Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/uHl7I-bFW-qi0-ZjgTCF7T0G1Qk.roa
File: uHl7I-bFW-qi0-ZjgTCF7T0G1Qk.roa (raw, json)
Hash identifier: x4GdNz8a9tN6/F/Q+mHqSK+BG29sxwU/7jQcDsBPWh8=
Subject key identifier: B8:79:7B:23:E6:C5:5B:EA:A2:D3:E6:63:81:30:85:ED:3D:06:D5:09
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 018571D792CB224449A775BCBA05A81C86B3
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/uHl7I-bFW-qi0-ZjgTCF7T0G1Qk.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42248
IP address blocks: 89.106.96.0/24 maxlen: 24
89.106.98.0/24 maxlen: 24
89.106.97.0/24 maxlen: 24
89.106.100.0/24 maxlen: 24
89.106.99.0/24 maxlen: 24
89.106.106.0/24 maxlen: 24
89.106.110.0/23 maxlen: 23
89.106.112.0/23 maxlen: 23
89.106.116.0/23 maxlen: 23
89.106.118.0/23 maxlen: 23
89.106.114.0/23 maxlen: 23
89.106.124.0/23 maxlen: 23
89.106.120.0/23 maxlen: 23
89.106.122.0/23 maxlen: 23
89.106.126.0/24 maxlen: 24
94.139.216.0/21 maxlen: 21
178.75.224.0/21 maxlen: 21
178.75.232.0/21 maxlen: 21
185.44.124.0/22 maxlen: 22
178.239.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:92:cb:22:44:49:a7:75:bc:ba:05:a8:1c:86:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8797b23e6c55beaa2d3e663813085ed3d06d509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:51:13:af:5e:67:e2:17:88:04:a5:d3:a1:
81:aa:e9:a3:b9:62:d9:42:04:80:69:d2:c0:95:44:
65:49:16:01:88:94:86:bf:32:6d:87:49:12:3a:af:
d7:7f:34:3d:dd:51:f6:96:53:af:58:07:01:74:1a:
d6:21:9f:d5:9e:8e:37:e0:5e:35:e0:d0:57:ef:5a:
9d:9c:9c:66:91:44:39:43:b8:1d:f5:f0:1c:ad:c7:
da:6a:ce:7c:ce:ce:73:6a:00:34:d8:e9:31:30:92:
c8:ae:0f:2a:c1:90:17:31:cd:cf:60:79:94:d1:a9:
78:5d:2a:96:cd:bb:24:57:69:db:14:de:cc:05:5f:
bd:f8:87:59:91:82:33:ed:9e:e0:a1:a1:34:03:1e:
1b:7f:c4:a9:20:e8:f0:61:c6:4c:e0:16:bf:67:ba:
70:29:79:31:da:2c:7f:de:45:9f:43:2e:ed:8b:97:
64:6b:38:51:04:9b:42:aa:9b:cd:9d:04:ed:82:05:
70:db:54:6a:db:95:c1:be:40:ca:d0:0c:61:9f:9d:
12:64:72:e3:e1:ac:93:90:7e:b4:a8:b6:dd:95:0d:
93:49:a0:ac:b6:29:77:ce:37:48:c1:66:fa:ba:6b:
56:19:34:8f:03:80:5d:49:e3:6a:4f:60:f6:e7:e5:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:7B:23:E6:C5:5B:EA:A2:D3:E6:63:81:30:85:ED:3D:06:D5:09
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/uHl7I-bFW-qi0-ZjgTCF7T0G1Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.96.0-89.106.100.255
89.106.106.0/24
89.106.110.0-89.106.126.255
94.139.216.0/21
178.75.224.0/20
178.239.224.0/20
185.44.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:60:16:81:be:9a:43:92:06:3d:1c:69:11:9c:0b:dc:c8:b8:
45:43:ea:eb:c6:2c:a6:40:95:fa:02:87:13:f6:ae:b7:c9:c3:
6a:b1:59:ce:d9:aa:72:f9:91:43:f3:f0:82:94:8f:47:f5:f2:
4d:ba:d6:e6:10:73:a4:bc:db:13:f0:77:47:09:e9:9f:4a:13:
40:5f:1a:bb:7c:00:5f:af:71:e7:de:8e:93:6a:90:13:f7:5b:
9b:7e:6c:92:e4:ad:d8:12:5b:4c:45:a4:7e:a8:0f:f2:ef:b4:
00:3b:06:a1:26:1a:44:9d:e3:67:40:39:85:76:25:72:9c:f6:
8a:bc:a4:e7:c5:40:d2:c4:d5:4b:7a:4a:6e:3f:f5:65:2a:d0:
32:8d:bd:85:07:21:51:89:46:01:44:f1:68:66:2d:01:3c:9e:
d8:b1:8d:4a:68:c3:26:a4:79:d5:af:9b:2d:24:39:a5:77:08:
fb:c6:57:fa:1f:41:ca:54:a6:21:20:d5:39:34:ed:6e:d9:be:
30:4e:aa:47:8c:63:76:54:4f:81:ec:88:12:11:41:85:c3:61:
85:88:5a:75:f5:d0:d3:90:55:e9:08:9c:96:92:55:51:43:f4:
f7:f3:da:39:53:c9:f9:2d:21:00:4c:ec:7b:15:38:ae:05:65:
cc:9e:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org