L06IUMKCEDaZXCx/uiz4w1Z+8bR0hRrIYYBscUSA7tv9l
YIqWqNtZ7VKMFNI=
-----END CERTIFICATE-----
Generated at Mon Jul 22 16:02:47 2024 by rpki-client on console-fra.rpki-client.org