Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aiiGT3UUc1iws9nCxRXscsIyfuk.roa
File: aiiGT3UUc1iws9nCxRXscsIyfuk.roa (raw, json)
Hash identifier: fijBUVEgElKygRf3g7QblWjrmxFGlY4Fz8MIvqAdeYQ=
Subject key identifier: 6A:28:86:4F:75:14:73:58:B0:B3:D9:C2:C5:15:EC:72:C2:32:7E:E9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D541DA7CF0E25E5CAA46597483ACCDE6D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aiiGT3UUc1iws9nCxRXscsIyfuk.roa
Signing time: Mon 29 Jan 2024 07:27:26 +0000
ROA not before: Mon 29 Jan 2024 07:27:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:1d:a7:cf:0e:25:e5:ca:a4:65:97:48:3a:cc:de:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 29 07:27:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a28864f75147358b0b3d9c2c515ec72c2327ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:c9:23:7a:b9:b3:27:6d:ca:50:f1:74:be:
bd:59:a8:d0:04:9c:0b:92:0f:34:fc:f9:79:dd:e1:
04:96:28:4a:50:49:da:97:e9:d7:80:43:f6:20:71:
4f:f7:61:08:89:4c:fd:b8:02:90:ce:21:98:7b:e7:
ea:df:3c:e0:64:e6:8c:18:9b:96:da:3e:bc:3a:a2:
f4:88:c6:07:3e:a7:da:76:5a:98:12:5f:c7:a4:16:
79:0d:2e:6f:e2:36:bd:d0:0e:37:d6:e6:f7:19:68:
78:bc:d1:ba:36:f6:08:a5:0a:ef:77:a9:f5:29:3e:
2d:e4:aa:58:41:0c:e4:11:fc:78:b5:86:f9:30:85:
c5:b4:55:02:77:b1:b9:44:94:4b:12:22:c6:37:b6:
8a:58:ad:31:d0:5f:5c:6f:ed:84:9b:c5:f5:ae:42:
7a:fb:ca:c0:7e:20:99:3c:4b:63:93:3d:8d:cb:c1:
f0:8a:e6:bc:05:1c:9d:8a:7a:e3:c0:73:e3:04:b2:
30:55:9c:dd:8a:f9:0b:c4:48:03:98:7d:9e:a3:cb:
07:95:02:ec:3a:c6:f8:e6:33:e1:45:62:4c:3d:1c:
2c:98:cb:b4:a4:02:1f:cd:8f:3e:14:20:74:f9:5f:
31:74:69:6a:09:7c:86:6e:c1:b7:34:05:44:64:8f:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:86:4F:75:14:73:58:B0:B3:D9:C2:C5:15:EC:72:C2:32:7E:E9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aiiGT3UUc1iws9nCxRXscsIyfuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
89.34.106.0/24
89.34.202.0/24
89.34.219.0/24
89.35.129.0/24
89.35.131.0/24
89.37.192.0/24
89.40.215.0/24
89.43.62.0/24
91.132.51.0/24
128.0.41.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
13:80:fb:2c:39:83:0b:5b:b3:52:16:37:09:4d:8b:eb:55:bb:
85:28:b8:f0:44:ed:5a:1d:24:93:cc:f2:2e:9f:e7:eb:d2:73:
17:1d:86:21:84:b7:67:49:72:95:cb:39:ee:c7:c3:83:7f:d1:
5c:4a:50:2c:06:7d:e6:af:c0:39:6c:48:25:dd:11:93:f4:ee:
85:42:1e:70:85:87:96:e1:c4:d4:8d:49:88:ff:16:21:b8:9b:
f6:5a:2b:bd:d0:ed:ec:fc:5a:8e:6a:2e:89:4a:97:75:b2:05:
8d:58:ca:65:a7:30:5c:7b:83:dc:da:6a:a3:70:60:84:6f:1e:
20:0e:d7:6e:91:b7:71:15:a4:61:e2:f0:62:40:59:75:3d:86:
f5:84:32:2b:48:9c:69:e0:9f:ec:16:ac:05:93:39:9f:bd:42:
ad:89:c3:56:2a:d7:17:bb:89:18:59:22:46:79:68:3e:fa:da:
98:52:8b:86:18:3f:ba:bf:58:18:7a:a2:40:ef:19:2b:f4:45:
9f:fd:5f:4b:ad:3e:24:ac:d9:29:35:d0:ed:c6:9e:cc:ed:84:
fa:e1:a9:2e:7a:50:5a:3c:71:54:97:83:66:a1:d5:bf:a4:4f:
f2:39:b2:f8:57:d8:bd:8c:04:57:d6:ca:49:d2:85:cf:de:ba:
0d:ee:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org