Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/FHntzZEO33O-FwQNuVhlOdLSyzE.roa
File: FHntzZEO33O-FwQNuVhlOdLSyzE.roa (raw, json)
Hash identifier: jy9CMVLixL9iO58x9CLJGqhav5MviQxWD3KbBeb5oLg=
Subject key identifier: 14:79:ED:CD:91:0E:DF:73:BE:17:04:0D:B9:58:65:39:D2:D2:CB:31
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01927362DEAEB95F5F4E220E13C9D6E57D20
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/FHntzZEO33O-FwQNuVhlOdLSyzE.roa
Signing time: Wed 09 Oct 2024 22:25:12 +0000
ROA not before: Wed 09 Oct 2024 22:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
89.150.40.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Oct 2024 14:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:73:62:de:ae:b9:5f:5f:4e:22:0e:13:c9:d6:e5:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Oct 9 22:25:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1479edcd910edf73be17040db9586539d2d2cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:15:35:2e:f0:45:19:db:ca:0b:7b:31:fa:
d9:22:27:45:33:2d:ee:d3:c7:69:b5:04:a5:4a:ea:
5a:ca:02:56:2b:f7:b4:01:5b:6f:7c:de:ab:ea:f8:
65:ec:d4:7d:1e:a4:48:14:55:22:f1:8a:15:e2:0f:
ea:92:cd:de:41:77:22:e9:8d:83:15:99:82:6b:12:
5c:8c:1e:49:59:60:48:e8:a7:9c:df:35:36:ff:93:
aa:c2:47:2c:cc:6c:66:82:09:31:09:d8:69:a1:49:
29:49:19:73:c0:82:10:4f:68:bc:96:d2:29:ec:e5:
9a:60:71:43:f8:66:5b:f1:ee:92:2a:4f:c9:be:84:
3f:88:dd:9c:9c:a0:e9:3a:06:ea:d4:38:7f:c2:0a:
e0:f3:7f:29:b2:bd:0d:d7:e8:fb:a8:c9:2e:89:8f:
f3:ac:2d:49:19:bd:fd:1c:ca:b3:c8:ea:29:c5:c2:
3a:c3:00:9e:9c:d0:3b:3e:01:34:48:c0:fc:25:f9:
4a:3b:c4:53:52:01:6a:70:c5:94:e5:88:4e:6e:c1:
bc:3c:f5:19:8a:b6:cd:7e:df:17:62:14:1c:2b:59:
15:8f:1c:88:90:3d:82:8d:13:06:36:0e:d8:8b:18:
5f:51:d8:40:49:5d:01:d6:f4:13:8a:fa:62:e8:82:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:ED:CD:91:0E:DF:73:BE:17:04:0D:B9:58:65:39:D2:D2:CB:31
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/FHntzZEO33O-FwQNuVhlOdLSyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
89.150.40.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
24:dc:91:c9:ee:06:fa:dd:98:ac:76:96:b9:ad:fc:a6:80:88:
2c:2c:31:a8:d1:6b:06:e2:c0:49:bb:0f:a0:15:04:71:da:e9:
42:94:d5:f4:73:2a:52:08:7c:a1:bb:14:80:e8:53:8c:8f:59:
e2:55:6b:ed:bd:f0:15:51:ee:ce:13:a5:5a:b7:6e:f1:2b:36:
9b:4b:0b:4f:dc:07:99:fc:9b:50:1b:d9:23:61:65:88:65:09:
cb:5c:cf:51:c5:c0:9f:bc:7f:89:4d:63:65:b1:f7:06:31:ac:
a7:08:98:c3:95:05:d2:bf:56:6c:eb:2d:21:9b:95:fc:e6:8e:
13:90:f4:49:c5:0c:5b:e2:e8:8a:79:ae:85:a2:b2:b0:27:2d:
d8:8b:21:8d:55:fc:68:d3:d5:e1:f9:7e:e2:2e:f5:f5:bc:15:
51:2a:05:cf:32:41:20:86:b5:eb:74:8f:aa:59:57:37:c6:54:
9c:e9:c3:10:e8:7d:d8:12:68:80:9f:0c:e4:8d:14:7e:cb:82:
bc:35:98:97:2c:20:92:f3:d4:77:7c:59:fd:0b:24:5b:05:46:
4e:87:28:0d:de:01:66:24:7c:73:1e:bf:58:fe:dd:4c:bc:e7:
c2:07:d0:fa:9d:d2:b4:92:3b:5c:69:d3:72:7e:ba:4a:fa:3e:
63:eb:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:44 2025 by rpki-client