Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MyucAvJrs0n7X4_MXUwaDAOuqAo.roa
File: MyucAvJrs0n7X4_MXUwaDAOuqAo.roa (raw, json)
Hash identifier: /tlnKwxEtgb+1HfqcQlY+3XGxZI9L2xI5YGvD0w3hyQ=
Subject key identifier: 33:2B:9C:02:F2:6B:B3:49:FB:5F:8F:CC:5D:4C:1A:0C:03:AE:A8:0A
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018E9B34FD46070EDED43767D4F88B072B59
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MyucAvJrs0n7X4_MXUwaDAOuqAo.roa
Signing time: Mon 01 Apr 2024 19:48:44 +0000
ROA not before: Mon 01 Apr 2024 19:48:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57324
IP address blocks: 79.132.195.0/24 maxlen: 24
79.132.196.0/24 maxlen: 24
79.132.197.0/24 maxlen: 24
79.132.198.0/24 maxlen: 24
79.132.199.0/24 maxlen: 24
86.111.144.0/24 maxlen: 24
86.111.145.0/24 maxlen: 24
86.111.146.0/24 maxlen: 24
86.111.147.0/24 maxlen: 24
109.230.112.0/24 maxlen: 24
109.230.113.0/24 maxlen: 24
109.230.114.0/24 maxlen: 24
109.230.115.0/24 maxlen: 24
109.230.116.0/24 maxlen: 24
109.230.117.0/24 maxlen: 24
109.230.118.0/24 maxlen: 24
109.230.119.0/24 maxlen: 24
109.230.120.0/24 maxlen: 24
109.230.122.0/24 maxlen: 24
109.230.123.0/24 maxlen: 24
109.230.124.0/24 maxlen: 24
109.230.126.0/24 maxlen: 24
109.230.127.0/24 maxlen: 24
122.102.116.0/24 maxlen: 24
122.102.117.0/24 maxlen: 24
122.102.118.0/24 maxlen: 24
122.102.119.0/24 maxlen: 24
185.113.105.0/24 maxlen: 24
185.113.107.0/24 maxlen: 24
202.164.192.0/24 maxlen: 24
202.164.193.0/24 maxlen: 24
202.164.194.0/24 maxlen: 24
202.164.195.0/24 maxlen: 24
202.164.197.0/24 maxlen: 24
202.164.198.0/24 maxlen: 24
202.164.199.0/24 maxlen: 24
202.164.200.0/24 maxlen: 24
202.164.201.0/24 maxlen: 24
202.164.202.0/24 maxlen: 24
202.164.203.0/24 maxlen: 24
202.164.204.0/24 maxlen: 24
202.164.205.0/24 maxlen: 24
2a03:c340::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 07 Apr 2024 11:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:34:fd:46:07:0e:de:d4:37:67:d4:f8:8b:07:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Apr 1 19:48:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=332b9c02f26bb349fb5f8fcc5d4c1a0c03aea80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:07:38:e9:d4:8f:63:c0:f3:33:8c:2e:ae:
76:23:26:d4:ea:fb:0c:4f:ec:4c:9f:ca:8a:44:02:
d0:27:c9:39:53:bf:70:36:e0:b3:e3:29:2c:e3:5e:
bf:23:3f:cf:b6:6c:04:b6:a9:7f:6d:36:86:ef:6b:
05:60:ae:af:62:6b:75:a3:ff:38:6d:8f:38:bd:d2:
9e:22:58:bf:6b:44:91:77:ef:5d:33:db:5f:7e:98:
ee:c5:27:96:4c:76:94:61:9d:1f:54:7e:b9:47:b1:
9c:25:2c:a2:5d:6d:04:4f:5c:5b:80:18:07:7b:98:
8e:51:3d:7d:2b:24:d7:8a:73:d3:22:d6:6a:8b:eb:
85:97:f7:19:87:07:2c:78:b6:c1:6a:6d:33:49:ab:
82:66:d4:b7:b3:cd:6e:32:5a:d8:37:71:02:64:91:
0d:77:f1:d6:bb:2b:1d:ac:0e:cb:47:3c:d7:35:a6:
04:a3:2f:1b:0b:25:a8:1d:ec:58:73:86:2b:76:45:
3f:19:e9:0e:5a:b8:1e:21:8e:8e:88:38:db:2e:d7:
54:5d:9f:86:61:24:26:9f:77:4b:18:65:8f:61:4c:
db:db:1b:f2:8d:b2:5c:73:f0:51:b9:88:d9:12:50:
d5:59:cb:17:03:9d:50:57:72:d3:b5:2c:01:49:bd:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:9C:02:F2:6B:B3:49:FB:5F:8F:CC:5D:4C:1A:0C:03:AE:A8:0A
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MyucAvJrs0n7X4_MXUwaDAOuqAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.195.0-79.132.199.255
86.111.144.0/22
109.230.112.0-109.230.120.255
109.230.122.0-109.230.124.255
109.230.126.0/23
122.102.116.0/22
185.113.105.0/24
185.113.107.0/24
202.164.192.0/22
202.164.197.0-202.164.205.255
IPv6:
2a03:c340::/32
Signature Algorithm: sha256WithRSAEncryption
2c:6c:35:ed:2d:59:3c:08:f6:39:c3:aa:62:ea:ae:09:c8:09:
e6:ce:c0:a0:6a:76:42:7d:ae:d9:4e:71:7c:f5:8f:c2:5c:23:
f9:e6:eb:78:b5:cc:af:3d:59:3e:46:37:65:0f:c8:06:6d:8a:
f3:26:9d:f9:ed:39:02:53:90:1b:51:4f:fd:a3:e9:02:4e:c1:
d5:af:2f:3d:e8:59:9f:11:0c:b7:ea:04:ee:a6:12:1e:d3:c9:
6c:78:35:ff:76:72:13:a1:31:f5:ab:cd:ce:27:d8:1f:03:1a:
0e:7c:f2:c9:86:1c:45:49:a8:c2:ef:ad:ac:68:37:90:38:09:
b5:a1:cb:b9:ff:ce:a2:28:c8:9a:05:6a:82:cf:48:19:92:48:
03:2d:7c:b4:0c:de:5a:b2:a4:1d:a8:24:e8:8c:7d:02:93:42:
b6:62:5d:7b:a1:b6:7e:ae:8a:17:4d:4e:68:ab:b3:a2:5b:48:
17:32:69:4e:40:56:cb:5c:2a:e1:37:40:e5:36:1f:a9:49:7b:
82:ff:10:88:c1:cd:04:a9:ab:c9:f9:f3:e3:e6:58:ea:95:ff:
31:58:a2:79:e4:f3:bd:59:94:f0:88:a5:ec:6e:ae:59:b4:9a:
69:8f:fa:b9:56:1e:e0:49:b7:ed:eb:df:f1:66:97:69:5a:bf:
37:e3:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org