Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/FB4m2Hj-WEsz7fnwBLetcgiftFQ.roa
File: FB4m2Hj-WEsz7fnwBLetcgiftFQ.roa (raw, json)
Hash identifier: w4UgcGJGqnTAgPlpsC/Y89/w1Bsb1bryT39yys8I3AY=
Subject key identifier: 14:1E:26:D8:78:FE:58:4B:33:ED:F9:F0:04:B7:AD:72:08:9F:B4:54
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01856FF948BA73E080BB78320D5B1E7073DB
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/FB4m2Hj-WEsz7fnwBLetcgiftFQ.roa
Signing time: Mon 02 Jan 2023 00:54:46 +0000
ROA not before: Mon 02 Jan 2023 00:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60368
IP address blocks: 185.16.76.0/24 maxlen: 24
185.16.77.0/24 maxlen: 24
94.136.112.0/23 maxlen: 23
94.136.114.0/23 maxlen: 23
94.136.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:48:ba:73:e0:80:bb:78:32:0d:5b:1e:70:73:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 2 00:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=141e26d878fe584b33edf9f004b7ad72089fb454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:f3:21:49:3c:73:84:94:a5:51:c2:20:90:
46:d7:ff:f6:8f:a6:18:de:6d:1f:39:32:8f:b4:3d:
80:4c:2d:5b:15:e0:40:cd:30:7a:c2:bb:25:7f:b7:
b1:5c:af:f4:5e:ad:74:aa:27:33:42:df:87:70:b6:
87:89:29:9e:63:5f:21:e0:a9:28:27:d1:09:19:f6:
0a:53:33:a5:cf:16:a5:b4:07:4b:f6:29:72:5a:15:
ae:51:50:bd:5a:93:09:4d:fe:76:4b:ad:dc:78:50:
a5:e5:e7:ec:ea:e4:ae:4e:42:3f:1d:ee:6b:75:12:
f5:ef:05:d7:19:79:bd:45:c1:91:d1:59:a5:50:7e:
f8:18:30:6d:61:72:9d:32:99:da:c0:5f:7d:e8:00:
27:17:69:6d:19:01:74:c6:af:0f:a4:3a:f1:e4:8e:
b8:39:05:70:18:b8:46:3e:6f:65:ab:f3:65:c4:8b:
06:1f:1b:cf:34:e7:72:22:a5:e5:03:d5:b2:e6:9f:
05:1b:6a:98:62:83:32:20:47:24:01:b0:9a:f6:50:
f4:0c:a4:12:69:b6:13:32:c0:18:03:04:ca:88:a1:
6e:4c:07:9c:70:6e:d2:3c:dd:a3:3b:68:ff:70:f1:
a1:45:fe:82:70:1d:7b:fa:87:54:98:88:b6:c9:3e:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1E:26:D8:78:FE:58:4B:33:ED:F9:F0:04:B7:AD:72:08:9F:B4:54
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/FB4m2Hj-WEsz7fnwBLetcgiftFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.112.0-94.136.116.255
185.16.76.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:92:4c:5b:85:0c:19:63:51:5f:20:46:ed:a8:f2:2c:1f:84:
4f:6d:fe:f3:a6:11:ba:97:ed:e1:9d:7b:d0:88:a3:a1:f9:a0:
30:c7:c0:4b:32:8f:23:6d:71:2c:79:48:d9:a8:e4:28:d3:40:
f1:71:65:64:b5:a0:a3:ca:e0:91:5a:4a:de:74:ce:be:0c:1b:
4c:c8:39:9f:d3:62:f0:c4:45:10:25:5c:f0:af:ef:ac:61:c5:
94:b1:86:2a:9b:00:95:fc:47:b0:3e:af:24:61:91:d4:1d:46:
5c:db:86:9d:82:3d:5f:33:40:3b:f0:f4:9b:28:a9:a0:86:a5:
c5:31:cb:4c:4e:ca:e2:72:8f:89:51:cb:fb:0b:0d:4f:0e:5b:
11:59:b3:e4:f9:0a:72:f1:4f:65:64:ab:ca:6b:24:a6:e8:39:
56:b9:f5:74:4d:a5:da:0c:31:ea:33:2f:aa:8b:a9:0c:d4:3c:
83:5c:52:4a:f3:e6:99:ab:bc:5d:9d:07:f9:8b:cc:89:8f:4a:
46:bc:38:d5:1c:1f:2c:98:23:51:96:19:f1:44:2a:97:4c:b5:
ef:ea:1c:3f:ca:1a:f8:cf:73:36:e0:41:3d:ea:a4:c6:7f:35:
02:6e:d5:61:bb:95:71:28:39:19:09:a3:7e:3e:c2:e8:5e:ca:
91:96:8e:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:40 2024 by rpki-client on console-ams.rpki-client.org