Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/91hyvJJuQ8KNIuT2nHAHMGT8AhY.roa
File: 91hyvJJuQ8KNIuT2nHAHMGT8AhY.roa (raw, json)
Hash identifier: 58yRJmsM24hPf2jWhZy1g0ufdLr187qmB4i2BeHj6Vk=
Subject key identifier: F7:58:72:BC:92:6E:43:C2:8D:22:E4:F6:9C:70:07:30:64:FC:02:16
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 018BCE912AFD3C649E0BD8B1C15396ABCA8F
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/91hyvJJuQ8KNIuT2nHAHMGT8AhY.roa
Signing time: Tue 14 Nov 2023 16:01:42 +0000
ROA not before: Tue 14 Nov 2023 16:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28944
IP address blocks: 195.234.98.0/24 maxlen: 24
130.250.109.0/24 maxlen: 24
80.231.248.0/24 maxlen: 24
151.237.11.0/24 maxlen: 24
85.187.213.0/24 maxlen: 24
85.187.215.0/24 maxlen: 24
85.187.214.0/24 maxlen: 24
80.231.174.0/24 maxlen: 24
147.185.246.0/23 maxlen: 24
147.185.254.0/23 maxlen: 24
151.237.95.0/24 maxlen: 24
130.250.134.0/24 maxlen: 24
151.237.12.0/24 maxlen: 24
130.250.133.0/24 maxlen: 24
195.219.123.0/24 maxlen: 24
2a01:3e7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:91:2a:fd:3c:64:9e:0b:d8:b1:c1:53:96:ab:ca:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Nov 14 16:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f75872bc926e43c28d22e4f69c70073064fc0216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:c8:3d:ba:a7:fe:d1:db:2f:3f:cf:62:2c:
b2:a9:ee:d2:46:1b:67:ee:a3:50:74:8d:3e:a6:b8:
7e:c0:3a:e7:f8:00:76:a7:b9:ce:43:9d:50:05:b1:
30:7a:52:83:60:37:47:18:ba:48:d8:90:04:9f:02:
9d:5f:65:9f:93:83:ce:3e:94:cd:2e:65:f1:2a:d1:
41:61:a7:58:10:8b:70:72:df:44:36:9a:ac:c6:60:
c5:bd:b5:6d:85:f4:bb:f4:a3:a8:67:b4:ad:64:4a:
77:44:af:13:e6:fd:6e:1d:ad:fd:f1:8a:05:26:6e:
fa:cd:46:67:33:81:cf:e8:86:c0:24:ad:fe:a4:fd:
e4:b8:71:89:30:c7:95:9d:a1:38:1e:71:a2:ac:1f:
88:45:98:6d:b6:77:9b:32:ca:23:9a:ec:aa:c7:22:
4a:1b:72:b6:d1:5f:1a:01:8e:2d:1d:91:74:fc:b9:
ef:74:fe:c3:e9:39:06:0b:a8:b1:79:d0:c8:4f:ad:
a4:74:95:82:94:2b:e1:f1:3a:5f:bd:b2:c5:9a:f0:
38:ad:20:29:f1:1d:5a:ea:19:1a:9c:43:c7:68:46:
58:5a:4f:d0:03:2a:c2:5f:f7:7c:45:bd:1a:b4:2a:
73:ba:4b:3b:d8:ee:6e:7a:8b:31:a3:36:2b:dd:75:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:72:BC:92:6E:43:C2:8D:22:E4:F6:9C:70:07:30:64:FC:02:16
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/91hyvJJuQ8KNIuT2nHAHMGT8AhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.174.0/24
80.231.248.0/24
85.187.213.0-85.187.215.255
130.250.109.0/24
130.250.133.0-130.250.134.255
147.185.246.0/23
147.185.254.0/23
151.237.11.0-151.237.12.255
151.237.95.0/24
195.219.123.0/24
195.234.98.0/24
IPv6:
2a01:3e7::/32
Signature Algorithm: sha256WithRSAEncryption
81:12:fc:16:a0:ee:15:97:0e:73:5d:1b:c4:0a:63:46:9e:ff:
46:57:f1:3a:27:47:31:4a:1d:4e:19:38:bc:29:9d:8a:a8:7f:
f9:c0:88:58:a8:35:86:58:1f:78:c9:5a:41:63:6a:a5:83:69:
fb:36:88:3f:6c:74:1c:41:eb:41:d1:30:ea:6b:95:2e:22:77:
23:38:d2:f1:ef:c1:58:0e:44:0c:4e:4c:f2:ad:c5:a1:c4:79:
22:98:84:c8:5a:11:a6:4e:89:8a:a2:d3:16:23:7f:85:e0:9e:
5d:a1:85:73:5b:31:55:63:5a:21:bc:1e:b2:fc:23:92:3f:42:
a9:ab:fe:bf:a1:85:e7:ea:3d:c8:a1:1c:e9:7b:ba:79:56:51:
8c:4a:70:09:1c:17:a0:0b:90:de:19:ae:1a:a1:56:f9:0e:6d:
af:31:d9:6f:a9:67:32:f7:f3:36:94:b7:3b:42:a6:ef:20:a8:
90:2b:2d:23:3a:7d:e9:55:71:8f:c7:9b:37:ac:1a:87:ed:86:
0d:94:f2:42:a2:24:52:3d:f1:c7:a9:3d:35:a1:af:6b:4a:d2:
31:11:c2:d0:c1:1d:c5:b1:e3:ea:39:83:54:14:55:00:73:5d:
fd:73:d6:09:69:5b:74:dd:b5:50:e9:7d:a7:cb:96:f4:28:9d:
6e:c7:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org