Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/fxkMrf-TY_f4oRIwKoEAQMKAKCM.roa
File: fxkMrf-TY_f4oRIwKoEAQMKAKCM.roa (raw, json)
Hash identifier: Ysh5UG+hSWWSY9r0goKCVMsOifRONmrsmCdxhOFQs6k=
Subject key identifier: 7F:19:0C:AD:FF:93:63:F7:F8:A1:12:30:2A:81:00:40:C2:80:28:23
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01856BAEE5C645671125721715D861ECD7DF
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/fxkMrf-TY_f4oRIwKoEAQMKAKCM.roa
Signing time: Sun 01 Jan 2023 04:55:02 +0000
ROA not before: Sun 01 Jan 2023 04:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60192
IP address blocks: 95.105.82.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
95.105.80.0/23 maxlen: 23
95.105.80.0/22 maxlen: 22
95.105.81.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
171.25.177.0/24 maxlen: 24
185.162.32.0/23 maxlen: 23
185.162.35.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.33.0/24 maxlen: 24
185.162.34.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:e5:c6:45:67:11:25:72:17:15:d8:61:ec:d7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 04:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f190cadff9363f7f8a112302a810040c2802823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:b6:3f:8d:da:e3:a5:69:bc:c5:6c:da:fc:
d5:3e:df:c4:f4:1e:4e:73:d5:2d:d4:2f:5b:7c:6b:
ae:f6:ad:c2:96:ad:c1:a0:11:c2:83:29:77:ac:63:
ed:e2:11:7e:99:94:ee:c8:2e:97:2e:78:d3:11:63:
f6:a6:15:84:ca:61:b4:fb:ff:1f:0f:2a:5e:f7:56:
03:61:2f:33:20:c5:e7:77:ce:de:e9:66:18:9e:b3:
63:d0:6b:16:df:27:6e:5c:d8:c7:e2:17:14:b7:90:
d9:4d:cf:e4:e7:c0:50:2f:a1:dd:53:1b:84:03:a5:
47:d6:9a:06:7d:c7:65:a0:19:d1:c7:74:cf:80:78:
fe:6d:18:3c:86:5a:a2:69:21:48:d3:c2:e9:34:67:
79:e8:e6:fa:14:77:3c:05:8f:28:83:a2:fc:24:a7:
9f:c7:df:b6:06:df:b3:0b:8b:38:4e:34:9f:37:8e:
8d:f6:5a:30:b1:13:8f:3f:da:f4:f6:aa:92:00:52:
a0:10:54:02:13:32:8b:d7:b6:3e:96:21:d8:c5:27:
02:ff:69:a8:37:ad:87:a2:3c:4a:e0:cd:89:e6:e8:
81:f0:f8:db:6f:65:5b:d8:a0:e7:47:78:d5:76:6e:
8f:85:51:29:eb:e3:e8:5c:54:38:12:46:7e:2f:e6:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:0C:AD:FF:93:63:F7:F8:A1:12:30:2A:81:00:40:C2:80:28:23
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/fxkMrf-TY_f4oRIwKoEAQMKAKCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.105.80.0/22
171.25.177.0/24
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2d:c0:0c:5f:15:87:2b:45:0b:6f:0d:8b:1e:2b:93:fc:f1:
5e:de:bf:41:3d:1c:9a:07:81:83:37:53:5a:18:c2:00:a7:6e:
68:10:1b:6d:84:2d:ff:5e:a8:02:25:1d:cc:d0:76:92:ba:d4:
75:b9:77:e2:89:21:81:ee:5e:7e:03:74:be:46:02:55:22:b8:
a6:36:44:26:ba:8a:0c:09:e5:b7:27:50:54:a2:56:b1:18:ac:
a4:17:9c:ed:27:2a:7d:46:8a:dc:0a:40:90:67:86:2a:59:20:
5a:be:ae:03:c7:b9:78:d2:56:58:e6:74:0e:1f:68:f6:3b:11:
01:22:2e:f1:7e:20:42:88:43:34:29:f0:c4:80:67:61:e0:87:
0d:87:f5:d6:9e:cd:57:77:e5:c7:d3:1b:aa:63:4a:19:4c:80:
d6:5f:89:64:5a:4e:33:69:de:6f:39:bd:57:1b:e6:62:8a:62:
90:f7:10:8d:ed:9c:84:62:f9:bc:13:a4:fa:9f:b2:1a:33:5a:
31:d9:b6:31:c3:52:65:e9:fd:f6:39:78:ac:54:c3:b0:49:7a:
aa:c3:ea:60:f7:c2:e1:a1:95:36:ce:f3:76:b5:ae:57:89:a5:
08:36:98:66:ba:35:b8:fe:d9:7c:36:34:a4:0a:07:11:15:fd:
3d:e3:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org