Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IgE1_9EPscteYHg78stSFPp4AIA.roa
File: IgE1_9EPscteYHg78stSFPp4AIA.roa (raw, json)
Hash identifier: AyUJTpa1bu0Jlq6tMiEHkvXa4V4duty9iEqm4ka48zQ=
Subject key identifier: 22:01:35:FF:D1:0F:B1:CB:5E:60:78:3B:F2:CB:52:14:FA:78:00:80
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0185CEF84D197BFDC9BA50CDCD56312EE827
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IgE1_9EPscteYHg78stSFPp4AIA.roa
Signing time: Fri 20 Jan 2023 11:37:37 +0000
ROA not before: Fri 20 Jan 2023 11:37:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6762
IP address blocks: 89.43.43.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 19:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:f8:4d:19:7b:fd:c9:ba:50:cd:cd:56:31:2e:e8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 20 11:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=220135ffd10fb1cb5e60783bf2cb5214fa780080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:0e:06:a4:c2:4d:bb:50:c4:2c:ef:98:7d:
38:ec:38:74:40:3c:33:08:81:ab:f0:c5:a2:db:1b:
28:8c:84:b9:db:e5:25:c0:cd:db:6c:e8:eb:be:86:
7c:2a:70:5c:af:1f:6a:89:20:66:ea:44:75:18:f9:
99:b5:f0:f4:5d:03:fc:d8:48:33:16:af:11:35:c8:
5d:eb:29:48:d8:c6:ac:fb:53:8c:7c:33:6d:ae:af:
fe:b5:cf:74:a3:8e:24:35:48:fe:a5:ba:ea:26:23:
5a:9e:39:e6:ff:52:51:61:2c:02:80:10:41:37:46:
6a:e9:8e:76:4c:9c:db:b5:86:e7:e4:d7:54:3c:b2:
ad:11:e3:28:b9:21:e4:41:11:24:37:f5:d6:53:74:
9a:2c:0b:8a:e6:b7:e3:b5:4f:e8:1d:83:13:90:8e:
e7:68:cf:b3:7e:59:9d:f2:ae:5f:b1:d1:90:49:d6:
75:6a:ba:ca:35:ca:d6:7d:b8:09:10:8b:f6:09:96:
93:aa:19:85:cb:25:c4:17:2e:5e:56:25:05:af:d8:
66:88:87:f7:eb:5f:76:bd:21:37:dd:e8:54:b4:a5:
43:90:0f:6a:de:b3:ba:25:f2:de:db:30:86:ef:0e:
8b:fa:93:c8:f9:ed:8f:72:08:cb:d5:1b:c4:66:e3:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:35:FF:D1:0F:B1:CB:5E:60:78:3B:F2:CB:52:14:FA:78:00:80
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IgE1_9EPscteYHg78stSFPp4AIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.104.0/24
89.33.163.0/24
89.39.252.0/24
89.43.43.0/24
89.43.73.0/24
89.45.34.0/24
93.113.158.0/24
93.114.171.0/24
188.215.72.0/24
188.240.14.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5c:4c:ed:e2:2d:55:29:f4:e1:6b:36:ff:11:4b:35:01:6d:
c1:36:df:03:2c:4a:52:6d:18:d4:97:0c:d7:14:85:7f:70:b8:
3d:d7:da:df:41:1b:2e:31:cf:7c:e3:5b:7e:b8:3e:8b:27:d6:
47:92:7c:45:e3:84:bc:89:92:c2:e2:d0:ed:aa:41:08:6b:a8:
6d:4e:49:60:48:cb:88:cd:3f:82:41:7a:4d:bd:9e:43:0d:8f:
8b:28:2c:44:c2:6b:07:52:60:ad:5d:c9:2b:32:4e:26:12:e5:
dd:ce:bd:24:28:1e:b9:45:d0:e7:7a:11:a0:36:9a:72:e3:81:
0b:c0:4a:66:02:ce:47:94:ac:75:48:60:35:1b:23:f5:47:96:
d7:07:4a:a8:37:7f:69:ef:d5:cf:c9:7f:06:3f:32:d6:13:48:
b2:29:e0:50:f6:f9:f8:2f:ee:7d:1c:2e:c6:28:f8:ba:4a:d9:
6c:77:3b:f3:41:26:c2:82:5d:cd:6f:86:52:f3:4e:f7:9d:a2:
bb:72:08:de:2a:d3:27:01:0d:c4:31:f7:6e:5a:c5:e6:00:d5:
c8:7a:51:60:55:11:9e:32:ef:ef:31:6f:3e:74:dc:11:63:2a:
a4:4d:e6:fd:a8:9d:3a:a8:23:18:10:af:8f:c9:71:ea:d1:14:
52:6c:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org