Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/8SP0EETjjFRNw8YuID12HRy1fFA.roa
File: 8SP0EETjjFRNw8YuID12HRy1fFA.roa (raw, json)
Hash identifier: sYSZH34q2j4kgmrltvhB1zkyC1YiSbdPCz3qRX/2NOs=
Subject key identifier: F1:23:F4:10:44:E3:8C:54:4D:C3:C6:2E:20:3D:76:1D:1C:B5:7C:50
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01888B23FE63A9BC2CE682AA92CCAF68FBD4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/8SP0EETjjFRNw8YuID12HRy1fFA.roa
Signing time: Mon 05 Jun 2023 10:39:31 +0000
ROA not before: Mon 05 Jun 2023 10:39:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Jun 2023 17:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:23:fe:63:a9:bc:2c:e6:82:aa:92:cc:af:68:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 5 10:39:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f123f41044e38c544dc3c62e203d761d1cb57c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:9d:78:f5:ed:7f:2f:18:3a:af:74:d2:87:
60:ef:48:6c:37:58:de:d5:94:ed:d0:b9:ee:e7:c6:
41:7c:a5:05:a7:dd:68:d0:c3:44:71:1c:b5:9b:d5:
d9:ca:a7:26:d0:68:7a:75:ba:fb:47:c2:d2:07:96:
bc:9e:4d:87:50:ee:95:3f:f3:30:32:a7:26:e9:7f:
ea:a0:0a:c2:c4:4a:9f:4f:ef:d2:eb:49:c4:14:11:
86:17:3c:18:17:62:a9:5f:e4:22:28:ca:3d:ab:b9:
11:cb:28:45:ec:71:aa:c7:03:a2:80:7f:41:39:fa:
4d:58:3c:06:e4:50:f5:71:22:b8:1d:1c:2b:43:ec:
11:78:82:86:d2:43:16:e1:ec:ad:34:02:13:7a:93:
3b:c3:9e:3d:78:17:9a:19:88:aa:41:4e:f4:c2:4c:
ca:51:52:67:4f:1d:a3:fe:43:de:ea:24:a1:d7:f8:
5b:ae:57:3d:81:55:2c:d4:68:31:59:49:fc:1b:4c:
b6:c0:29:38:4d:a4:7c:09:0d:6f:d8:cd:bb:59:8a:
41:c2:0f:92:ee:e7:ca:54:bf:26:56:15:e3:1d:03:
c8:3a:0d:34:c2:f6:6a:95:bd:46:a5:6d:b6:23:78:
48:24:b6:94:10:cb:59:80:af:57:55:50:f5:28:9a:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:F4:10:44:E3:8C:54:4D:C3:C6:2E:20:3D:76:1D:1C:B5:7C:50
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/8SP0EETjjFRNw8YuID12HRy1fFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
89.33.163.0/24
89.34.8.0/21
89.39.252.0/24
89.43.40.0/24
89.43.42.0/24
89.43.44.0-89.43.46.255
89.43.73.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
74:83:ef:af:81:f6:fe:37:6d:ab:9a:62:55:a2:f3:e9:f7:33:
88:8b:21:bd:56:00:e3:75:ba:c1:9c:ef:a8:06:32:d5:87:34:
8f:31:5d:ac:3c:67:f6:6a:03:24:5b:46:7e:81:af:56:97:c5:
42:a4:cb:d5:b1:46:1d:4d:8f:09:16:1a:ed:26:e7:60:4f:4c:
01:6d:4e:af:23:1d:75:7a:18:d0:86:58:28:a5:5b:3b:f6:3b:
1b:51:9f:4d:5f:39:27:8c:ad:98:b2:88:ad:12:71:a0:4f:16:
42:41:2f:b1:1e:e4:46:43:f6:2f:f1:77:8a:9a:81:24:bf:56:
3f:2f:75:ce:8d:ab:97:b8:90:4f:b4:b2:bc:34:a2:87:bc:83:
58:73:c4:32:43:d3:55:f0:da:8c:22:fe:9c:00:f3:91:3c:ac:
a2:5c:c7:83:8b:48:03:25:49:6a:0c:e5:99:0c:69:d0:da:96:
44:a9:6b:f2:9b:16:c4:9f:9b:92:95:2b:a0:cc:34:ff:e5:37:
de:e1:f5:4e:9e:f7:e5:d8:f8:07:44:78:ec:ba:57:5b:44:0c:
82:f4:b1:b6:05:74:be:9d:01:51:64:0d:29:bf:67:68:ec:bc:
69:88:3d:a8:9d:24:8d:fd:41:3c:ef:1b:53:35:6d:bc:43:00:
a2:1d:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org