Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/jF9RQNua063bWmSsVQ368-2YUeY.roa
File: jF9RQNua063bWmSsVQ368-2YUeY.roa (raw, json)
Hash identifier: hLAgjNUXrHIyTO5fpyAhSlCDh5EvaQ0sCrJ3FozdMWE=
Subject key identifier: 8C:5F:51:40:DB:9A:D3:AD:DB:5A:64:AC:55:0D:FA:F3:ED:98:51:E6
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0189D705588F74E60E2F294E5434A89EC295
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/jF9RQNua063bWmSsVQ368-2YUeY.roa
Signing time: Tue 08 Aug 2023 21:19:59 +0000
ROA not before: Tue 08 Aug 2023 21:19:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398373
IP address blocks: 85.153.12.0/22 maxlen: 22
85.153.24.0/22 maxlen: 22
85.153.29.0/24 maxlen: 24
85.153.32.0/24 maxlen: 24
85.153.34.0/24 maxlen: 24
85.153.35.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.40.0/24 maxlen: 24
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.115.204.0/24 maxlen: 24
85.115.207.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
85.153.125.0/24 maxlen: 24
85.153.124.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.119.0/24 maxlen: 24
85.153.126.0/24 maxlen: 24
85.153.68.0/22 maxlen: 22
85.153.66.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.83.0/24 maxlen: 24
85.153.82.0/24 maxlen: 24
85.153.84.0/22 maxlen: 22
85.153.80.0/24 maxlen: 24
85.153.81.0/24 maxlen: 24
85.153.88.0/22 maxlen: 22
85.153.94.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.95.0/24 maxlen: 24
85.153.92.0/24 maxlen: 24
85.153.108.0/22 maxlen: 22
85.153.113.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 19:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:05:58:8f:74:e6:0e:2f:29:4e:54:34:a8:9e:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Aug 8 21:19:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c5f5140db9ad3addb5a64ac550dfaf3ed9851e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:04:12:35:7e:8d:cd:cf:8e:8d:1a:03:5b:
db:24:15:05:70:c0:52:0b:77:52:96:3c:e8:ad:e0:
ff:f7:a1:5c:7f:f4:24:0c:3e:b0:7a:63:71:73:31:
07:eb:73:9c:bb:6b:4d:e5:52:8c:24:70:6e:a5:22:
69:be:68:b5:79:df:03:8e:64:d6:3c:e8:14:ae:91:
3a:f9:6b:0a:e9:79:69:43:0a:6e:c5:82:b7:4e:47:
67:05:fa:1a:72:09:01:09:12:24:b8:b2:f0:30:77:
e9:75:21:97:20:ec:e6:06:47:d4:47:43:92:9a:91:
e7:02:20:ea:97:09:f9:7b:8c:1f:cb:01:2e:24:7f:
21:f6:ac:27:96:51:47:3b:e4:8f:0c:e0:3c:b7:40:
0d:1f:e4:7c:25:69:b9:77:e3:46:08:6a:c1:32:69:
77:5c:6c:a8:bc:cb:8c:cd:3e:5d:5c:db:b1:91:5e:
43:ff:10:b5:1c:8b:d5:6d:40:bf:b5:0a:13:cd:ec:
db:0b:4a:84:1f:bb:e7:e2:1a:3c:e4:b7:c5:25:0a:
f1:8d:68:54:78:7d:b2:67:f4:eb:b5:8f:92:99:d4:
7b:75:c3:d0:3e:40:35:66:ee:78:39:0d:8a:5e:2d:
00:e3:98:a8:f2:cb:6c:3a:23:95:4d:52:34:9c:8e:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5F:51:40:DB:9A:D3:AD:DB:5A:64:AC:55:0D:FA:F3:ED:98:51:E6
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/jF9RQNua063bWmSsVQ368-2YUeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/24
85.115.207.0/24
85.153.4.0/24
85.153.12.0/22
85.153.24.0/22
85.153.29.0/24
85.153.32.0/24
85.153.34.0-85.153.42.255
85.153.52.0/22
85.153.59.0-85.153.63.255
85.153.65.0-85.153.73.255
85.153.80.0/20
85.153.108.0/22
85.153.113.0/24
85.153.118.0-85.153.126.255
Signature Algorithm: sha256WithRSAEncryption
11:2f:68:9d:6f:1b:27:9b:fa:80:39:2c:f8:08:74:45:e8:57:
5d:09:1c:26:fe:57:0a:39:0f:85:e1:b6:ff:d6:f1:39:df:74:
54:22:dc:7f:4a:4f:66:0e:f2:26:7d:5b:fe:d3:46:5e:fe:39:
5b:a7:34:ba:10:e9:34:65:37:93:12:70:bd:dd:91:7f:25:54:
40:a6:b9:f9:e4:34:6f:da:31:43:3f:8e:d9:24:df:2c:03:2a:
69:4a:c0:41:30:19:f5:c4:bc:c4:1a:cb:d2:63:b7:73:f9:99:
58:8b:48:3f:97:e5:aa:55:36:38:fd:2b:c8:cc:88:4c:43:94:
18:34:29:ab:e2:e2:2d:fa:f1:d4:b9:cf:11:6b:de:e0:6d:4d:
c7:4a:d3:d6:05:3c:3b:52:a8:3c:da:94:26:c1:eb:42:c1:fd:
8b:86:07:d4:1c:2d:43:1c:69:f1:b4:e1:6f:b4:bb:4f:37:ea:
de:9e:82:45:4b:6f:6b:56:65:24:6b:76:60:02:d0:73:de:9c:
e2:39:2a:1e:71:b8:72:e9:b3:ae:75:65:ce:21:e4:81:3d:0c:
22:c4:09:fd:da:ed:88:19:09:85:90:0e:a4:93:37:ef:ec:07:
51:6c:c9:97:88:73:cf:dc:09:3f:61:67:f1:43:39:b2:2a:5b:
0d:5d:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:40 2024 by rpki-client on console-ams.rpki-client.org