Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/FgxAtEO5G9mEJzZe6CiHqz5t_-s.roa
File: FgxAtEO5G9mEJzZe6CiHqz5t_-s.roa (raw, json)
Hash identifier: wd0vUM9ahc8AHVgunqEh+walmNDDWqTAgO24k/SZFmw=
Subject key identifier: 16:0C:40:B4:43:B9:1B:D9:84:27:36:5E:E8:28:87:AB:3E:6D:FF:EB
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 018B614DBBB1EA8F69925C787641A7F0B335
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/FgxAtEO5G9mEJzZe6CiHqz5t_-s.roa
Signing time: Tue 24 Oct 2023 10:49:26 +0000
ROA not before: Tue 24 Oct 2023 10:49:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 46.150.64.0/19 maxlen: 24
91.237.6.0/23 maxlen: 24
195.42.126.0/23 maxlen: 24
91.237.12.0/22 maxlen: 23
176.111.176.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:4d:bb:b1:ea:8f:69:92:5c:78:76:41:a7:f0:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Oct 24 10:49:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=160c40b443b91bd98427365ee82887ab3e6dffeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:27:22:38:57:0c:cc:e9:dc:79:2c:1b:4e:
d4:c7:a5:a7:f9:ba:e3:f7:b9:f1:e6:b0:04:31:24:
71:17:75:e1:9c:f8:80:5f:28:d7:47:a3:08:20:e8:
59:b3:08:3e:b3:34:97:db:fb:07:e8:d9:bc:e1:a8:
ea:c8:26:b8:c7:9e:38:89:a8:7d:ff:a9:05:40:da:
45:ef:50:86:e1:7f:d7:3c:dd:aa:03:e8:88:c9:b1:
c2:a6:d1:4a:b4:06:35:53:a9:ec:6d:6f:de:3f:0c:
df:f7:d6:35:58:47:31:d2:6f:cb:fc:66:c7:d3:a5:
d7:3a:22:e6:7f:93:3e:13:a9:5f:42:a7:da:4d:56:
6a:29:e5:a0:38:4d:d9:80:da:ae:f6:a5:9a:84:c4:
9c:00:49:71:f4:95:76:d1:a6:98:aa:1f:7b:c6:19:
36:72:53:5b:e7:7e:78:82:84:86:08:c1:d6:f6:67:
5a:61:c9:a7:0c:df:06:d4:47:c1:77:67:c4:58:ae:
c3:14:8f:c7:5f:65:69:22:49:6b:7c:f0:02:d9:84:
85:8a:e6:34:b9:09:6b:c0:1f:0e:7f:c8:d7:59:71:
03:4a:86:da:7f:3c:6b:76:04:0e:f1:38:8f:ed:5f:
85:c7:1a:f4:ab:cb:f1:48:5c:be:5f:7c:c0:f4:75:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:40:B4:43:B9:1B:D9:84:27:36:5E:E8:28:87:AB:3E:6D:FF:EB
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/FgxAtEO5G9mEJzZe6CiHqz5t_-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.64.0/19
91.237.6.0/23
91.237.12.0/22
176.111.176.0/20
195.42.126.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:a7:87:51:f9:69:5a:b0:7f:af:e4:2f:02:28:69:15:8d:8b:
f7:fd:fb:6f:1e:17:b8:b8:c0:c5:f0:81:d2:56:13:dc:0e:62:
42:b6:9e:0c:ff:da:1b:6d:65:4f:62:ea:f4:3b:4c:c5:f6:d8:
a9:66:39:9f:d3:95:27:d4:98:58:4f:3c:f4:cb:b8:cd:f0:3e:
af:54:8d:1d:28:0a:f4:c7:c2:56:ae:58:6a:69:c8:63:ef:7f:
1e:72:fb:f8:c2:1f:27:9b:09:73:e4:ee:a6:43:9e:f0:dd:da:
3d:db:e0:1f:d9:28:8f:2a:2e:3b:68:c9:cd:2e:f0:62:7c:10:
12:7a:27:fe:47:0b:6d:85:89:e9:e4:36:c7:0b:64:f4:ab:dd:
16:01:cc:ee:b5:7f:65:60:a4:01:1f:cc:ae:d7:bb:94:5e:a6:
7c:e9:ac:51:02:c6:65:bd:c3:4d:6a:b9:1d:78:5c:71:c5:91:
24:2b:94:f3:95:ff:2e:a1:7a:c0:c9:8e:5a:6c:43:1b:bd:d0:
0d:13:09:2d:c2:eb:3c:5a:c3:4f:59:70:17:46:55:7c:80:86:
28:09:aa:e0:79:c7:c0:51:75:18:24:fd:33:c9:a7:00:0b:31:
dc:24:f3:3f:6a:7b:43:de:d0:22:c4:bd:0a:b1:f3:b2:09:56:
fb:b0:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 10:53:40 2023 by rpki-client on console-fra.rpki-client.org