Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/dwtImDYf_sDMeyjfhY3g3onlLRw.roa
File: dwtImDYf_sDMeyjfhY3g3onlLRw.roa (raw, json)
Hash identifier: WbCeoVeNSHp4ptmLJEbL8dLjuFz7H8VSJZHAKLtCwFg=
Subject key identifier: 77:0B:48:98:36:1F:FE:C0:CC:7B:28:DF:85:8D:E0:DE:89:E5:2D:1C
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01856CE604D85393DE074868E1DB10D61601
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/dwtImDYf_sDMeyjfhY3g3onlLRw.roa
Signing time: Sun 01 Jan 2023 10:34:51 +0000
ROA not before: Sun 01 Jan 2023 10:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207333
IP address blocks: 86.107.44.0/24 maxlen: 24
86.107.45.0/24 maxlen: 24
89.33.41.0/24 maxlen: 24
185.129.51.0/24 maxlen: 24
185.129.50.0/24 maxlen: 24
92.114.7.0/24 maxlen: 24
185.100.64.0/24 maxlen: 24
185.100.65.0/24 maxlen: 24
185.100.67.0/24 maxlen: 24
188.241.216.0/24 maxlen: 24
188.241.217.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
86.107.198.0/24 maxlen: 24
185.111.105.0/24 maxlen: 24
185.111.104.0/24 maxlen: 24
185.111.107.0/24 maxlen: 24
185.111.106.0/24 maxlen: 24
185.98.7.0/24 maxlen: 24
185.98.5.0/24 maxlen: 24
185.98.6.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
89.46.34.0/24 maxlen: 24
185.113.132.0/24 maxlen: 24
185.113.135.0/24 maxlen: 24
185.113.134.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
2a06:940::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Jan 2023 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:04:d8:53:93:de:07:48:68:e1:db:10:d6:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 10:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770b4898361ffec0cc7b28df858de0de89e52d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:3d:b2:77:e1:94:ca:ab:7d:34:3a:3c:f7:
3c:cf:50:ab:02:cf:8f:7b:ec:4f:23:3f:83:a8:95:
6b:f5:78:94:8e:2c:23:a4:91:4e:eb:96:3e:ee:3f:
d0:4e:22:cc:41:ad:7f:52:e3:2a:a4:60:f3:db:df:
a5:9e:6a:83:26:47:e2:34:c4:12:91:f7:96:79:66:
f5:14:b3:50:e2:94:9e:58:b2:13:1c:35:0e:74:e0:
b1:4f:46:b9:bc:e3:f7:e2:0a:3f:dc:94:6e:dc:d4:
2d:f3:e1:43:ad:24:fa:24:b3:d7:9b:95:92:e1:6b:
e0:f7:fc:27:72:36:71:c0:93:f1:c8:70:63:0d:cd:
1d:2c:19:d5:5f:83:90:97:5e:ad:bc:1c:13:65:e3:
9c:52:9a:12:7f:9a:d7:95:2c:4d:75:a1:f4:bd:af:
7b:44:0f:04:78:28:9c:58:dc:92:a2:03:b4:93:46:
5b:08:34:4d:51:14:81:21:5e:e4:9e:a6:47:95:42:
63:03:97:6d:69:99:4e:2e:bc:af:30:b8:11:01:76:
d8:31:50:a4:69:9a:1c:03:05:6b:14:e9:e2:fa:44:
30:4c:94:85:cb:14:e8:96:67:32:6f:68:54:6b:81:
85:05:46:3d:bb:07:09:42:b5:3f:b6:10:8d:30:a2:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:48:98:36:1F:FE:C0:CC:7B:28:DF:85:8D:E0:DE:89:E5:2D:1C
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/dwtImDYf_sDMeyjfhY3g3onlLRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.44.0/23
86.107.198.0/23
89.33.41.0/24
89.46.34.0/24
92.114.7.0/24
185.98.5.0-185.98.7.255
185.100.64.0/23
185.100.67.0/24
185.111.104.0/22
185.113.132.0/24
185.113.134.0/23
185.121.80.0/22
185.125.89.0/24
185.129.50.0/23
188.241.216.0/23
IPv6:
2a06:940::/48
Signature Algorithm: sha256WithRSAEncryption
22:01:c6:be:66:a8:98:07:51:87:6a:37:fc:98:c4:14:35:ef:
61:9d:f8:6e:51:2d:11:9b:d3:6f:84:92:24:e0:2e:dc:c5:5c:
05:62:f4:7d:d3:3f:5c:9c:33:1e:6a:67:3f:0a:24:c0:a0:c7:
82:e1:ca:c6:f7:08:52:93:93:c4:71:3c:71:85:10:88:4f:aa:
61:fd:8f:12:02:73:f8:9f:a2:af:c9:e4:e4:f5:ac:5d:9a:ad:
da:21:85:32:41:68:90:10:9e:b5:48:d1:3c:d3:f3:cf:75:30:
15:9c:a0:d3:bb:bc:22:70:ea:d7:12:16:bd:30:83:fd:a7:18:
66:61:7a:5e:e5:39:3d:63:2a:09:1c:c1:81:79:3a:bd:63:53:
20:cb:87:d9:96:bf:3f:68:a2:b4:90:e3:ef:58:64:9f:48:c7:
0c:26:5e:00:78:39:b4:32:c1:ea:c2:58:38:54:ff:19:83:62:
31:0d:b2:2b:f7:70:00:03:3b:8f:9b:ef:6d:b2:cb:8b:8f:68:
46:8d:f5:86:3a:2a:2e:08:26:1d:0f:54:c6:7b:55:a8:9a:2a:
77:b7:60:76:d6:2a:f6:99:cc:64:06:ea:59:47:12:41:1e:d4:
fc:14:44:5f:3d:33:3b:09:08:3e:74:67:38:3b:d0:03:c6:8c:
a6:c9:c6:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:23 2024 by rpki-client on console-fra.rpki-client.org