Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/VT9Gef8afn3SGL8g2I5hSn_2dIo.roa
File: VT9Gef8afn3SGL8g2I5hSn_2dIo.roa (raw, json)
Hash identifier: pcpJ6UAJ7/dp+eBBZhfu10+txnE/b/FsAvrBGM3NfdQ=
Subject key identifier: 55:3F:46:79:FF:1A:7E:7D:D2:18:BF:20:D8:8E:61:4A:7F:F6:74:8A
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 018CCA99B791EBA87CF6C4D11E26E69C5E6A
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/VT9Gef8afn3SGL8g2I5hSn_2dIo.roa
Signing time: Tue 02 Jan 2024 14:35:20 +0000
ROA not before: Tue 02 Jan 2024 14:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jun 2024 23:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:b7:91:eb:a8:7c:f6:c4:d1:1e:26:e6:9c:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 2 14:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=553f4679ff1a7e7dd218bf20d88e614a7ff6748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:87:a0:67:03:18:ae:2a:97:d1:d1:4c:ae:
bf:ca:3c:0c:ff:07:26:fd:5e:20:54:54:64:60:24:
f3:ef:85:92:57:b5:3c:72:ff:81:97:47:5d:47:47:
05:7e:6f:ee:37:c9:df:4f:1d:67:8f:0d:41:49:f1:
03:10:6c:14:ab:6b:c1:0f:4f:28:02:cf:8a:d8:f5:
f2:ca:46:94:2d:04:62:b7:a4:58:41:3e:3d:82:d5:
1f:34:3d:94:91:a5:90:5d:8b:e1:92:a3:88:18:c3:
15:2d:49:88:8f:e9:76:a2:54:4f:e0:4a:86:6d:44:
04:38:a8:ff:da:dc:31:d8:90:c9:3d:b4:53:55:c6:
da:74:c2:59:a7:50:ee:42:c9:a1:94:bd:4d:95:9b:
48:39:ba:b5:d2:6c:11:4c:05:c3:71:fe:9b:0c:a1:
48:09:4e:2f:3f:76:c2:15:3d:0c:d4:e2:18:1b:e6:
f5:be:f9:6d:8d:04:0f:86:1b:4e:c4:8e:fe:ad:fa:
11:83:99:a4:3d:c8:64:9e:3f:ef:4b:c2:57:3b:1a:
92:22:e0:7c:a3:1c:0e:5f:2b:26:0f:df:c0:83:9e:
ce:42:8e:49:25:2a:bb:0b:55:19:7e:ad:ed:95:ce:
8e:35:15:09:01:8e:d6:3e:47:0a:1c:cb:73:e8:f5:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3F:46:79:FF:1A:7E:7D:D2:18:BF:20:D8:8E:61:4A:7F:F6:74:8A
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/VT9Gef8afn3SGL8g2I5hSn_2dIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0-91.240.170.255
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0/22
151.236.77.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.95.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
185.31.112.0/24
185.31.114.0/23
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:7d:9a:5e:39:ff:f1:00:f5:d6:54:be:1f:c6:cf:e1:c8:ab:
23:75:95:3a:6a:8e:7f:8d:06:ee:08:92:fb:3f:df:af:bf:4b:
e8:fe:9d:6a:aa:a7:05:9d:61:95:59:b6:4a:f9:10:7c:f9:f0:
5f:48:e6:56:27:12:88:ec:2a:d6:eb:04:2a:3b:7f:07:dc:4c:
97:bb:b3:fa:fa:9d:a0:ec:d4:a7:b0:2b:73:1d:51:82:27:e8:
f1:61:a7:21:1c:c7:36:c1:13:e3:7d:f6:72:f5:82:c8:fc:4c:
f2:4c:71:de:2c:c9:94:85:64:11:2d:e4:75:d9:c9:60:48:4b:
29:a8:87:05:93:70:a9:24:f3:8b:41:47:76:a8:c3:5d:4f:5a:
9b:bf:e1:58:19:ba:03:88:dd:a9:ad:20:da:40:aa:41:21:5d:
8b:88:b7:93:66:ea:cb:34:fd:fc:13:0f:49:f4:5f:93:6b:c3:
00:91:00:93:70:f4:85:ef:55:10:f4:c0:50:70:b7:f2:eb:20:
c5:92:29:d7:37:c1:32:bd:da:80:18:d6:63:13:0e:55:71:77:
0c:a3:e0:4f:1b:e7:0e:87:84:85:8d:eb:e2:53:5c:a0:87:36:
f1:d5:05:57:32:5f:8d:fa:a5:3e:59:9b:cd:77:87:4b:82:6a:
33:da:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 01:21:52 2024 by rpki-client on console-fra.rpki-client.org