Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_wu62bW4L57XEsluuM-aMzc_raI.roa
File: _wu62bW4L57XEsluuM-aMzc_raI.roa (raw, json)
Hash identifier: J0DbhJsQOWC/Y1b45eFiIOrLmfDEWNFWZtHf2lMh0Ck=
Subject key identifier: FF:0B:BA:D9:B5:B8:2F:9E:D7:12:C9:6E:B8:CF:9A:33:37:3F:AD:A2
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018CC9BCA5C059464FFFEF4145F6C9DD7F23
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_wu62bW4L57XEsluuM-aMzc_raI.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 86.38.145.0/24 maxlen: 24
217.9.246.0/24 maxlen: 24
89.117.212.0/24 maxlen: 24
89.117.214.0/24 maxlen: 24
86.38.191.0/24 maxlen: 24
89.117.240.0/24 maxlen: 24
89.117.242.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 10:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a5:c0:59:46:4f:ff:ef:41:45:f6:c9:dd:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff0bbad9b5b82f9ed712c96eb8cf9a33373fada2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:10:be:1e:c7:e1:11:c2:0b:27:72:53:06:
a0:e4:ee:23:fe:25:19:f7:f3:c4:7b:d1:90:31:54:
e2:42:4e:41:70:d9:d1:f4:38:27:fa:23:b0:d8:87:
94:e2:4e:89:80:cb:fb:9a:6a:b8:ed:43:ff:e0:cd:
02:ea:b4:02:c2:80:af:0f:ae:86:c5:d1:64:cf:bd:
1f:4e:6e:07:96:f8:c2:ad:7e:7d:59:49:fd:ab:c4:
15:e2:0f:8f:4c:41:d2:aa:4e:27:2a:0d:0d:92:df:
6f:22:87:1b:55:6e:65:55:d6:96:db:28:fa:c7:28:
9f:3e:90:b5:3e:84:53:e9:3f:af:43:69:c7:7a:15:
b8:62:c1:02:81:46:7a:a7:6b:c2:f6:84:31:1b:4c:
3d:f6:a5:34:9d:cf:6d:fe:b0:68:86:3b:d7:6b:ec:
e3:22:77:8a:47:4f:0e:53:6a:61:cc:0c:4e:3a:7f:
84:6d:46:f7:6c:8d:7f:b9:6e:2c:49:35:16:cb:4d:
94:f6:e2:69:55:31:0f:48:fc:ba:23:92:72:68:e0:
20:90:59:c6:80:06:f4:a3:81:16:32:08:ff:0f:71:
43:90:8c:32:b9:52:bb:f7:25:ad:a7:09:28:fa:4c:
90:43:90:7d:d0:b2:9f:b5:f7:d7:ea:6c:d0:a5:7c:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:BA:D9:B5:B8:2F:9E:D7:12:C9:6E:B8:CF:9A:33:37:3F:AD:A2
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_wu62bW4L57XEsluuM-aMzc_raI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.145.0/24
86.38.191.0/24
86.38.224.0/24
86.38.231.0/24
89.117.212.0/24
89.117.214.0/24
89.117.240.0/24
89.117.242.0/24
89.117.251.0/24
217.9.246.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f0:d5:34:da:72:96:4d:b2:9c:9c:37:da:92:d1:17:c0:62:
ec:b3:ef:cb:5e:13:5e:50:1f:a4:84:a0:20:c8:15:cf:b8:d9:
ad:89:97:38:0c:d8:98:58:a9:e4:86:2a:95:2e:c1:fd:f0:05:
2c:6c:6e:92:f0:ca:2b:d7:3a:bc:57:e7:49:37:1b:a8:70:34:
4d:92:89:ca:8f:51:0f:32:ab:29:77:1f:7a:b0:76:4d:a0:f7:
cf:01:3d:56:05:6d:4c:fd:a9:2d:53:3b:cb:37:61:b9:7d:d4:
68:73:f4:d6:62:21:16:99:db:bf:df:b3:f4:b3:83:a3:a5:71:
fe:23:32:5e:7f:69:4f:01:b2:8c:78:49:bc:c5:9a:b7:06:27:
9d:de:f8:c4:5c:cd:9f:bd:88:5a:4b:5a:c0:e1:f9:ce:9c:7f:
68:e7:f7:18:3a:a0:41:27:97:7b:76:e7:9b:e2:73:28:6f:a3:
2d:36:0c:35:b5:71:2f:0b:08:25:f4:56:e9:00:6f:2d:b5:3b:
fc:5e:35:85:6c:57:8b:3e:50:b0:8b:a6:72:21:5b:cb:ae:61:
c9:b4:45:ae:47:bd:17:d9:af:c4:5e:98:0f:81:f3:c7:60:6a:
71:78:bd:5c:52:6a:92:ee:0a:3a:a7:92:56:4f:23:a3:55:fb:
bb:cf:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:57 2025 by rpki-client