Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bsp4i1Y8uufoiOItrLSmP-9bxzc.roa
File: bsp4i1Y8uufoiOItrLSmP-9bxzc.roa (raw, json)
Hash identifier: y1+LBOkZBuuEht3IetbO7ThrckRVj3oKGRDyBjWmMiA=
Subject key identifier: 6E:CA:78:8B:56:3C:BA:E7:E8:88:E2:2D:AC:B4:A6:3F:EF:5B:C7:37
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018A42DFE7436245B69E71EFEAA6092C0A98
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bsp4i1Y8uufoiOItrLSmP-9bxzc.roa
Signing time: Tue 29 Aug 2023 19:58:04 +0000
ROA not before: Tue 29 Aug 2023 19:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Sep 2023 09:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:df:e7:43:62:45:b6:9e:71:ef:ea:a6:09:2c:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 29 19:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eca788b563cbae7e888e22dacb4a63fef5bc737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:9e:a5:26:f2:27:36:87:9c:56:61:21:8e:
fc:0c:89:08:78:99:1a:81:27:b1:71:3d:f2:37:b5:
1d:d1:80:b1:5d:ba:4b:a3:5e:f0:27:a7:c2:4d:65:
19:b8:fc:63:a9:d6:e5:34:a1:d0:f1:24:6c:61:08:
cd:fa:b0:03:aa:f9:56:a6:48:24:c7:1e:d6:70:f2:
60:8e:9d:4e:0f:d5:ea:eb:63:0e:bc:8b:8d:05:75:
f5:76:96:4b:3b:8e:4d:84:d1:b0:81:63:c9:c7:50:
19:1c:e6:0e:63:86:f2:55:c0:d9:d4:ba:05:83:2e:
22:97:28:64:77:5f:75:cb:fc:6b:5f:3c:db:b4:5c:
02:c0:dc:88:71:0f:fb:75:17:95:4e:c1:53:d1:3a:
36:1e:46:7d:e5:f3:98:55:65:c3:68:a1:ef:ec:96:
b2:3e:97:32:14:35:2a:fe:90:2a:23:dd:2f:f3:be:
c6:53:32:e1:42:13:62:44:b3:35:97:e2:2b:b6:14:
7d:6a:9d:f1:1f:d2:28:f6:df:48:5e:18:29:34:f2:
e6:0e:80:4e:39:16:8c:af:ea:f8:28:d6:34:23:2d:
82:26:52:e6:9c:97:74:92:d3:b1:19:bd:d5:73:0a:
90:35:1c:1a:ed:18:fb:fb:5b:05:ea:37:27:3c:fc:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:78:8B:56:3C:BA:E7:E8:88:E2:2D:AC:B4:A6:3F:EF:5B:C7:37
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bsp4i1Y8uufoiOItrLSmP-9bxzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.42.0-89.43.44.255
89.43.46.0/24
89.45.34.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
10:7d:a3:bb:ca:4b:68:d1:00:fa:60:48:65:00:56:2f:2b:71:
c7:dc:8b:66:70:0c:2f:cf:8b:ba:21:58:d7:e7:94:c1:07:aa:
bb:49:1f:3e:ec:b1:d8:90:d3:27:cf:30:b8:cf:8a:52:31:25:
ec:f2:c0:3a:db:58:71:42:02:12:a7:a8:89:ad:e4:47:3c:32:
c0:2c:86:f6:38:be:24:24:41:3a:9c:8b:6d:a7:22:2c:67:50:
f4:22:ab:16:10:98:b4:9b:31:9a:4f:29:4e:fd:18:4a:08:09:
7b:85:3f:bf:dc:d7:44:c4:93:5c:0f:d0:4a:28:da:b4:9e:09:
8a:fc:ce:78:3a:09:7d:8b:65:01:b3:e8:21:df:02:68:4f:16:
56:2e:fa:60:70:04:ec:58:88:bd:1d:b4:1c:0f:91:3c:39:e3:
56:c7:0d:75:27:23:ca:fc:bb:ae:45:b5:44:db:db:1c:05:ed:
63:48:dd:66:fd:e6:0a:fe:3f:51:35:42:9d:25:a7:69:00:9c:
23:cc:6f:f5:d8:96:5a:80:39:97:65:6c:60:fa:7f:83:fb:9e:
6a:b6:8a:de:86:a8:9e:6a:98:59:78:1e:f7:f0:2b:33:61:32:
c1:2b:79:6f:f8:1e:29:e6:7f:0a:3e:ce:9b:8d:e7:13:0c:7c:
7e:cf:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org