Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/T3Xp9iK2EUq7tpmGGfyLAhvbK64.roa
File: T3Xp9iK2EUq7tpmGGfyLAhvbK64.roa (raw, json)
Hash identifier: 25fTftJ1B7/zud/+N5F9xDTQ0lM3TG6kUOo1K+y3g9Q=
Subject key identifier: 4F:75:E9:F6:22:B6:11:4A:BB:B6:99:86:19:FC:8B:02:1B:DB:2B:AE
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018C870BCC17A1E62E8872D86CE4C5F2134A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/T3Xp9iK2EUq7tpmGGfyLAhvbK64.roa
Signing time: Wed 20 Dec 2023 11:45:46 +0000
ROA not before: Wed 20 Dec 2023 11:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:0b:cc:17:a1:e6:2e:88:72:d8:6c:e4:c5:f2:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Dec 20 11:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f75e9f622b6114abbb6998619fc8b021bdb2bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:f3:5a:51:36:a2:15:42:dc:b6:07:e6:f7:
44:40:b3:35:ae:2c:e5:2d:5e:4f:23:18:da:1f:8d:
7b:ea:2c:35:b5:01:12:98:c9:31:f6:c6:ac:35:ed:
eb:a6:c7:c8:4c:ec:db:05:63:4d:a1:a7:f4:29:d0:
1a:87:4e:16:32:9a:4e:2f:96:df:a6:f0:75:b1:e4:
50:c8:d5:f7:e3:d3:c9:e1:70:38:01:c4:12:91:b7:
d4:ad:72:8e:26:48:e1:b4:4f:39:b8:ab:e6:99:a9:
a2:59:40:f7:50:c3:2c:55:63:4f:da:ad:16:34:24:
ed:c4:ea:ec:42:c6:d7:e5:7f:1a:96:a6:7b:27:cd:
a8:b7:d6:d3:76:34:66:40:be:41:5f:5b:40:00:d8:
ec:6a:e8:ce:59:83:e2:17:04:b3:c0:fd:09:73:b5:
10:52:83:19:db:51:cd:e7:68:6b:35:b7:e5:08:45:
52:52:48:dd:ce:9c:c3:65:9e:84:25:ac:20:f9:db:
80:c7:5c:78:ec:a5:ae:c6:ce:85:fb:c3:86:ce:c7:
e9:c2:c8:c0:44:81:fa:01:5b:04:db:ea:ad:28:84:
a3:8c:b0:42:66:95:f9:c3:ea:ed:6e:18:34:9d:d1:
cd:09:2c:ea:41:72:87:e3:8d:49:56:66:90:71:58:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:75:E9:F6:22:B6:11:4A:BB:B6:99:86:19:FC:8B:02:1B:DB:2B:AE
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/T3Xp9iK2EUq7tpmGGfyLAhvbK64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.45.0/24
89.43.73.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
19:8a:37:c4:35:1a:26:50:e5:47:2e:78:d5:5a:8d:b7:ee:14:
88:65:16:1e:45:a3:ac:7d:02:ed:5f:bf:c9:f0:bf:4d:9d:f4:
59:4f:27:45:c4:52:ef:ed:49:ae:4c:3a:a2:23:4e:5b:a5:53:
89:14:3e:42:44:ed:01:7c:b3:bb:ef:9b:a0:57:b1:13:2b:7b:
6e:7d:21:79:c3:33:46:55:70:be:49:76:36:1c:41:f5:a1:64:
e7:b6:b6:3b:c3:39:e0:e2:8c:29:dd:c2:02:8d:dd:4a:a7:cb:
36:82:16:af:a3:49:f6:40:fc:0f:de:c3:4b:98:11:1b:40:a7:
51:1c:1c:15:96:93:25:46:4f:e8:01:85:ab:e0:60:4c:eb:9a:
d6:ae:2f:5e:1f:8d:36:bb:b0:39:54:61:81:68:34:2c:a9:a4:
0e:48:71:4a:c3:5a:54:b3:ea:99:fe:2e:93:07:10:96:67:58:
0e:40:5f:d4:78:d9:f8:bc:01:01:02:da:ff:bd:e9:1f:ae:ac:
6b:1f:ba:81:89:4e:1f:92:9c:c3:17:a7:ea:4f:c8:24:58:58:
a9:55:a9:54:5f:bb:60:0c:2b:40:23:b6:ab:bc:36:d9:9f:a1:
89:6e:04:c2:58:40:21:bd:26:da:e3:49:e8:e1:b3:45:f2:06:
51:0a:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org