Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/Fcq9TbviioLdvPMn17IVFzrkq4s.roa
File: Fcq9TbviioLdvPMn17IVFzrkq4s.roa (raw, json)
Hash identifier: /qqAJI1P70SVeL4YEBGNbWUc6TkmPy91TCss3WAiXWA=
Subject key identifier: 15:CA:BD:4D:BB:E2:8A:82:DD:BC:F3:27:D7:B2:15:17:3A:E4:AB:8B
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 018571832C00FEDB5C492A582A66317FF637
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/Fcq9TbviioLdvPMn17IVFzrkq4s.roa
Signing time: Mon 02 Jan 2023 08:04:59 +0000
ROA not before: Mon 02 Jan 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204720
IP address blocks: 185.31.113.0/24 maxlen: 24
91.231.238.0/24 maxlen: 24
91.238.111.0/24 maxlen: 24
151.236.110.0/24 maxlen: 24
151.236.108.0/24 maxlen: 24
151.236.112.0/24 maxlen: 24
151.236.118.0/24 maxlen: 24
151.236.117.0/24 maxlen: 24
151.236.116.0/24 maxlen: 24
151.236.115.0/24 maxlen: 24
151.236.114.0/24 maxlen: 24
151.236.124.0/24 maxlen: 24
151.236.121.0/24 maxlen: 24
151.236.120.0/24 maxlen: 24
151.236.119.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
151.236.126.0/24 maxlen: 24
151.236.71.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.69.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.66.0/24 maxlen: 24
151.236.82.0/24 maxlen: 24
151.236.79.0/24 maxlen: 24
151.236.98.0/24 maxlen: 24
151.236.97.0/24 maxlen: 24
151.236.92.0/24 maxlen: 24
151.236.105.0/24 maxlen: 24
151.236.104.0/24 maxlen: 24
151.236.103.0/24 maxlen: 24
151.236.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 14:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:2c:00:fe:db:5c:49:2a:58:2a:66:31:7f:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 2 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15cabd4dbbe28a82ddbcf327d7b215173ae4ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:19:27:e2:7f:fe:c4:f5:1e:fd:19:5a:80:
32:4e:ad:d4:25:dd:d7:9a:76:69:98:9d:8e:ea:c2:
d7:0e:cb:6c:47:6e:09:f8:43:ee:16:13:bc:bb:23:
6f:61:2b:81:5f:a1:69:33:94:87:1b:17:c9:c8:09:
31:55:6f:10:42:fe:1c:89:6d:41:d1:bc:e2:71:c8:
d5:81:09:6f:7b:9d:78:99:14:ff:73:98:85:32:2b:
2c:0d:71:24:35:9b:c5:48:9f:09:92:e4:a8:7d:9c:
8a:d8:cd:40:1e:d3:27:b9:89:60:0c:11:5e:f4:ff:
2e:69:b1:a0:8d:70:b6:72:b9:3e:bc:b9:27:fb:bc:
ef:1e:24:d1:7c:7f:18:b5:8c:0b:27:e5:a3:07:36:
cf:36:c9:d9:c8:ab:d2:3a:eb:6e:21:58:37:a0:66:
24:f6:45:b7:0e:f7:1a:b8:ec:1d:38:8c:a0:fc:f0:
ca:ac:da:64:bd:f9:ad:da:0a:05:6f:19:16:c8:47:
25:71:04:a3:fc:21:2b:83:92:f2:70:be:07:0e:6b:
b8:78:18:d4:7c:ba:b6:a6:9a:c3:9c:d5:03:28:1c:
b7:8c:c1:b8:40:ca:8b:f2:60:85:9c:4c:58:72:cb:
67:dc:af:1b:21:38:76:24:2b:3b:74:37:a5:f5:26:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CA:BD:4D:BB:E2:8A:82:DD:BC:F3:27:D7:B2:15:17:3A:E4:AB:8B
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/Fcq9TbviioLdvPMn17IVFzrkq4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.238.0/24
91.238.111.0/24
151.236.66.0/24
151.236.68.0/22
151.236.79.0/24
151.236.82.0/24
151.236.92.0/24
151.236.97.0-151.236.98.255
151.236.101.0/24
151.236.103.0-151.236.105.255
151.236.108.0/24
151.236.110.0/24
151.236.112.0/24
151.236.114.0-151.236.121.255
151.236.124.0/24
151.236.126.0/23
185.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:41:d2:fe:f1:9a:dd:e1:ff:30:fe:11:46:88:9c:92:f2:8e:
9d:93:02:25:45:49:2c:70:e8:17:fd:3e:c5:4a:b6:4c:79:9f:
b7:6d:ba:92:70:02:34:93:13:dd:c9:bc:72:9b:39:da:ac:2f:
d2:7c:31:32:2d:11:0b:38:cd:42:44:b8:42:50:da:7c:d0:5c:
5f:c2:71:50:f9:fb:28:0b:b0:e5:6c:45:a6:fc:c9:ba:72:e3:
2c:40:3a:6d:a3:dc:a1:17:96:32:48:41:07:d8:41:70:c7:54:
2b:ff:a5:56:36:b3:f6:07:46:61:91:5f:90:9a:1a:50:9b:91:
d1:cb:a0:2b:0e:83:7e:77:1e:ad:91:77:04:3b:f4:6d:99:8e:
50:2f:4a:1b:e1:11:b4:36:df:0b:02:c3:17:f8:c0:0f:5c:17:
54:5d:d4:11:e9:9c:09:33:55:61:dc:32:a7:08:16:b3:0d:a0:
19:18:8a:00:f2:04:c1:16:d4:d0:56:63:45:ab:1c:69:1e:43:
ee:4a:8d:da:8b:00:c2:e2:a1:c2:b8:0d:9f:66:9f:11:e5:e9:
13:df:5b:11:fe:51:3a:b3:98:76:1c:e7:53:c6:80:de:7a:22:
28:5b:2f:5f:b4:dc:52:e9:6b:16:30:0a:07:70:85:83:36:e6:
e0:46:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org