Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/1TrAbjHhu7idkEUHAAnB46L2Lbs.roa
File: 1TrAbjHhu7idkEUHAAnB46L2Lbs.roa (raw, json)
Hash identifier: 57I/LIAkQH+lGacMhbSeOy8rSFTQgwXs5TQMhxl+Cvg=
Subject key identifier: D5:3A:C0:6E:31:E1:BB:B8:9D:90:45:07:00:09:C1:E3:A2:F6:2D:BB
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 0190A53D44C9FF12AA0371396BABE1DE3A7D
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/1TrAbjHhu7idkEUHAAnB46L2Lbs.roa
Signing time: Fri 12 Jul 2024 04:39:34 +0000
ROA not before: Fri 12 Jul 2024 04:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202958
IP address blocks: 37.140.243.0/24 maxlen: 24
46.226.123.0/24 maxlen: 24
77.246.247.0/24 maxlen: 24
86.107.198.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
91.243.71.0/24 maxlen: 24
93.115.14.0/24 maxlen: 24
185.98.4.0/24 maxlen: 24
185.100.66.0/24 maxlen: 24
185.113.133.0/24 maxlen: 24
185.116.192.0/24 maxlen: 24
185.116.193.0/24 maxlen: 24
185.116.194.0/24 maxlen: 24
185.116.195.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.125.88.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
185.125.90.0/24 maxlen: 24
185.125.91.0/24 maxlen: 24
188.244.115.0/24 maxlen: 24
193.201.11.0/24 maxlen: 24
194.4.56.0/24 maxlen: 24
194.4.57.0/24 maxlen: 24
194.4.58.0/24 maxlen: 24
194.4.59.0/24 maxlen: 24
194.146.40.0/24 maxlen: 24
194.146.41.0/24 maxlen: 24
194.146.42.0/24 maxlen: 24
194.146.43.0/24 maxlen: 24
213.109.146.0/24 maxlen: 24
2a06:941::/48 maxlen: 48
2a06:941:1::/48 maxlen: 48
2a06:941:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Oct 2024 10:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:3d:44:c9:ff:12:aa:03:71:39:6b:ab:e1:de:3a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jul 12 04:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d53ac06e31e1bbb89d9045070009c1e3a2f62dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:94:db:81:4e:2a:1d:87:f0:9d:77:7b:1a:
51:e6:a8:82:b1:58:5a:3e:95:8b:13:26:d6:af:d6:
9b:88:e1:80:58:7e:a5:fe:8e:a7:62:de:12:1b:c3:
8d:af:b0:20:fd:73:0d:6e:08:05:28:e2:4c:8d:0a:
3d:77:22:08:11:8c:d9:ff:f6:73:cd:3b:15:ac:8f:
b1:4b:ea:b2:66:7c:64:61:86:4a:a4:4b:7a:7a:1c:
20:b9:d0:0d:ad:07:c3:7b:55:c3:be:41:e0:0b:e8:
4f:ad:30:90:06:19:41:d3:20:26:b1:27:f7:74:90:
f1:1c:3b:08:09:86:b4:27:94:99:b7:e0:47:e8:f5:
cd:97:ea:dd:c5:8c:bd:6f:ec:ee:92:9f:4d:68:0e:
fa:20:48:e7:b7:67:bc:2c:93:0f:6c:c4:9c:1a:0f:
2a:eb:58:90:0f:69:d7:98:b3:9a:47:95:92:cf:ac:
81:62:1b:4a:5c:64:02:54:b3:98:2e:4e:53:17:67:
03:64:34:2b:bc:2d:3c:9b:20:85:e4:a5:4e:69:ec:
b7:cd:14:5d:7a:52:a2:16:ac:c0:66:6a:b9:8f:7d:
94:52:c5:a3:80:fd:5c:0d:e7:51:c8:de:f8:7e:be:
aa:03:7b:70:99:7d:68:80:97:d2:bc:06:7f:f8:0a:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:C0:6E:31:E1:BB:B8:9D:90:45:07:00:09:C1:E3:A2:F6:2D:BB
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/1TrAbjHhu7idkEUHAAnB46L2Lbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.243.0/24
46.226.123.0/24
77.246.247.0/24
86.107.198.0/23
91.243.71.0/24
93.115.14.0/24
185.98.4.0/24
185.100.66.0/24
185.113.133.0/24
185.116.192.0/22
185.121.80.0/22
185.125.88.0/22
188.244.115.0/24
193.201.11.0/24
194.4.56.0/22
194.146.40.0/22
213.109.146.0/24
IPv6:
2a06:941::-2a06:941:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:fd:c2:23:63:7f:73:0d:0e:9f:9c:c0:bf:21:27:00:c7:9f:
46:8f:43:53:4c:09:e0:58:57:2a:be:42:ca:a0:a3:c4:72:90:
c6:f1:71:2e:37:d9:14:0a:f0:06:46:b4:38:f2:c8:fd:41:1c:
e7:6d:03:91:b9:31:fa:b8:06:60:96:c3:6e:b2:d4:45:ea:8c:
62:d3:f2:ca:91:44:3c:c6:72:5a:de:a5:cd:d4:2c:2b:41:5c:
be:bf:f4:6f:ea:02:50:a2:ca:ac:85:bc:bf:76:ec:1e:c3:b2:
ed:29:90:f9:56:c3:fd:cd:34:3d:70:26:4f:42:ec:cf:07:84:
be:5f:a3:c5:82:6c:62:cd:3e:43:20:d5:fc:05:b0:89:d1:3b:
31:92:04:d2:28:7e:1a:66:4c:1a:3d:75:74:aa:64:d9:e6:24:
8b:ca:49:74:75:12:c4:e6:27:d7:a6:84:ff:9e:2d:2b:e5:90:
37:02:d4:aa:d6:c7:93:05:f7:74:25:77:cb:23:8e:70:73:87:
30:c0:c4:49:7c:5b:0f:c7:44:65:1a:27:06:d2:18:21:17:f2:
cc:5f:02:04:73:06:c2:c5:cb:e4:31:92:ca:0b:92:c9:84:c1:
56:1b:ca:32:68:fc:95:db:c2:26:44:50:68:f8:2a:81:c5:5a:
d2:67:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 12:04:28 2024 by rpki-client on console-fra.rpki-client.org