Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/jFbregERfIuw-98_NtI8sS9ftcs.roa
File: jFbregERfIuw-98_NtI8sS9ftcs.roa (raw, json)
Hash identifier: pPm2Dg1ejJTLzA3FbOYpfPKensHlROpvqwb97uO0w+w=
Subject key identifier: 8C:56:EB:7A:01:11:7C:8B:B0:FB:DF:3F:36:D2:3C:B1:2F:5F:B5:CB
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018CBA52CEEC73E90C293EED636A2516168A
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/jFbregERfIuw-98_NtI8sS9ftcs.roa
Signing time: Sat 30 Dec 2023 10:43:58 +0000
ROA not before: Sat 30 Dec 2023 10:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 95.38.136.0/22 maxlen: 22
95.38.140.0/22 maxlen: 22
95.38.152.0/24 maxlen: 24
95.38.152.0/21 maxlen: 21
95.38.159.0/24 maxlen: 24
95.38.157.0/24 maxlen: 24
95.38.158.0/24 maxlen: 24
95.38.153.0/24 maxlen: 24
95.38.154.0/24 maxlen: 24
95.38.155.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.174.0/24 maxlen: 24
95.38.96.0/21 maxlen: 21
95.38.97.0/24 maxlen: 24
95.38.98.0/24 maxlen: 24
95.38.96.0/24 maxlen: 24
95.38.104.0/22 maxlen: 22
95.38.100.0/24 maxlen: 24
95.38.101.0/24 maxlen: 24
95.38.102.0/24 maxlen: 24
95.38.103.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.132.0/22 maxlen: 22
95.38.240.0/21 maxlen: 21
95.38.243.0/24 maxlen: 24
95.38.244.0/24 maxlen: 24
95.38.245.0/24 maxlen: 24
95.38.241.0/24 maxlen: 24
95.38.242.0/24 maxlen: 24
95.38.246.0/24 maxlen: 24
95.38.248.0/22 maxlen: 22
95.38.247.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.208.0/22 maxlen: 22
95.38.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ba:52:ce:ec:73:e9:0c:29:3e:ed:63:6a:25:16:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Dec 30 10:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c56eb7a01117c8bb0fbdf3f36d23cb12f5fb5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:46:0a:04:fa:1d:db:39:c2:c9:2a:0c:7e:
22:aa:fe:0c:84:f4:07:12:35:6e:ea:e5:57:5a:e4:
6c:e9:e0:1d:21:69:a1:e7:dd:09:db:47:ca:26:06:
44:c2:2d:8a:64:da:43:05:57:00:fc:bf:3f:de:5c:
6c:73:dc:9a:45:29:3c:cf:9f:85:0c:d2:ad:c5:f5:
33:76:f1:db:53:0e:aa:09:82:af:18:cb:e4:59:3d:
aa:46:30:11:80:61:15:9c:33:c2:70:8d:14:bf:14:
f3:a2:97:5b:0b:ae:60:27:c4:c2:f6:13:67:f5:d5:
39:6e:50:71:98:01:c8:40:da:60:63:4d:c0:80:4e:
9b:40:7b:d0:07:4c:9e:6b:45:68:24:4f:a9:7d:ca:
1d:7a:10:ad:af:90:17:a8:ac:a0:54:7c:a7:b7:4d:
16:bf:7e:62:20:4e:ba:05:ec:4f:f6:e3:ec:e8:dc:
55:64:9e:f9:84:55:64:35:60:23:7b:a6:6e:09:e6:
51:3a:34:14:f2:9e:72:24:bc:25:05:c2:c2:e1:9a:
9c:18:1c:b2:2f:37:51:97:8d:95:ca:a9:3a:3e:2c:
6c:91:a2:bb:75:f9:2f:70:de:d2:cb:3e:c6:a0:3c:
48:10:82:cf:28:98:27:ed:31:ff:dc:2a:ea:f2:4c:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:56:EB:7A:01:11:7C:8B:B0:FB:DF:3F:36:D2:3C:B1:2F:5F:B5:CB
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/jFbregERfIuw-98_NtI8sS9ftcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.96.0-95.38.107.255
95.38.130.0-95.38.143.255
95.38.152.0/21
95.38.168.0/22
95.38.174.0/24
95.38.200.0/22
95.38.208.0/22
95.38.240.0-95.38.251.255
Signature Algorithm: sha256WithRSAEncryption
74:5b:b1:98:5c:7d:32:01:21:15:19:a9:06:54:f1:0a:54:dd:
8c:97:e5:66:33:bf:d8:e6:2f:cc:f5:71:6a:a0:f2:9b:22:53:
73:f6:f1:cb:55:30:8d:3d:20:12:be:cb:18:3b:4b:9d:25:f8:
42:39:55:93:89:94:60:f1:13:d8:fb:11:b4:ef:ab:6a:2b:c1:
49:c3:2c:28:f2:c8:0c:15:6b:19:8b:28:0e:12:d7:e4:76:a0:
32:a2:82:05:4d:dd:25:8d:f0:f7:7d:b9:3d:66:dd:84:55:15:
df:97:7f:a0:85:f3:77:a5:c0:01:85:8f:a1:ac:6c:02:4b:1d:
66:ef:f9:36:9e:6e:93:7f:fb:19:f1:87:47:22:bd:34:f5:8d:
93:88:da:bf:5a:b2:ea:3b:0e:d4:d1:58:de:04:db:d8:f5:99:
26:47:b9:e6:94:39:30:9c:25:46:97:6e:89:da:e0:f8:12:8c:
8f:59:15:74:0c:0f:b0:ee:2d:4e:b3:e9:03:08:20:6f:d5:86:
34:cc:5b:5e:39:73:bd:ff:9c:bb:f8:a4:29:2f:c9:d0:f3:de:
69:7d:6f:64:1a:e1:01:1f:87:3f:ea:7b:c8:f1:52:6f:80:ac:
c8:12:72:17:95:3f:e5:ba:ae:cc:e6:db:6d:4a:cf:fa:ef:fc:
d3:3e:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org