Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/FZCsyd15ueIbcMJGFfjbreGchmM.roa
File: FZCsyd15ueIbcMJGFfjbreGchmM.roa (raw, json)
Hash identifier: rlTn8Ac9UAcM823KREMYTQVFvYFk2Mz0+waCCp2QDPI=
Subject key identifier: 15:90:AC:C9:DD:79:B9:E2:1B:70:C2:46:15:F8:DB:AD:E1:9C:86:63
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7C2DCF3F01FA20CBB3CF44793E2A4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/FZCsyd15ueIbcMJGFfjbreGchmM.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
147.181.12.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Feb 2023 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c2:dc:f3:f0:1f:a2:0c:bb:3c:f4:47:93:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1590acc9dd79b9e21b70c24615f8dbade19c8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:11:6d:f3:ef:ac:ee:6c:cd:17:2a:3a:0a:
08:ae:fb:bb:19:4e:8d:18:84:63:76:bf:83:1a:82:
c4:eb:d6:c4:d6:4e:50:a5:06:fc:0a:4f:8c:fd:6b:
01:06:ea:f4:01:2f:79:d5:bb:92:77:94:7c:45:ae:
39:4f:23:fa:8a:7c:6f:10:2f:31:2a:57:b2:d8:db:
a0:58:31:60:70:1c:37:71:09:0d:ec:9a:da:b6:2b:
8c:90:95:7c:f9:cb:fd:47:70:3b:21:a9:66:a5:a3:
07:7b:42:e4:fd:4e:03:7f:b9:c3:12:38:48:a3:1d:
ad:24:00:54:3b:d1:13:c3:be:a3:16:b8:c4:3a:8c:
73:8e:3b:bb:0b:59:93:9a:da:ca:b2:f2:5a:d1:75:
13:9c:9e:98:a1:40:e7:2e:9a:cb:bf:87:fc:87:9d:
2f:68:33:32:73:de:e6:02:25:41:8f:20:ff:c8:78:
76:9a:98:48:e3:ea:f5:4d:19:54:fa:ab:0e:18:ed:
a1:2b:af:d3:10:d6:27:f5:29:7f:17:3c:35:fc:fc:
63:ef:c6:b4:53:94:f6:d6:13:84:e3:76:97:2f:24:
7a:db:92:40:2b:30:15:31:12:9f:86:dd:97:63:fe:
1f:7e:cb:b1:1c:f7:2a:cd:70:85:02:24:3a:42:90:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:AC:C9:DD:79:B9:E2:1B:70:C2:46:15:F8:DB:AD:E1:9C:86:63
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/FZCsyd15ueIbcMJGFfjbreGchmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0/22
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:bd:88:15:ea:41:a7:20:0d:71:ec:1c:00:b4:ca:80:66:36:
0f:14:08:d3:d5:84:62:c9:fc:5f:68:f3:60:51:35:91:08:63:
4c:28:68:ab:55:20:b7:80:d8:cb:f0:8f:cf:21:16:f8:0c:17:
e7:c3:35:52:fc:96:a7:f9:71:f0:1b:04:f1:a6:86:4c:44:e6:
fd:30:81:c6:4b:5b:1f:5d:e9:ab:0b:83:2f:1f:e0:fd:9a:3f:
fd:f0:2f:db:70:4f:6c:33:b1:31:79:93:a5:c1:f6:43:4f:66:
35:85:db:77:8b:c4:0e:29:15:b7:9a:f4:e9:69:10:ad:3f:94:
67:44:53:c8:cc:fb:08:1a:1b:b7:92:bb:21:f7:20:89:27:5b:
52:5b:5b:a7:db:7b:2b:09:bb:ce:97:5d:25:42:c5:ab:fb:b1:
44:5e:7e:2f:2a:9a:01:ee:18:8a:dc:62:f8:82:e9:68:60:30:
60:34:34:a9:28:7d:2d:f9:37:76:80:3d:2d:5b:42:00:16:b8:
3e:dd:94:29:e7:61:94:c7:fe:a8:15:a3:3d:ac:35:63:18:6c:
d8:7d:ab:15:00:ae:4d:20:b7:22:f9:1b:0d:9f:f4:d8:ed:1f:
94:ba:dc:ff:b0:45:0e:c7:90:2e:b0:4e:de:5d:55:de:b7:b5:
e0:be:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org