Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kSvYrJgFzq8BNrnpHE2LMBZl49s.roa
File: kSvYrJgFzq8BNrnpHE2LMBZl49s.roa (raw, json)
Hash identifier: 72k3eHBTPDQvnat6QFxMQh07gtPlHv2k4jYdc5Q3QDA=
Subject key identifier: 91:2B:D8:AC:98:05:CE:AF:01:36:B9:E9:1C:4D:8B:30:16:65:E3:DB
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC795410DE1672D53F2123AF78676F053
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kSvYrJgFzq8BNrnpHE2LMBZl49s.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 86.105.233.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.43.53.0/24 maxlen: 24
89.43.63.0/24 maxlen: 24
85.204.241.0/24 maxlen: 24
85.204.242.0/24 maxlen: 24
89.36.137.0/24 maxlen: 24
86.106.113.0/24 maxlen: 24
89.46.93.0/24 maxlen: 24
93.114.57.0/24 maxlen: 24
89.34.178.0/24 maxlen: 24
89.38.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:41:0d:e1:67:2d:53:f2:12:3a:f7:86:76:f0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=912bd8ac9805ceaf0136b9e91c4d8b301665e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:11:2a:36:d0:2c:89:0c:ad:f5:c8:36:af:
e3:41:a2:d7:1d:2e:e9:9b:cb:a5:63:c3:aa:37:ad:
ae:8e:ee:3f:4d:26:72:96:68:c3:06:1e:9e:26:8b:
b3:df:8b:8c:77:47:4d:87:e0:e7:89:c9:b5:70:07:
95:0b:03:b9:53:59:08:38:79:c3:d1:6d:99:dd:d0:
e4:51:dd:c9:68:26:24:55:48:c4:89:e6:df:16:15:
05:57:73:73:b2:8f:a0:5c:e4:c8:2f:29:98:09:29:
a8:90:96:ed:f4:9f:37:7c:d4:33:a5:20:3d:56:9e:
b5:6a:42:53:99:13:8d:65:ca:38:f8:80:7a:44:cf:
d3:34:cb:11:a8:a7:19:51:21:39:23:2e:d6:26:fb:
50:7a:f4:bd:40:88:2d:eb:58:a0:06:79:8b:43:ed:
c7:64:6a:63:fe:7b:62:90:5a:86:35:96:fd:51:b2:
8e:03:b1:29:30:9e:e5:54:85:b9:37:30:04:03:60:
01:54:ee:25:0b:3d:e7:75:76:05:14:bb:18:9b:2c:
ae:e6:0a:31:f4:c4:0a:44:d3:6f:ba:4e:38:94:e8:
26:6f:c2:74:d7:15:a9:56:ce:f6:bd:31:f1:84:95:
68:89:b7:ec:b6:d2:dc:5d:63:65:16:d6:21:37:ef:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:D8:AC:98:05:CE:AF:01:36:B9:E9:1C:4D:8B:30:16:65:E3:DB
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kSvYrJgFzq8BNrnpHE2LMBZl49s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.241.0-85.204.242.255
86.105.233.0/24
86.106.113.0/24
89.34.178.0/24
89.36.137.0/24
89.38.236.0/24
89.40.65.0/24
89.43.53.0/24
89.43.63.0/24
89.46.93.0/24
93.114.57.0/24
Signature Algorithm: sha256WithRSAEncryption
66:de:e3:6d:0d:21:9e:0b:e7:3b:44:d6:1c:35:13:60:10:d2:
0e:8b:67:d3:58:da:cd:d8:bf:cd:51:b9:67:50:7e:aa:94:8b:
a6:b3:a7:40:da:9e:b6:c9:3d:70:11:01:a4:2b:b3:96:26:9f:
85:77:b0:c4:f9:72:53:b8:4d:40:a5:64:5b:85:13:52:de:18:
5c:22:ce:32:43:eb:a8:f4:45:6f:27:a4:7a:69:ee:4a:72:8d:
8e:6c:d3:70:e0:79:c5:08:70:01:3b:6b:f1:9b:39:17:3a:ee:
e6:fc:44:8f:27:1b:5c:8f:62:e7:65:20:18:be:20:b5:c3:de:
a8:80:e9:91:23:10:8e:4d:8f:e9:8e:63:1a:10:e7:55:b1:eb:
a5:5c:5e:e1:ab:c4:c9:1e:3e:bb:39:8e:65:55:ec:29:8f:1f:
fa:65:97:37:f1:75:8f:54:e8:61:ce:29:76:7a:2e:83:5a:7c:
17:63:6e:4e:e8:fa:8b:01:24:91:e7:62:66:25:a3:87:19:e2:
25:b5:d7:52:b9:d1:8f:5d:3b:1c:85:a2:13:37:ef:be:23:15:
8d:6c:63:69:a0:a7:88:21:74:50:ff:27:5c:44:4b:61:bd:f0:
bf:60:53:55:91:6f:e0:70:8d:79:56:b1:58:6f:7a:cc:74:cb:
5d:da:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 14:07:34 2024 by rpki-client on console-ams.rpki-client.org