Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/pMBguRsgFc0cpzcEL76IPPbTfgA.roa
File: pMBguRsgFc0cpzcEL76IPPbTfgA.roa (raw, json)
Hash identifier: 6CuhHKMuBttlGf05AN1cFeaSqF4L15/AFzn3UxW7yaE=
Subject key identifier: A4:C0:60:B9:1B:20:15:CD:1C:A7:37:04:2F:BE:88:3C:F6:D3:7E:00
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019032DBF678EEBD3BCC9978197CCC8088A1
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/pMBguRsgFc0cpzcEL76IPPbTfgA.roa
Signing time: Wed 19 Jun 2024 23:36:34 +0000
ROA not before: Wed 19 Jun 2024 23:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.171.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Aug 2024 21:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:32:db:f6:78:ee:bd:3b:cc:99:78:19:7c:cc:80:88:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jun 19 23:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c060b91b2015cd1ca737042fbe883cf6d37e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:ab:98:62:17:7b:0f:e5:14:bf:dd:f4:bf:
3a:ae:b1:03:62:72:b6:1c:36:18:89:4e:13:cc:1a:
39:26:84:15:f2:bf:89:f1:56:2b:93:76:d2:43:09:
d5:26:f8:47:b1:a0:3a:e0:01:0a:73:12:ce:91:4c:
d7:e3:28:f1:9f:01:dc:81:c6:85:bb:ef:16:9a:95:
7d:a3:15:36:fe:91:da:e7:cb:85:84:6e:a6:19:73:
9c:20:af:c3:37:ea:7c:b7:8f:af:9f:b7:1d:01:26:
9f:9e:c0:ae:e1:99:fa:3e:bd:56:33:21:ac:46:8d:
4d:e5:c3:53:ee:9a:a6:a9:1e:c6:7c:26:27:e7:fc:
95:9d:58:a7:38:05:21:77:3e:49:4a:df:5e:55:32:
58:a8:ff:19:1b:ca:d2:36:b2:ce:d9:55:ab:fc:24:
5f:32:7c:03:12:ad:e7:d7:51:58:6e:92:ca:ee:25:
20:94:49:4d:af:2c:b9:d7:62:92:0d:78:a4:ad:89:
b1:40:cb:b9:00:87:cb:52:36:f5:6a:32:ca:c7:ee:
64:86:f3:83:9c:92:6c:7a:06:37:ad:a2:61:c8:bd:
63:af:27:24:e1:2f:0e:7f:8f:c4:b5:95:c5:03:4b:
19:94:d8:e9:13:16:5e:67:a9:76:b3:e9:32:17:85:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:60:B9:1B:20:15:CD:1C:A7:37:04:2F:BE:88:3C:F6:D3:7E:00
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/pMBguRsgFc0cpzcEL76IPPbTfgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0/22
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0/22
151.236.77.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.95.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
185.31.112.0/24
185.31.114.0/23
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:37:59:f7:69:02:28:ed:01:40:35:b1:58:92:c9:f1:c2:1c:
23:fd:22:a8:a6:23:1e:6c:1a:ba:95:4d:b8:86:17:99:96:81:
7f:3c:7f:af:6d:8e:30:ea:e5:20:68:7b:4e:e1:a1:b8:5f:1e:
15:ed:af:53:e4:2a:ef:f5:12:52:15:5b:50:0e:44:7a:05:77:
72:94:3a:ed:48:a6:e1:18:ef:6d:39:63:51:75:09:51:ae:53:
17:84:1a:93:a7:d8:67:85:45:e4:b6:92:e1:6a:e6:45:54:50:
a6:f7:be:17:4b:1b:bc:14:c0:de:d5:fc:2d:b0:04:44:49:e9:
b6:a8:f5:1e:8b:3f:73:23:42:27:43:14:b3:c3:45:30:2d:e6:
95:13:f8:0d:5b:d9:80:a7:b0:22:8f:ec:cc:96:e3:6c:12:de:
47:f3:67:8e:cf:ac:88:43:86:70:4d:55:f1:3d:9a:b9:d5:88:
b7:4a:a9:12:fa:1c:18:ba:85:2b:e1:92:77:42:af:9e:43:5f:
77:d0:08:20:6d:93:26:b3:cd:2a:e2:76:30:dd:0c:81:8f:6d:
8c:54:0b:59:cb:06:76:db:17:ec:fa:a2:68:c3:62:8a:c3:f1:
bc:e3:c3:13:fb:7c:19:d8:7b:bb:2a:43:19:21:70:bd:7c:a8:
4e:75:c8:43
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 18 23:34:21 2024 by rpki-client on console-fra.rpki-client.org