Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fcFylxO9FyLzV3VjzxX27Ti5pSI.roa
File: fcFylxO9FyLzV3VjzxX27Ti5pSI.roa (raw, json)
Hash identifier: xpBOEb3gX6Z06pETBdjtEQRhnKQnr1tSgt525S6/31A=
Subject key identifier: 7D:C1:72:97:13:BD:17:22:F3:57:75:63:CF:15:F6:ED:38:B9:A5:22
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5420B960868344E8F8C2EBC9E693E6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fcFylxO9FyLzV3VjzxX27Ti5pSI.roa
Signing time: Sun 01 Jan 2023 07:55:30 +0000
ROA not before: Sun 01 Jan 2023 07:55:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398397
IP address blocks: 194.34.231.0/24 maxlen: 32
45.12.161.0/24 maxlen: 32
45.13.246.0/23 maxlen: 32
185.120.20.0/23 maxlen: 32
185.207.177.0/24 maxlen: 32
195.85.41.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:20:b9:60:86:83:44:e8:f8:c2:eb:c9:e6:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dc1729713bd1722f3577563cf15f6ed38b9a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:f6:66:73:72:d6:b1:08:64:6c:53:f7:a4:
8d:b7:df:61:9c:80:1f:92:63:c1:1d:ee:8a:0e:8c:
5e:fb:9b:5b:4d:d5:0a:18:b9:b3:14:cf:cb:d8:7d:
0d:4c:53:0e:ad:88:8a:14:66:dc:21:80:ef:ac:15:
37:44:fd:3d:28:df:a4:73:9a:70:84:9e:10:3f:08:
57:85:f5:ec:a6:9a:1c:c4:13:6e:be:e2:2e:4a:d6:
f8:9b:5a:7b:44:f3:ef:86:67:69:8d:13:18:4e:6d:
1c:e6:5c:4d:e0:34:b9:34:cd:ea:08:24:6f:90:88:
30:13:b2:00:a0:c8:8e:2d:5b:e1:73:bc:6d:d5:01:
a9:72:b3:cd:75:c9:b9:b9:ab:53:45:24:66:ed:95:
f5:ed:91:b6:b1:88:47:ed:dc:b4:49:c6:85:e1:5b:
99:0d:e9:29:49:1e:0d:64:34:01:7d:5d:fc:d1:fa:
8d:9a:67:9a:4c:6c:a0:71:50:40:41:b3:8b:a5:b2:
27:44:93:5e:9e:2b:88:97:d7:7b:cc:ba:63:38:d7:
18:7c:0d:be:4b:ff:b0:ba:6c:cb:38:7d:a9:9f:dc:
54:1b:f8:6d:15:98:f5:50:22:8b:fb:bc:7f:77:f8:
5c:56:eb:8d:e3:b7:61:07:8f:8e:c4:fc:e4:fe:63:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:72:97:13:BD:17:22:F3:57:75:63:CF:15:F6:ED:38:B9:A5:22
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fcFylxO9FyLzV3VjzxX27Ti5pSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
45.13.246.0/23
185.120.20.0/23
185.207.177.0/24
194.34.231.0/24
195.85.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:f5:0f:23:d7:db:0f:9e:9a:fc:aa:39:ac:01:80:82:20:23:
5d:08:87:9a:fc:01:69:f8:87:83:a1:97:d7:4e:26:1c:34:3b:
61:81:4a:66:61:50:c0:51:d6:a1:a4:01:9f:bc:e0:ac:21:50:
bc:d6:3a:ad:56:1e:b0:ac:64:48:04:2f:e6:f7:4c:f7:0c:4a:
f2:cb:30:bb:d1:68:38:6d:af:a8:87:27:7f:e3:18:05:df:16:
9b:12:9c:c4:dd:a6:37:44:7e:d6:2b:b3:71:43:28:d5:9e:81:
17:32:e0:f1:4a:9b:9a:9c:4a:7c:1d:67:b9:16:f5:77:5d:5a:
a2:36:43:43:cc:79:27:aa:f8:f0:86:79:7d:02:95:4c:cb:72:
37:57:59:97:db:a4:4d:d1:f4:f3:80:52:05:9f:99:1e:7b:be:
28:cc:a5:9f:15:1a:34:e3:5d:63:fa:9f:a8:ba:8a:02:b8:d6:
ff:da:81:5b:ab:f8:f3:ed:b6:02:ca:8d:e0:da:93:27:16:45:
35:1b:68:a8:cf:7f:58:bb:6b:fb:ec:57:da:c8:d1:e9:d3:d7:
e9:ef:8c:39:75:1d:c5:7c:6c:c7:1f:87:67:82:65:4d:e0:60:
e5:db:30:af:65:ca:8c:3a:44:5b:e1:b2:36:62:87:ef:f1:03:
62:b3:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org