Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9Yb3QqNVZLEvM_2hATvaAIfA0Vc.roa
File: 9Yb3QqNVZLEvM_2hATvaAIfA0Vc.roa (raw, json)
Hash identifier: V9Sv3ptwi6h1hRvN60AG03hh4bB0Cj/9sh2C7X4TVF4=
Subject key identifier: F5:86:F7:42:A3:55:64:B1:2F:33:FD:A1:01:3B:DA:00:87:C0:D1:57
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018D5C1114904802E39509144781F58759B9
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9Yb3QqNVZLEvM_2hATvaAIfA0Vc.roa
Signing time: Tue 30 Jan 2024 20:30:39 +0000
ROA not before: Tue 30 Jan 2024 20:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/21 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.115.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/22 maxlen: 24
95.164.0.0/22 maxlen: 24
95.164.4.0/22 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
95.164.60.0/22 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 21:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:11:14:90:48:02:e3:95:09:14:47:81:f5:87:59:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 30 20:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f586f742a35564b12f33fda1013bda0087c0d157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:73:eb:8a:f3:58:71:e5:b0:3d:a8:13:cb:
4a:28:c4:1f:93:32:96:b9:5b:db:99:b7:a1:06:a8:
74:27:cf:5f:11:29:d9:d9:d2:31:90:0f:90:b6:37:
a4:1e:6a:0e:aa:10:ce:bf:2b:8f:74:65:89:38:f5:
21:13:70:f0:ef:f2:a6:35:c5:fc:8e:a0:b1:8b:d3:
2f:a2:bb:ab:10:fc:6b:a3:00:89:bf:69:0c:62:33:
01:b1:1f:61:ff:cf:61:58:ea:03:2f:1f:12:e8:94:
81:46:3f:85:03:ba:47:cb:5c:9b:ef:b2:e6:76:78:
01:1c:f6:6f:8c:72:64:a2:3e:26:11:51:f7:6a:97:
a8:57:2a:66:2f:e3:34:c4:2e:dd:22:57:74:3a:e3:
c9:45:33:7f:5a:97:1f:04:e8:d3:29:95:6b:a3:2e:
ad:fa:4e:b5:7e:95:bd:24:7b:df:d6:52:cd:63:d3:
71:ff:54:51:73:4e:74:c0:5f:32:09:4b:45:19:6e:
2e:22:5f:6a:05:97:8e:3e:99:4f:b6:7f:e5:50:a7:
4b:fb:ef:89:f1:fc:a4:7b:f6:41:1a:0d:71:31:2c:
14:fa:f6:7a:21:f4:64:fd:85:41:00:7a:bf:a0:8a:
44:e8:5f:fb:1a:1f:05:9b:41:99:2f:52:a9:73:1b:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:F7:42:A3:55:64:B1:2F:33:FD:A1:01:3B:DA:00:87:C0:D1:57
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9Yb3QqNVZLEvM_2hATvaAIfA0Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.8.0/21
94.131.96.0-94.131.123.255
95.164.0.0-95.164.11.255
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
Signature Algorithm: sha256WithRSAEncryption
18:f6:75:3f:9b:16:34:46:35:ab:e3:90:1a:25:80:94:be:75:
83:d9:19:2b:f4:ae:81:a9:5f:13:b3:1b:59:58:f4:0d:d7:0a:
59:48:f9:c3:fb:df:6e:4f:b7:d6:97:07:a1:08:ad:0a:fb:98:
17:55:5e:c2:f0:5b:00:e0:ad:e0:61:31:93:a5:72:91:84:a1:
3e:63:3b:10:4e:24:79:9d:c3:a8:8b:85:91:1c:ff:df:82:9b:
47:4c:df:3d:2b:60:cb:53:a4:e1:d9:c0:6f:6f:cf:a3:9c:da:
83:af:c8:88:41:6e:16:b7:7d:1b:b7:b7:a2:65:b5:c2:b4:58:
bd:f6:f2:fd:28:8a:57:ab:20:6f:ab:4b:56:86:85:df:a3:aa:
1f:ae:2c:1b:8b:0f:23:9b:ab:fc:40:e4:6d:c7:39:b7:20:18:
bc:54:89:66:bd:21:59:cf:cf:30:27:cf:ec:55:24:0c:5d:d3:
f8:08:c6:bc:20:18:16:61:8c:1c:9d:43:81:25:56:6d:63:5c:
42:c3:64:f6:96:fb:3e:44:c1:dd:2d:5e:32:08:78:07:0c:8b:
0b:f7:c8:7f:4b:69:b8:77:b8:90:f1:56:8e:90:af:07:2b:55:
47:5d:50:76:ed:b0:4e:51:5c:7a:de:77:00:43:68:cd:55:32:
9e:8e:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org