Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9wQ-FTYexG1jwiym5Df4BusmiSc.roa
File: 9wQ-FTYexG1jwiym5Df4BusmiSc.roa (raw, json)
Hash identifier: 9AhUmdA2abxro4c1+1fF2jHZuSrHZs1JxDqIa+XTsjI=
Subject key identifier: F7:04:3E:15:36:1E:C4:6D:63:C2:2C:A6:E4:37:F8:06:EB:26:89:27
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 018C395A17DCC58CEB9C870E3B8A998955E7
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9wQ-FTYexG1jwiym5Df4BusmiSc.roa
Signing time: Tue 05 Dec 2023 09:40:54 +0000
ROA not before: Tue 05 Dec 2023 09:40:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43925
IP address blocks: 89.45.0.0/22 maxlen: 22
89.45.0.0/23 maxlen: 23
89.45.2.0/23 maxlen: 23
185.32.0.0/22 maxlen: 22
37.34.96.0/19 maxlen: 24
37.34.96.0/22 maxlen: 24
37.34.105.0/24 maxlen: 24
37.34.100.0/22 maxlen: 24
37.34.106.0/24 maxlen: 24
37.34.108.0/22 maxlen: 24
37.34.107.0/24 maxlen: 24
37.34.112.0/20 maxlen: 24
79.170.224.0/21 maxlen: 24
37.34.120.0/21 maxlen: 24
178.76.76.0/22 maxlen: 22
178.76.80.0/20 maxlen: 22
94.139.128.0/19 maxlen: 24
178.76.96.0/19 maxlen: 21
93.113.112.0/21 maxlen: 22
2a00:f900::/32 maxlen: 33
Validation: Failed, certificate revoked on Tue 05 Dec 2023 09:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:5a:17:dc:c5:8c:eb:9c:87:0e:3b:8a:99:89:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Dec 5 09:40:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7043e15361ec46d63c22ca6e437f806eb268927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:87:43:58:8c:1a:0d:57:f7:a1:df:de:26:
83:53:51:ac:97:09:30:12:b9:01:81:73:3c:55:31:
14:0e:0a:90:52:ba:bb:0b:05:74:0a:6b:87:35:25:
96:14:2f:de:12:97:1c:28:11:45:70:ef:e0:48:5b:
0c:03:82:c7:69:2b:1c:6c:90:be:e8:6c:0e:ae:a7:
e6:11:d4:9e:cd:c2:71:e5:3b:9c:b4:2c:9d:0a:f5:
dd:27:dc:ef:71:17:4d:38:ea:6d:b7:05:41:69:e2:
e5:b7:6e:7f:83:c8:08:6b:f1:34:f0:e7:ae:64:b5:
bf:f1:12:1f:9b:a0:b1:fb:b3:fc:83:e5:db:3f:17:
63:cc:f2:e0:d9:88:85:94:44:d3:29:e7:11:1f:0c:
13:95:ef:f8:65:92:ab:5c:00:5f:14:5a:7a:f2:73:
73:62:b2:9b:ae:e6:07:2b:15:5a:66:3d:ca:51:07:
ff:2c:ff:3b:5f:5c:4c:e8:9d:c1:6f:f4:8a:be:0f:
72:87:84:7a:af:08:71:85:97:bd:f9:91:27:c5:5e:
fb:38:33:93:70:0f:ed:af:4c:76:00:41:4a:d6:d5:
1c:5b:e8:33:94:0d:37:62:f7:96:55:77:e9:ba:a4:
c8:99:03:bd:b9:f2:8e:00:b1:e5:9c:48:a6:ea:4f:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:3E:15:36:1E:C4:6D:63:C2:2C:A6:E4:37:F8:06:EB:26:89:27
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9wQ-FTYexG1jwiym5Df4BusmiSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.96.0/19
79.170.224.0/21
89.45.0.0/22
93.113.112.0/21
94.139.128.0/19
178.76.76.0-178.76.127.255
185.32.0.0/22
IPv6:
2a00:f900::/32
Signature Algorithm: sha256WithRSAEncryption
59:1b:28:82:44:fc:fe:77:09:c2:e5:6f:ed:ca:98:ae:16:cb:
5e:45:47:53:08:50:90:6d:7d:6c:0d:95:80:8e:f8:f7:d4:d0:
32:a6:80:d3:dc:5b:ee:c3:37:34:fc:9f:4f:99:9d:db:25:f9:
98:9d:15:ce:08:5c:e0:10:43:34:c6:c9:cc:ed:75:73:a1:05:
e3:dd:d9:96:c3:2f:dd:9e:13:ed:89:9f:8a:18:ab:2f:cf:b2:
db:8e:68:cf:cb:3d:e5:9b:60:f1:4c:9d:5d:ba:67:d6:31:a4:
af:73:69:eb:c4:f8:43:d4:34:1d:34:8f:9b:a3:47:ed:f6:f7:
89:2c:95:ac:47:42:58:e4:45:bb:70:bb:b9:a5:94:74:8e:2a:
b8:f3:fe:7b:15:ac:e7:bf:58:30:46:a6:1e:6b:ce:8c:cd:d6:
42:c8:49:c9:c3:57:77:f6:5e:6a:9c:ee:2d:d1:eb:6b:12:be:
08:a0:ba:d7:8f:c3:f0:51:56:10:b6:d2:ae:67:d7:cb:76:5c:
62:0a:ab:9d:3f:76:58:fc:a6:bb:98:60:6f:74:42:cf:03:64:
f2:ca:f9:83:1f:33:00:75:7d:68:b9:9b:0d:a4:07:7c:3c:72:
77:31:94:ba:d5:37:76:0c:cf:e2:31:0b:2b:61:a7:03:fc:93:
c2:43:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org