Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FdI7SQHTV0fsP077Tux7ky0-aD0.roa
File: FdI7SQHTV0fsP077Tux7ky0-aD0.roa (raw, json)
Hash identifier: +PRzQXzhEw2/zIh9nTziqaDeckOWJIRqQtDbqmp4CJs=
Subject key identifier: 15:D2:3B:49:01:D3:57:47:EC:3F:4E:FB:4E:EC:7B:93:2D:3E:68:3D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3AB70E348425EF7D9101BB9D8616B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FdI7SQHTV0fsP077Tux7ky0-aD0.roa
Signing time: Thu 02 Jan 2025 15:47:53 +0000
ROA not before: Thu 02 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.200.0/24 maxlen: 24
45.86.202.0/24 maxlen: 24
45.92.229.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
45.154.137.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.157.112.0/24 maxlen: 24
89.251.0.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 10:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ab:70:e3:48:42:5e:f7:d9:10:1b:b9:d8:61:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d23b4901d35747ec3f4efb4eec7b932d3e683d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:3f:b4:5a:73:74:5c:a2:e3:31:7d:e9:a4:
5e:b4:38:27:ad:62:16:5f:4e:80:4f:04:4e:f7:86:
23:9f:02:dd:1a:be:a7:97:bf:cf:72:d1:72:3e:87:
3a:90:2c:a6:b8:0e:60:f5:56:ae:c5:09:f5:bc:a2:
19:ea:f0:b2:83:23:e0:84:3b:67:d0:3f:68:70:1f:
4f:cb:b0:4b:03:88:4f:78:4a:ec:ea:51:68:59:6c:
f4:4f:17:40:71:f7:65:e6:25:03:6f:cc:53:b1:d7:
22:2c:37:9f:e1:2c:b9:86:dd:f5:80:ee:b3:c4:69:
8f:1a:bd:97:e7:64:f5:8b:bb:25:2a:9e:36:ff:91:
f6:78:a3:d5:51:91:56:99:27:75:2d:5c:c5:0e:5a:
13:39:cd:dc:79:68:0f:da:fe:db:05:11:8f:32:c9:
57:6d:1a:7a:81:4b:ac:24:01:87:9e:42:c5:97:d5:
52:58:59:36:51:58:a6:c8:fe:f7:d3:32:b0:00:90:
09:78:5e:e5:02:1b:f9:fc:2e:3a:d4:91:30:92:5a:
74:97:59:bc:63:71:a6:e0:de:d4:9a:d7:79:b4:50:
b9:09:d1:5c:24:22:6f:44:fb:23:87:2c:a8:e3:e4:
a4:70:06:01:00:4d:6c:b7:ca:fb:89:eb:9a:46:46:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:3B:49:01:D3:57:47:EC:3F:4E:FB:4E:EC:7B:93:2D:3E:68:3D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FdI7SQHTV0fsP077Tux7ky0-aD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.200.0/24
45.86.202.0/24
45.92.229.0/24
45.146.54.0/24
45.154.137.0-45.154.138.255
45.157.112.0/24
89.251.0.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/24
194.5.53.0/24
194.34.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3e:ef:4b:de:2d:14:e5:33:14:42:b1:5a:f2:c1:2b:bb:da:
6a:63:09:e8:85:b1:dc:f0:21:c6:0d:61:b3:c5:00:c7:e2:26:
3c:4e:c8:9b:5c:5a:44:5a:24:d8:30:e1:d8:d2:b0:cc:b5:a9:
03:36:c6:a7:be:64:06:21:d1:32:85:23:fd:12:6d:bc:51:f9:
79:f2:b0:37:25:b6:ef:3a:48:f5:f6:e1:7f:ef:4a:26:79:e0:
08:7a:7b:6b:b0:09:1d:35:de:90:97:d7:6d:25:59:59:74:17:
f0:0b:25:d6:74:71:45:1f:34:12:85:c0:4e:b6:a3:fc:ea:92:
8d:a8:45:88:a1:d4:13:42:e5:3f:14:72:8a:30:56:2a:2b:84:
4b:3e:d8:55:4b:3b:7a:eb:df:ba:77:96:05:4f:12:ce:62:4b:
3e:97:de:6d:23:3c:e5:91:72:69:00:ed:3f:d2:f7:d3:c4:e7:
63:46:0a:46:b7:e4:07:7f:c0:81:a8:80:ef:0f:4a:16:ab:b8:
74:d5:7a:af:34:0a:0e:b4:a9:33:1a:ac:c2:2a:e8:90:df:a0:
96:18:06:e7:83:91:1a:42:7a:14:d0:58:7f:42:9d:10:06:27:
08:11:06:23:31:ed:13:29:77:11:a7:5f:b8:87:98:46:68:95:
6c:ec:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:07:41 2025 by rpki-client