Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/1-D_14bENiaCU8wvECjpMo_A0Acc.roa
File: 1-D_14bENiaCU8wvECjpMo_A0Acc.roa (raw, json)
Hash identifier: rb3BLp+EkJVQs1H3lBdlUU26sSr+A0+00KTnqv0ioIw=
Subject key identifier: F8:3F:F5:E1:B1:0D:89:A0:94:F3:0B:C4:0A:3A:4C:A3:F0:34:01:C7
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 018E3C389699AC7225101AF8C3EBF624548B
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/1-D_14bENiaCU8wvECjpMo_A0Acc.roa
Signing time: Thu 14 Mar 2024 09:08:45 +0000
ROA not before: Thu 14 Mar 2024 09:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210402
IP address blocks: 91.106.36.0/22 maxlen: 22
91.106.36.0/23 maxlen: 23
91.106.36.0/24 maxlen: 24
91.106.37.0/24 maxlen: 24
91.106.38.0/23 maxlen: 23
91.106.38.0/24 maxlen: 24
91.106.39.0/24 maxlen: 24
91.106.44.0/22 maxlen: 22
91.106.44.0/23 maxlen: 23
91.106.44.0/24 maxlen: 24
91.106.45.0/24 maxlen: 24
91.106.46.0/23 maxlen: 23
91.106.46.0/24 maxlen: 24
91.106.47.0/24 maxlen: 24
91.106.48.0/22 maxlen: 22
91.106.48.0/23 maxlen: 23
91.106.49.0/24 maxlen: 24
91.106.50.0/23 maxlen: 23
91.106.50.0/24 maxlen: 24
91.106.52.0/22 maxlen: 22
91.106.52.0/23 maxlen: 23
91.106.52.0/24 maxlen: 24
91.106.53.0/24 maxlen: 24
91.106.54.0/23 maxlen: 23
91.106.54.0/24 maxlen: 24
91.106.55.0/24 maxlen: 24
91.106.56.0/22 maxlen: 22
91.106.56.0/23 maxlen: 23
91.106.56.0/24 maxlen: 24
91.106.57.0/24 maxlen: 24
91.106.58.0/23 maxlen: 23
91.106.58.0/24 maxlen: 24
91.106.59.0/24 maxlen: 24
91.106.60.0/22 maxlen: 22
91.106.60.0/23 maxlen: 23
91.106.60.0/24 maxlen: 24
91.106.61.0/24 maxlen: 24
91.106.62.0/23 maxlen: 23
91.106.62.0/24 maxlen: 24
91.106.63.0/24 maxlen: 24
109.61.4.0/22 maxlen: 22
109.61.4.0/23 maxlen: 23
109.61.4.0/24 maxlen: 24
109.61.5.0/24 maxlen: 24
109.61.6.0/23 maxlen: 23
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 10:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:38:96:99:ac:72:25:10:1a:f8:c3:eb:f6:24:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Mar 14 09:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f83ff5e1b10d89a094f30bc40a3a4ca3f03401c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:be:49:a9:bd:60:57:d4:81:25:c0:d7:e9:
02:47:3f:0e:f2:92:77:3c:2a:4e:7a:cf:fe:a4:9d:
b2:88:c6:c3:e9:bd:4f:c3:ba:5c:4c:ff:58:a7:28:
eb:76:c1:14:bc:44:79:5f:cd:7b:8b:9c:b6:1b:03:
ce:6b:7b:3a:54:ac:66:9c:0c:d0:d4:d4:03:f2:91:
ed:5f:6b:4e:ea:67:b7:b2:a1:91:a4:a0:b4:bf:05:
da:19:8d:77:4d:7e:0f:20:04:93:cf:ed:36:49:d8:
52:f6:20:c2:c3:57:a6:e8:6d:66:f9:31:ce:9e:1f:
fd:0d:7f:df:5c:b2:bb:5d:b3:24:5a:28:4c:30:b3:
33:b9:47:44:2d:a3:56:b8:5b:c2:c5:14:81:5e:3b:
df:4b:76:86:ed:d7:4d:c4:76:ea:82:9b:3b:3c:fc:
a8:cd:71:a2:64:2f:cc:97:31:c0:23:a2:e1:ed:50:
2f:d0:ba:78:e8:90:d5:a7:86:4d:f0:16:b3:1e:a7:
4c:49:77:b7:0e:59:9c:42:76:f1:a6:f9:16:d5:07:
fd:50:67:f9:ad:44:5f:41:d0:5e:08:25:61:14:bb:
39:31:5e:96:81:c5:1a:4a:d0:f6:85:f7:91:81:ca:
cb:72:e0:db:95:79:63:83:22:d5:2e:55:8d:e3:b0:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:F5:E1:B1:0D:89:A0:94:F3:0B:C4:0A:3A:4C:A3:F0:34:01:C7
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/1-D_14bENiaCU8wvECjpMo_A0Acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.36.0/22
91.106.44.0-91.106.63.255
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
90:7a:3f:10:57:b9:de:b7:e4:31:82:8e:ff:82:d5:14:20:aa:
12:0b:c8:99:e8:0a:3d:a1:a1:d3:7e:8b:40:23:8c:17:e3:12:
a7:75:fa:f1:a0:82:ee:c3:6f:7a:24:65:b1:b5:99:fa:2c:90:
d4:8e:b5:43:71:32:55:81:61:f5:8b:c1:e1:a1:4e:24:33:a8:
a0:63:6a:3f:ec:49:9d:ff:f1:30:83:f3:4c:b6:ba:86:e7:93:
21:dc:45:59:c9:de:a1:81:60:11:a0:72:26:28:8d:fe:ff:e6:
32:7e:07:8a:54:92:8a:bb:fa:08:e6:9d:10:f8:79:98:74:5e:
87:db:be:91:c6:4f:9e:26:fd:90:c0:09:2c:67:38:26:d8:1b:
57:16:1e:19:96:ed:2a:9e:c8:76:11:90:39:ef:1a:b0:f4:c2:
a8:22:c9:27:8b:6f:94:9f:8d:54:87:ad:5d:02:a2:de:79:63:
a2:ef:7e:1d:6d:b8:7c:7e:ae:96:72:d8:e9:f6:47:68:09:b8:
df:e6:d0:0d:3a:b9:86:19:61:6b:55:20:cf:3a:53:66:26:1b:
d4:8d:95:26:c2:ce:21:a6:1b:a4:65:e4:8a:81:c2:d8:48:cf:
ed:42:3f:31:07:ce:c6:2f:06:a3:e8:a2:ee:1c:85:f4:70:72:
50:54:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org