Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/9RU_5v0AS0CQOxHGx2pOqUjf46Q.roa
File: 9RU_5v0AS0CQOxHGx2pOqUjf46Q.roa (raw, json)
Hash identifier: YCon8wUPcip9020+cbDtQTtpWZY7uxPio/IB++LIsOI=
Subject key identifier: F5:15:3F:E6:FD:00:4B:40:90:3B:11:C6:C7:6A:4E:A9:48:DF:E3:A4
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E74D5D90328ADB0FB2F49C69097D0D
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/9RU_5v0AS0CQOxHGx2pOqUjf46Q.roa
Signing time: Mon 02 Jan 2023 05:14:44 +0000
ROA not before: Mon 02 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8764
IP address blocks: 88.119.0.0/18 maxlen: 24
85.206.176.0/20 maxlen: 24
195.12.160.0/19 maxlen: 24
88.118.192.0/18 maxlen: 24
194.176.32.0/19 maxlen: 24
85.206.128.0/19 maxlen: 24
85.206.244.0/22 maxlen: 24
85.206.248.0/21 maxlen: 24
213.190.32.0/19 maxlen: 24
88.119.128.0/19 maxlen: 24
188.69.0.0/16 maxlen: 24
85.206.192.0/19 maxlen: 24
88.119.64.0/18 maxlen: 24
85.206.224.0/20 maxlen: 24
212.47.96.0/19 maxlen: 24
212.59.0.0/19 maxlen: 24
88.118.0.0/17 maxlen: 24
88.119.184.0/21 maxlen: 24
88.119.192.0/18 maxlen: 24
78.56.0.0/13 maxlen: 24
195.22.160.0/19 maxlen: 24
82.135.128.0/17 maxlen: 24
81.7.64.0/18 maxlen: 24
62.212.192.0/19 maxlen: 24
85.206.0.0/17 maxlen: 24
88.118.128.0/18 maxlen: 24
2a00:1eb8::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 12:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4d:5d:90:32:8a:db:0f:b2:f4:9c:69:09:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5153fe6fd004b40903b11c6c76a4ea948dfe3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:dd:a7:1e:7d:4a:10:fd:64:4e:79:c0:c3:
8e:69:79:ef:a3:bb:23:b4:a5:4f:21:99:b7:af:24:
7e:81:5a:a6:a7:c2:dd:3b:98:66:d7:28:50:ce:0b:
3d:a7:b0:b2:94:91:c7:ea:45:07:ac:7a:f8:e9:45:
ef:a6:5f:00:e6:c7:e5:20:f7:2a:ec:e4:16:09:6b:
8e:a7:03:97:f4:eb:1b:d8:98:4e:63:21:9d:36:9c:
04:00:00:a1:12:00:a4:e7:da:f0:d2:05:3f:59:94:
65:b7:c6:74:bb:de:ac:a1:a7:16:5c:21:ee:3b:a1:
eb:fe:ba:93:8e:15:29:34:0b:4a:a8:32:41:50:a0:
d6:f0:df:46:ed:65:82:5b:0d:3e:f0:62:4f:da:39:
fe:e3:22:d5:0b:05:22:6f:c5:92:7c:80:99:3f:82:
8e:40:66:77:64:3b:f5:27:88:22:82:c9:bc:e3:1e:
06:6d:b6:2f:02:61:93:72:cd:5b:c9:8e:6d:9c:89:
98:d1:e7:ef:df:c0:94:bd:b0:95:be:be:19:14:d5:
e7:b3:1f:f5:6c:8e:f8:e8:7d:a3:47:29:a7:95:ce:
7c:e0:b3:96:28:33:7f:4a:a4:e1:12:57:6d:77:1c:
16:d9:bc:89:86:e3:90:80:99:38:8b:e8:90:ac:81:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:3F:E6:FD:00:4B:40:90:3B:11:C6:C7:6A:4E:A9:48:DF:E3:A4
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/9RU_5v0AS0CQOxHGx2pOqUjf46Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.192.0/19
78.56.0.0/13
81.7.64.0/18
82.135.128.0/17
85.206.0.0-85.206.159.255
85.206.176.0-85.206.239.255
85.206.244.0-85.206.255.255
88.118.0.0-88.119.159.255
88.119.184.0-88.119.255.255
188.69.0.0/16
194.176.32.0/19
195.12.160.0/19
195.22.160.0/19
212.47.96.0/19
212.59.0.0/19
213.190.32.0/19
IPv6:
2a00:1eb8::/32
Signature Algorithm: sha256WithRSAEncryption
a3:4f:ba:58:25:60:ec:1b:83:c8:0c:03:1e:aa:d3:32:99:4d:
29:52:9a:53:a8:b6:34:46:32:54:8c:99:de:b6:83:ff:7d:40:
8d:3e:72:b2:3b:a0:26:6f:55:33:45:76:c3:b4:71:c6:df:71:
85:e0:8e:2c:34:93:09:69:9c:0d:d6:63:fe:6b:1c:4d:2f:80:
5d:a0:4a:26:51:0c:ea:5b:70:98:82:ba:e4:1a:dc:7a:94:83:
b5:14:9b:64:16:be:55:86:7f:71:24:34:d7:35:48:c1:69:84:
6c:44:a5:53:c0:a3:a2:be:47:00:c6:3c:ff:3b:11:2c:9f:4f:
be:48:43:6f:a0:b2:49:16:9d:19:c4:c7:59:5c:cc:fc:7b:4c:
2d:b5:b6:60:b6:18:37:d2:02:fb:a0:40:66:70:35:62:85:93:
e4:91:8e:0f:b0:62:0e:66:7a:5e:c2:cc:de:6a:a9:cb:85:b3:
08:ff:6d:cc:b5:21:82:14:e2:ca:94:e7:3b:1b:a8:36:99:71:
a7:69:b8:ad:1e:4b:d0:37:64:e4:f5:83:bb:58:10:2b:f5:97:
fe:c2:91:3d:e4:34:82:06:02:12:71:d0:59:3e:5d:fc:0c:0d:
99:0b:01:7a:50:7f:47:9f:dd:dd:1e:b9:f7:9b:12:72:48:95:
9a:37:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:42 2024 by rpki-client on console-ams.rpki-client.org