Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/kY5zADsBmeyN46GkqxrrSTG0LFw.roa
File: kY5zADsBmeyN46GkqxrrSTG0LFw.roa (raw, json)
Hash identifier: xWGSY1Qwki9zEe9n5qUimO0CK+oGQcZNHFsnGr1xrJI=
Subject key identifier: 91:8E:73:00:3B:01:99:EC:8D:E3:A1:A4:AB:1A:EB:49:31:B4:2C:5C
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018B349279767F1C3D6845D40740ECBC3818
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/kY5zADsBmeyN46GkqxrrSTG0LFw.roa
Signing time: Sun 15 Oct 2023 18:21:36 +0000
ROA not before: Sun 15 Oct 2023 18:21:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.44.0/23 maxlen: 24
89.38.44.0/24 maxlen: 24
89.38.40.0/21 maxlen: 24
89.38.40.0/22 maxlen: 22
89.38.46.0/23 maxlen: 23
185.48.192.0/22 maxlen: 22
188.215.85.0/24 maxlen: 24
188.215.84.0/22 maxlen: 22
188.215.82.0/23 maxlen: 23
188.215.86.0/23 maxlen: 23
2a01:98e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Oct 2023 11:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:92:79:76:7f:1c:3d:68:45:d4:07:40:ec:bc:38:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Oct 15 18:21:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=918e73003b0199ec8de3a1a4ab1aeb4931b42c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:13:94:43:51:45:49:e4:48:6a:f1:32:20:
51:0d:53:e8:5f:70:46:57:18:03:a9:c3:92:4d:7b:
1a:6f:aa:62:91:36:36:7c:c4:e3:97:5e:05:1a:7d:
e7:54:9b:d4:41:d5:e8:55:c8:6f:4e:58:a5:ce:ed:
82:97:3c:a5:54:e8:88:8d:68:6b:3e:0d:72:fe:9d:
40:29:7d:47:32:d9:8e:a3:69:38:2a:ae:76:ed:3e:
6b:fe:ba:40:51:85:71:d7:e4:34:9a:47:96:08:76:
7b:1f:73:de:d0:ab:05:28:99:67:8a:91:2b:87:67:
ae:39:a6:3a:a7:64:3d:69:08:01:08:72:69:98:3b:
cf:98:2c:15:55:46:98:c4:56:8e:4e:5b:3d:7d:4b:
80:9d:4f:f0:5b:69:39:32:d1:00:ee:f1:0f:bc:f4:
1b:0d:f6:1c:d5:fc:6c:b5:24:04:87:b2:ff:eb:e7:
9d:64:da:07:fd:25:9d:31:ba:9f:51:61:00:0d:d7:
1d:09:cd:7d:d8:46:65:d8:ce:cc:b3:aa:c2:79:44:
b5:9b:ba:b5:fa:ea:16:51:7f:78:be:a8:93:8c:2d:
be:86:4b:f7:92:6e:7f:6f:7b:e1:40:1d:02:a4:49:
8d:b3:f9:1d:d4:27:ab:98:49:c9:4c:c7:a1:d9:80:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:73:00:3B:01:99:EC:8D:E3:A1:A4:AB:1A:EB:49:31:B4:2C:5C
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/kY5zADsBmeyN46GkqxrrSTG0LFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.40.0/21
185.48.192.0/22
188.215.82.0-188.215.87.255
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:7f:73:b5:a4:ec:40:ff:20:09:3d:df:17:4e:65:8c:65:46:
a3:62:68:74:4a:2f:80:27:91:18:8f:32:53:2c:8e:e3:b7:ec:
f0:19:61:d0:d1:6c:72:4d:86:d2:3f:32:13:7f:5e:47:f7:4d:
c9:fe:16:bb:66:96:07:ee:2a:db:5a:ca:d6:dd:a2:7c:91:50:
7a:ee:9a:70:e0:62:fb:c2:ce:6c:ec:ea:15:c3:45:57:c6:88:
22:38:c5:f7:c2:cb:09:53:ea:60:bb:4e:35:52:e3:7c:71:e5:
4b:73:76:6f:69:d3:bc:15:f9:8b:e6:ab:44:72:99:34:f4:c7:
19:e4:8d:30:ed:4f:88:16:78:98:43:cc:d1:3b:dd:28:89:b7:
5b:68:04:c3:7b:e7:50:3e:52:93:77:8e:3c:b4:b8:65:f5:51:
5f:a2:fe:fb:8b:e7:df:cb:a6:ec:db:2c:27:87:e2:3d:54:c6:
8d:7c:7c:ca:10:59:ca:74:35:94:b0:e0:09:14:7e:00:8f:4d:
82:dc:e4:87:53:e6:2e:68:28:ad:73:ea:79:1f:99:39:2f:3c:
cd:69:58:60:11:7e:dd:bd:73:85:1a:e2:3a:db:61:30:e6:eb:
8b:d7:06:3d:48:ed:7a:9f:71:3f:aa:df:ef:c2:1b:1d:25:75:
80:8a:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:27 2024 by rpki-client on console-ams.rpki-client.org