Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/o3EnMGtbINODqcdkefr7trequM8.roa
File: o3EnMGtbINODqcdkefr7trequM8.roa (raw, json)
Hash identifier: DhvmkE0HuLNHpggDpM/o4QazZXhkB2G8R3rz/Rh9YTE=
Subject key identifier: A3:71:27:30:6B:5B:20:D3:83:A9:C7:64:79:FA:FB:B6:B7:AA:B8:CF
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018CC26D00E0E1BEC68B1961AA54487F7F96
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/o3EnMGtbINODqcdkefr7trequM8.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201341
IP address blocks: 37.156.6.0/24 maxlen: 24
188.240.69.0/24 maxlen: 24
85.204.245.0/24 maxlen: 24
85.204.251.0/24 maxlen: 24
89.36.142.0/24 maxlen: 24
188.208.102.0/24 maxlen: 24
188.215.34.0/24 maxlen: 24
89.37.234.0/24 maxlen: 24
176.223.67.0/24 maxlen: 24
89.34.172.0/24 maxlen: 24
89.36.225.0/24 maxlen: 24
188.213.218.0/24 maxlen: 24
188.240.211.0/24 maxlen: 24
86.107.102.0/24 maxlen: 24
89.33.118.0/24 maxlen: 24
89.33.117.0/24 maxlen: 24
46.102.251.0/24 maxlen: 24
94.177.22.0/24 maxlen: 24
37.153.134.0/24 maxlen: 24
89.35.126.0/24 maxlen: 24
185.77.165.0/24 maxlen: 24
185.77.164.0/24 maxlen: 24
185.77.166.0/24 maxlen: 24
185.77.167.0/24 maxlen: 24
86.105.13.0/24 maxlen: 24
89.39.122.0/24 maxlen: 24
188.211.26.0/24 maxlen: 24
86.105.7.0/24 maxlen: 24
2a05:6300::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 15 Mar 2024 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:00:e0:e1:be:c6:8b:19:61:aa:54:48:7f:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a37127306b5b20d383a9c76479fafbb6b7aab8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3c:ce:a1:1c:7a:72:5d:f9:3f:5a:4e:86:f9:
c4:59:89:59:41:e7:2f:ea:a8:4a:9b:1b:14:01:ab:
61:f2:0c:c4:3d:2e:f2:24:c4:01:57:90:18:e1:8e:
3a:63:3d:24:d4:fb:c1:65:76:c6:2c:48:7d:6e:e4:
a8:9d:5f:2c:7c:33:5d:10:c9:f1:cf:e3:d5:7f:a9:
97:15:58:26:9a:92:e8:3b:8c:e5:ba:58:22:a2:2d:
35:c9:3c:58:96:0f:b3:00:0b:43:e8:70:cd:02:57:
41:75:ad:85:6f:fe:fd:07:53:5f:3c:74:94:3e:2a:
16:ee:46:41:b3:ba:d3:2b:bb:8b:72:10:af:a9:81:
35:81:da:c0:55:e7:88:83:23:ee:f4:4d:c6:a7:54:
1d:2b:86:52:a6:b7:f5:dc:3f:8f:1f:62:18:ab:80:
50:50:05:db:05:a6:60:42:b2:33:b1:4b:c2:de:62:
cb:f5:5a:91:d5:b9:31:50:7a:ec:a3:e5:cb:e7:2c:
c2:74:ae:6a:2f:0a:ca:92:6a:97:94:fd:6c:75:cc:
17:10:8f:e5:5b:cc:05:48:d4:9e:45:a9:89:f3:ba:
e6:eb:3a:7a:4e:d7:10:c6:48:51:06:d4:ff:9c:5f:
d7:45:7a:cf:53:7b:36:b4:cc:bd:6a:c1:c2:56:b0:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:27:30:6B:5B:20:D3:83:A9:C7:64:79:FA:FB:B6:B7:AA:B8:CF
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/o3EnMGtbINODqcdkefr7trequM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.134.0/24
37.156.6.0/24
46.102.251.0/24
85.204.245.0/24
85.204.251.0/24
86.105.7.0/24
86.105.13.0/24
86.107.102.0/24
89.33.117.0-89.33.118.255
89.34.172.0/24
89.35.126.0/24
89.36.142.0/24
89.36.225.0/24
89.37.234.0/24
89.39.122.0/24
94.177.22.0/24
176.223.67.0/24
185.77.164.0/22
188.208.102.0/24
188.211.26.0/24
188.213.218.0/24
188.215.34.0/24
188.240.69.0/24
188.240.211.0/24
IPv6:
2a05:6300::/29
Signature Algorithm: sha256WithRSAEncryption
51:97:b4:6c:b0:b0:52:84:a1:c7:77:85:be:85:77:a6:30:d5:
92:db:9f:6e:e1:42:f2:e0:0f:de:fc:d7:67:2e:26:75:c6:58:
01:75:25:83:7b:89:f1:5d:e8:58:12:fa:a4:1a:04:93:34:a6:
31:5b:17:cc:fc:c5:b1:b7:81:fd:71:8d:00:e6:1c:bf:7c:2d:
52:b9:53:58:ad:b7:18:8a:ad:7d:e3:6f:cd:2c:84:f7:29:49:
e7:3e:c3:68:68:02:28:3b:9d:75:b6:90:9b:ca:a9:83:8e:6a:
8e:4b:8b:56:83:12:04:9c:c3:d5:61:89:fb:19:c7:f3:41:6a:
7b:bd:89:d7:69:90:d3:b1:5b:10:cb:70:ad:d2:ea:b1:ce:c4:
db:bd:99:1d:5c:67:2d:00:bd:e5:85:25:1a:35:3e:df:31:56:
40:49:c9:4e:25:03:55:19:1e:50:5c:35:59:f1:81:21:df:11:
2d:2a:59:81:9e:b4:24:3c:cc:83:18:7a:9e:6a:46:0f:e0:0f:
19:5b:42:19:9d:e1:f7:c7:e9:0b:c4:64:2c:6c:75:10:b9:c4:
4c:4e:a8:2e:4f:2a:79:c9:03:e1:10:ba:c4:ae:6b:44:de:19:
a5:95:fc:a5:0b:70:b8:fe:47:b6:c1:8b:fe:d4:a8:29:9a:01:
e0:54:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:33:40 2024 by rpki-client on console-fra.rpki-client.org