Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/PHsvLUrPhZfYQ-Vb2-PiIIH3iNc.roa
File: PHsvLUrPhZfYQ-Vb2-PiIIH3iNc.roa (raw, json)
Hash identifier: lqNUJEBQw7AKmV6/dYHAl+sUvAaULWlAnxKYbh4bW/M=
Subject key identifier: 3C:7B:2F:2D:4A:CF:85:97:D8:43:E5:5B:DB:E3:E2:20:81:F7:88:D7
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018C127E618DA9363CBFD80159BB5E17BA4C
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/PHsvLUrPhZfYQ-Vb2-PiIIH3iNc.roa
Signing time: Mon 27 Nov 2023 20:35:21 +0000
ROA not before: Mon 27 Nov 2023 20:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Dec 2023 18:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:7e:61:8d:a9:36:3c:bf:d8:01:59:bb:5e:17:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Nov 27 20:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c7b2f2d4acf8597d843e55bdbe3e22081f788d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:82:4b:37:d6:48:62:71:b2:b5:0f:46:03:
1d:59:1c:c9:46:e8:69:2d:b0:89:46:f3:aa:7c:f2:
96:f3:85:81:e3:02:49:cd:f9:18:71:41:d5:6f:04:
2f:b0:82:1b:19:7e:b7:1e:62:3f:8e:1c:62:a0:56:
1c:a0:0e:c5:ab:e3:31:1c:79:9b:29:ce:1b:bc:6f:
5f:dd:44:74:88:05:15:5d:4e:b0:89:65:6d:6d:d9:
37:be:e3:97:33:80:47:0f:3c:ed:ac:0b:83:9a:b0:
0d:cd:88:42:f8:20:fa:ba:9a:dd:f4:31:37:4b:4b:
fe:49:14:c0:7c:3f:0a:f3:9d:d4:bb:66:43:14:69:
0c:eb:0c:29:05:9f:39:43:5f:02:94:a8:4a:5a:e5:
b7:2a:2d:7c:4a:89:50:d9:92:9d:1b:83:2b:63:db:
f8:a9:16:54:cc:39:2d:25:c1:4f:0f:71:97:89:ab:
01:02:29:19:c0:45:9b:f1:66:34:d2:c1:a7:a2:60:
a1:d9:7a:01:93:28:be:9a:34:da:90:e8:db:4f:a3:
18:4d:1f:49:5d:fa:d7:9e:4f:fb:fa:d5:c4:76:e3:
e7:7f:ca:fb:91:59:e9:f7:c0:52:4c:4e:0a:51:a1:
ab:ee:5d:9c:71:d9:3a:68:fa:e3:b0:c2:09:4e:f0:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:2F:2D:4A:CF:85:97:D8:43:E5:5B:DB:E3:E2:20:81:F7:88:D7
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/PHsvLUrPhZfYQ-Vb2-PiIIH3iNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.45.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
89.45.34.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
52:9e:f5:0e:ec:0c:29:14:bb:f6:b2:e8:1c:22:71:aa:a0:65:
d5:c2:c1:d0:17:04:1b:94:e1:95:de:5c:3d:8a:02:9a:e4:9b:
9d:b6:4e:68:07:7c:92:f2:6c:5b:fa:41:99:ab:62:4c:b4:63:
09:63:3d:75:57:a2:8c:ee:0e:49:37:33:2f:2a:db:e9:24:61:
07:86:a4:b6:d7:24:3a:2d:2e:8e:bc:f8:04:7d:05:76:da:91:
d0:63:ba:35:06:41:77:31:05:65:7c:6b:20:b0:b7:b5:15:32:
29:fe:8d:c8:08:d3:19:ef:dd:90:a0:e9:22:7c:15:ae:8c:e1:
3d:4e:35:5b:69:1a:f6:3b:86:79:41:ed:70:7d:5d:c0:8e:9e:
7b:20:ea:1c:ed:ed:cb:b7:fa:1b:56:03:74:72:11:13:1e:e1:
2a:59:32:28:d0:c1:e3:ed:af:41:00:48:21:08:05:ce:88:84:
07:60:5b:26:7f:74:d6:b8:fc:3b:5f:23:c5:0e:0f:ac:6c:de:
3d:00:43:09:a8:15:36:1b:f0:72:e1:71:f5:6d:b4:4c:f4:b2:
c6:0d:b6:e3:c9:b8:7e:b9:58:f0:3e:57:bb:3a:7a:a9:54:e7:
2f:2d:ac:07:5e:8f:22:45:8f:62:d9:47:f4:18:1e:84:2b:23:
d6:a8:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org