Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/731d8Wqph6IlC1jAa0OdwYlMOyY.roa
File: 731d8Wqph6IlC1jAa0OdwYlMOyY.roa (raw, json)
Hash identifier: cUcAXc1IdxCyuf+jeLLexBWTWzDgWUCMBKs207bRVsk=
Subject key identifier: EF:7D:5D:F1:6A:A9:87:A2:25:0B:58:C0:6B:43:9D:C1:89:4C:3B:26
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 018CC2DAFDD59BDC59B43CB482EBF1344868
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/731d8Wqph6IlC1jAa0OdwYlMOyY.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209984
IP address blocks: 89.43.72.0/24 maxlen: 24
109.205.136.0/22 maxlen: 24
185.237.136.0/22 maxlen: 24
185.249.232.0/24 maxlen: 24
193.39.95.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
89.40.238.0/24 maxlen: 24
2a06:ce00::/29 maxlen: 29
2a0c:1380::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 14 Feb 2024 10:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fd:d5:9b:dc:59:b4:3c:b4:82:eb:f1:34:48:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef7d5df16aa987a2250b58c06b439dc1894c3b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:8a:b3:75:04:a9:56:2a:6e:62:98:60:59:
c3:37:f7:7f:c0:93:ec:6e:d5:9e:aa:f4:da:ac:56:
47:cc:f7:33:5c:e9:f7:a7:4b:07:5f:2f:71:72:cf:
4c:60:d7:c2:82:c6:cd:2e:b2:8a:a0:85:c2:86:96:
c6:ec:6f:1e:5c:5c:7e:85:6e:36:91:e3:f1:5d:8d:
e5:05:78:bb:bc:4e:1f:cf:9b:a0:01:ea:2d:ba:38:
d2:3a:f5:fe:cd:fd:c5:d6:57:a7:b2:c5:f9:4f:0d:
7b:7b:f3:d2:b9:40:95:4f:0e:f9:d3:1a:9d:9c:5c:
ff:34:38:d7:65:a1:e9:62:5e:29:a3:f0:7b:9d:2f:
f9:5d:62:b9:3c:b5:b7:e3:c9:f7:cd:dc:0f:35:70:
3a:2b:ea:bb:ed:8a:69:a5:14:b8:85:43:e3:9f:e9:
0e:46:1d:dd:55:a6:a0:10:41:0e:fb:67:0c:5b:1c:
2d:20:1f:dc:59:5b:6a:2e:48:60:de:8e:20:50:53:
4c:05:b3:b1:d2:fb:99:7f:55:e7:3a:c7:74:9e:ca:
bf:10:fb:ba:d1:c9:0f:93:56:8b:6e:45:9d:40:5e:
34:f9:b0:64:73:5c:2b:97:f3:78:dc:cd:39:52:c1:
42:94:44:1f:da:5b:be:58:6f:d2:b1:ce:99:c0:7d:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:5D:F1:6A:A9:87:A2:25:0B:58:C0:6B:43:9D:C1:89:4C:3B:26
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/731d8Wqph6IlC1jAa0OdwYlMOyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
109.205.136.0/22
185.237.136.0/22
185.249.232.0/24
193.39.95.0/24
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a06:ce00::/29
2a0c:1380::/29
Signature Algorithm: sha256WithRSAEncryption
42:be:bb:61:d7:bc:9b:26:3c:49:50:7c:83:d8:15:9a:4b:34:
96:05:1b:90:95:76:73:87:4a:43:7c:27:d4:e9:02:43:24:b9:
84:f4:f1:83:42:d7:78:a4:7b:1d:1a:1f:97:d2:0c:49:2d:34:
77:d7:ca:3d:9c:9f:28:d3:b7:25:43:cd:21:e4:dc:b9:20:43:
b5:89:90:ae:39:e4:39:c5:e4:e8:a9:5f:35:15:2b:ed:61:02:
64:6f:4e:f6:ad:73:88:a8:dd:c7:04:65:0a:31:c8:ae:d7:8f:
fa:da:15:9c:94:c8:2d:88:fa:89:b7:e0:02:d5:64:f8:93:52:
14:89:63:b3:fc:c4:5f:4d:7c:49:82:d7:bf:3f:47:4a:e8:d9:
6e:6e:2d:f1:4d:1b:1a:3c:03:da:76:9d:f4:88:21:1a:35:91:
11:00:22:35:e8:b6:cc:d6:56:76:03:56:a9:d0:17:76:5d:6e:
a5:5a:35:62:7d:53:88:5a:5a:cd:37:43:3c:bb:ed:b8:7f:0f:
5b:a5:5e:fd:79:e1:22:c7:8c:be:df:e5:70:08:18:e8:ab:1a:
5a:78:2d:fc:69:06:3e:fa:1c:72:cb:aa:6f:c4:e2:dd:3a:1b:
a2:73:7c:9a:52:dd:1e:1a:52:dc:ce:bf:87:3f:4a:e9:48:f4:
da:52:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:12:35 2024 by rpki-client on console-fra.rpki-client.org