Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I_DnOQVHlJ8T7coLU20XPjoT9rY.roa
File: I_DnOQVHlJ8T7coLU20XPjoT9rY.roa (raw, json)
Hash identifier: UrLHl/1NMgxfqJBW/bNaVpZqzGkVqvaSHdGcq/p+fO4=
Subject key identifier: 23:F0:E7:39:05:47:94:9F:13:ED:CA:0B:53:6D:17:3E:3A:13:F6:B6
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018F9B834D210488741A11DAA0AEF9751CFE
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I_DnOQVHlJ8T7coLU20XPjoT9rY.roa
Signing time: Tue 21 May 2024 14:17:04 +0000
ROA not before: Tue 21 May 2024 14:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 18:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:83:4d:21:04:88:74:1a:11:da:a0:ae:f9:75:1c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 21 14:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23f0e7390547949f13edca0b536d173e3a13f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:9f:4e:6d:8c:64:7c:99:55:95:80:45:f8:
a3:07:13:44:29:72:9c:45:16:bd:ad:65:91:49:66:
d5:4d:7c:2d:d0:1b:46:d8:8a:b0:28:08:d5:19:a8:
5f:d3:47:f4:7d:a8:c7:17:30:16:65:0f:9a:6d:ec:
61:d9:eb:91:68:5b:09:dd:c0:33:f8:86:64:dd:9f:
54:c8:de:cd:6d:13:d1:a8:10:2f:50:55:9c:46:5d:
07:00:cb:89:00:86:48:85:92:53:65:64:43:d2:15:
d1:9e:29:3d:b1:5d:30:be:24:7a:de:10:62:62:14:
b6:ae:48:37:5c:66:8b:db:d5:92:7f:da:8b:b8:60:
18:26:bb:94:62:99:d5:01:05:ef:3d:05:57:1a:bb:
d0:09:fe:94:8b:48:18:18:5a:a4:41:d4:71:c2:b2:
4b:65:df:d2:19:e6:44:84:39:43:a2:07:b4:73:de:
5c:3c:f7:c4:1a:ad:70:6a:ba:4c:b4:a6:1e:94:04:
07:5e:75:03:13:32:9d:1a:47:f8:8c:4b:aa:4f:78:
f1:79:66:bd:f1:3f:93:5f:2f:72:57:18:c0:f0:92:
65:8a:2b:c0:42:ea:d7:bf:7d:ac:38:d5:d4:a9:b0:
bb:e9:81:fc:0c:5f:c5:08:33:61:44:47:bb:29:ea:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:E7:39:05:47:94:9F:13:ED:CA:0B:53:6D:17:3E:3A:13:F6:B6
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I_DnOQVHlJ8T7coLU20XPjoT9rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.45.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
93.113.158.0/24
93.113.203.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
0c:47:b3:13:78:b7:3f:9f:6b:3c:bc:a0:b5:1b:66:87:3f:c3:
e1:b9:f7:10:ec:7f:9b:d0:98:a9:a1:8a:7d:24:69:d6:1f:a5:
8a:75:e0:b9:4d:e8:2a:05:cf:be:b7:83:54:b7:40:a8:34:c0:
db:ec:05:23:91:e6:9f:6d:a1:f6:52:00:a8:ed:47:54:da:2f:
9c:5c:20:6c:3f:4c:8a:cc:5f:da:bc:ff:e7:02:4b:0b:2f:92:
20:5e:ac:f6:d7:08:a9:3a:85:d0:f4:00:48:ff:dd:98:e0:4b:
f3:33:bc:76:c6:42:8f:36:44:a8:f5:b1:19:c2:21:8a:89:13:
25:e4:ad:87:90:a8:b8:25:25:5d:f6:00:77:c7:f0:4e:95:ae:
40:8c:f9:78:cc:0d:54:62:66:e7:e1:f7:bf:9f:8e:1f:cb:07:
bb:e5:f7:35:93:ea:a3:29:8c:86:3e:14:07:9f:a2:c3:b4:9a:
3b:37:26:f1:3b:fa:7c:17:ec:e9:82:c5:0e:5d:70:be:58:d7:
ce:42:d7:cf:bd:ed:37:84:6f:28:ec:58:5e:b9:eb:4d:22:fc:
e3:ab:ca:bc:1e:83:a2:47:d6:9f:41:5c:a8:cc:fb:89:68:2a:
e5:43:4c:28:d4:a4:8c:9a:11:4e:28:24:23:c6:cd:45:8d:f9:
ae:f0:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org