Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/FPost58azpz6xqeZfrcXGD7YXRU.roa
File: FPost58azpz6xqeZfrcXGD7YXRU.roa (raw, json)
Hash identifier: bZD/NQuoVdIw9xCMs0xxfffri3ZlR+o+hd+wqJ+oJco=
Subject key identifier: 14:FA:2C:B7:9F:1A:CE:9C:FA:C6:A7:99:7E:B7:17:18:3E:D8:5D:15
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01905565E164BEB23F72FAB6AADBC2B6B73B
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/FPost58azpz6xqeZfrcXGD7YXRU.roa
Signing time: Wed 26 Jun 2024 16:34:18 +0000
ROA not before: Wed 26 Jun 2024 16:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.138.12.0/22 maxlen: 22
152.89.28.0/22 maxlen: 22
193.135.137.0/24 maxlen: 24
193.135.151.0/24 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 12:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:55:65:e1:64:be:b2:3f:72:fa:b6:aa:db:c2:b6:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jun 26 16:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14fa2cb79f1ace9cfac6a7997eb717183ed85d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:91:17:27:c6:4f:33:57:89:63:f8:27:4a:
94:3c:7e:af:2d:d5:17:b3:b5:8d:86:21:57:06:d3:
47:f4:87:56:84:3a:44:c0:6f:b6:a9:33:1f:84:cc:
03:df:85:d7:61:60:cc:ae:ab:c3:ce:13:5a:21:c1:
08:79:be:cc:c9:81:72:f0:52:33:7a:5f:0e:1e:d1:
92:61:ae:96:b6:a6:71:09:eb:3a:26:79:1d:84:2f:
32:b1:1e:37:4b:b0:a4:cd:e1:f5:f8:69:cd:4f:99:
9b:68:96:d6:8b:9c:c0:e3:95:f4:cd:f0:6f:c2:ab:
0f:44:0c:af:7d:fa:c7:7c:39:2c:8c:a3:6a:21:96:
ed:93:5f:7b:56:8d:9c:1b:ff:5f:4b:d7:87:c8:e4:
24:5b:80:80:51:9f:04:5c:2b:55:39:61:16:b8:f1:
66:2d:f5:90:97:10:27:67:4c:05:61:ae:d2:e9:ac:
7c:76:0b:50:5b:9a:0e:f3:fd:f7:86:36:03:2f:03:
fb:4f:1c:45:19:34:9c:5f:57:53:64:b0:2c:50:28:
3a:0a:f5:9c:ae:6e:cc:88:98:85:e5:e5:8f:18:60:
5e:89:4c:34:23:12:7a:71:26:a9:49:88:d5:33:39:
b9:57:13:21:8d:27:05:b7:1d:f6:58:00:93:2e:b3:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:2C:B7:9F:1A:CE:9C:FA:C6:A7:99:7E:B7:17:18:3E:D8:5D:15
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/FPost58azpz6xqeZfrcXGD7YXRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
193.135.137.0/24
193.135.151.0/24
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
70:64:8e:85:66:df:c7:73:ed:27:f7:d7:4c:ea:2f:e5:53:33:
fd:1a:ab:ce:9a:8c:33:a1:00:91:8d:d8:6f:4a:a8:4e:62:e5:
5f:65:34:e8:e3:d8:70:a5:95:4a:e4:1c:6e:ab:b5:4c:49:86:
8d:4c:60:f3:9c:40:66:78:6c:b1:3a:bd:7a:4d:f3:81:74:71:
aa:d1:01:65:ec:d3:90:9b:a9:21:67:f2:3c:06:3d:cc:34:d7:
09:de:e7:d5:5b:ea:2c:bb:10:61:fd:0f:8a:72:b8:c2:b3:4f:
90:ce:96:f7:3f:85:02:bf:2b:9f:9c:6f:82:90:07:78:72:a9:
8e:ed:16:d4:15:9c:c8:19:7a:8b:1c:10:fc:5c:5e:40:ae:b0:
32:45:e0:60:a1:84:14:08:29:68:b4:54:77:0b:15:ba:94:5a:
d5:1e:07:8e:ec:29:94:8c:be:75:f5:a8:36:c1:9b:e4:ab:67:
74:a4:ff:de:88:b0:9c:64:e7:35:28:da:ac:9c:8c:77:1b:c4:
a9:9c:df:e6:a4:48:c1:6b:14:f6:d7:97:ac:3e:5d:59:46:77:
76:0e:c3:da:66:0a:0e:ee:88:0a:fc:e5:23:4e:0a:1b:51:93:
83:98:b0:3a:33:c3:79:8d:e8:ca:54:4c:5a:09:46:c9:2a:60:
5a:c4:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:48 2025 by rpki-client