Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/mFXU04QoOsdMjmOLv4dzeQFQ0xI.roa
File: mFXU04QoOsdMjmOLv4dzeQFQ0xI.roa (raw, json)
Hash identifier: lQQw+/RjxP4GQ7K35/CnXWVrrwIxgNdiMe4IssRZYXk=
Subject key identifier: 98:55:D4:D3:84:28:3A:C7:4C:8E:63:8B:BF:87:73:79:01:50:D3:12
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 019151026EBAE64D8DE2BD7C7FC2B76448EB
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/mFXU04QoOsdMjmOLv4dzeQFQ0xI.roa
Signing time: Wed 14 Aug 2024 13:09:59 +0000
ROA not before: Wed 14 Aug 2024 13:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39251
IP address blocks: 77.76.16.0/20 maxlen: 20
85.217.252.0/22 maxlen: 24
91.92.72.0/21 maxlen: 24
91.92.80.0/20 maxlen: 24
91.92.96.0/21 maxlen: 24
91.207.190.0/23 maxlen: 23
91.207.190.0/24 maxlen: 24
91.207.191.0/24 maxlen: 24
91.223.66.0/24 maxlen: 24
91.245.192.0/24 maxlen: 24
185.163.140.0/22 maxlen: 24
185.225.84.0/22 maxlen: 24
185.229.252.0/22 maxlen: 24
193.37.238.0/24 maxlen: 24
194.169.223.0/24 maxlen: 24
194.169.230.0/24 maxlen: 24
194.169.237.0/24 maxlen: 24
194.169.242.0/24 maxlen: 24
195.238.84.0/23 maxlen: 23
195.238.84.0/24 maxlen: 24
195.238.85.0/24 maxlen: 24
212.70.140.0/24 maxlen: 24
212.70.141.0/24 maxlen: 24
212.70.144.0/22 maxlen: 22
213.232.88.0/22 maxlen: 24
2a0b:f800::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Aug 2024 07:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:02:6e:ba:e6:4d:8d:e2:bd:7c:7f:c2:b7:64:48:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Aug 14 13:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9855d4d384283ac74c8e638bbf8773790150d312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:6d:d8:50:a6:37:72:a5:8f:7e:c0:4a:80:
f0:1e:e4:cb:94:6c:50:d6:11:2f:a9:de:1e:96:f3:
3c:5a:ff:74:b5:7f:ed:2a:83:89:93:49:f6:51:2e:
9b:6f:3a:22:a3:79:2a:35:00:f3:4c:e9:63:09:8e:
98:fe:cf:6d:8e:c6:90:ff:b9:5d:64:7a:31:93:7f:
2d:a6:8e:8a:05:be:2e:1c:b6:e0:90:5b:39:dd:0c:
8e:9e:98:e3:57:72:2b:fd:fc:e8:f6:fc:7e:ec:ad:
30:4a:fe:fb:93:39:08:d6:a3:40:0b:7b:27:30:48:
5a:b5:b3:57:2a:25:c4:8f:47:80:90:42:7d:92:d2:
a0:1b:ab:51:30:93:9c:84:6c:ee:ab:fd:c7:a7:b8:
5b:87:40:89:2c:5d:d4:22:25:b9:92:0f:e7:99:9f:
ce:7d:f8:34:ff:44:5a:b1:ff:be:1f:42:37:a5:b8:
eb:d3:fa:b7:8d:82:6a:1f:ef:0c:06:4f:dc:20:1a:
6c:0a:53:7c:2a:27:9b:12:bd:48:2c:7f:eb:01:68:
17:0d:0a:9e:16:4b:1a:ef:e9:e1:18:84:b3:da:b0:
8a:a5:74:9e:26:4f:ee:1d:52:b8:5c:01:93:a9:50:
fd:81:0e:3e:c1:32:aa:75:5c:16:0d:d6:56:fb:b8:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:D4:D3:84:28:3A:C7:4C:8E:63:8B:BF:87:73:79:01:50:D3:12
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/mFXU04QoOsdMjmOLv4dzeQFQ0xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.16.0/20
85.217.252.0/22
91.92.72.0-91.92.103.255
91.207.190.0/23
91.223.66.0/24
91.245.192.0/24
185.163.140.0/22
185.225.84.0/22
185.229.252.0/22
193.37.238.0/24
194.169.223.0/24
194.169.230.0/24
194.169.237.0/24
194.169.242.0/24
195.238.84.0/23
212.70.140.0/23
212.70.144.0/22
213.232.88.0/22
IPv6:
2a0b:f800::/32
Signature Algorithm: sha256WithRSAEncryption
16:a6:f9:ca:9f:c2:05:de:72:6e:71:1b:05:b3:f3:ea:82:6d:
23:27:69:7e:13:dc:ce:cd:71:54:93:a4:2c:3e:df:19:e7:e7:
b8:2a:a6:1d:af:37:d6:b2:a9:fb:0c:29:45:d4:e9:c8:73:44:
28:cd:af:ad:bd:f2:71:86:06:88:c6:e6:cf:50:28:6a:ca:9a:
d4:88:d3:ba:4c:00:d7:53:2f:b6:6c:0c:de:f2:58:d6:20:20:
ab:d4:19:6c:f7:14:50:51:e3:8a:19:a3:2d:0c:a7:a0:70:c9:
25:81:15:a1:aa:64:58:0f:90:2f:cf:29:b2:fa:96:69:91:b2:
cc:99:01:3c:52:61:7b:5b:bc:f3:ac:68:75:d1:f7:38:14:00:
66:c8:ac:bc:2a:79:06:07:52:49:5a:9f:8c:01:12:88:dc:63:
26:8e:9f:4b:a0:e4:b3:85:3e:6a:d7:7f:a4:9a:ac:29:be:ed:
60:21:80:84:e0:23:76:83:35:ad:dd:fe:3d:b1:c6:21:c1:4e:
16:d7:a8:da:6d:93:d2:3a:5d:1b:6e:91:d2:41:d5:eb:1d:22:
3a:47:8c:5f:0c:4d:e4:61:75:07:0f:1f:af:b3:f3:94:07:17:
e4:07:21:cd:9c:f9:83:04:07:db:0e:dd:71:b9:cc:cb:ea:cc:
e7:f4:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 10:13:44 2024 by rpki-client on console-fra.rpki-client.org