Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa
File: 43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa (raw, json)
Hash identifier: qv/rgTi86JNHI/j+iQbKqucSMCC9dUjFGmmUApIKfqQ=
Subject key identifier: E3:73:5B:36:D8:10:07:6D:4B:63:46:42:61:46:7A:BB:87:3F:8C:33
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018ADB70A5011AFD98BEDCD7BA15B86751C0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa
Signing time: Thu 28 Sep 2023 10:58:27 +0000
ROA not before: Thu 28 Sep 2023 10:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
77.107.64.0/18 maxlen: 24
213.210.0.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/22 maxlen: 24
37.98.144.0/21 maxlen: 24
109.176.0.0/16 maxlen: 16
89.213.48.0/20 maxlen: 24
89.213.192.0/24 maxlen: 24
89.213.192.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
89.31.232.0/21 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
213.218.224.0/19 maxlen: 24
81.168.0.0/17 maxlen: 17
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.24.84.0/22 maxlen: 24
194.105.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
82.152.0.0/16 maxlen: 16
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
195.128.138.0/24 maxlen: 24
213.152.32.0/19 maxlen: 19
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Nov 2023 18:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:70:a5:01:1a:fd:98:be:dc:d7:ba:15:b8:67:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 28 10:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3735b36d810076d4b63464261467abb873f8c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:8f:30:e5:32:e4:10:9a:7a:24:38:8b:f7:
b3:6b:63:49:71:7a:31:35:ea:b0:f9:97:f5:95:0a:
33:05:d1:98:6f:75:d2:dd:7d:83:8b:ea:87:68:af:
4c:40:4b:6f:77:65:2e:2f:60:c1:3f:8b:bf:82:70:
f6:09:94:b1:8c:58:bf:c8:01:4d:b6:d4:e9:ff:53:
60:46:d8:9f:83:7f:5e:10:f5:de:d2:7c:33:3b:c5:
80:23:07:b4:d4:3c:93:06:9d:3c:7d:da:e6:ce:af:
79:ea:95:ca:d3:3b:0e:71:5e:91:49:43:0b:a3:12:
dd:0c:e9:b2:13:c9:14:eb:ad:2f:4c:24:5c:bd:9e:
19:f6:3a:7a:12:72:7b:03:0e:85:66:f5:08:a0:a1:
94:86:e3:61:15:90:f9:ce:b6:de:f6:4b:2b:01:8d:
9d:be:34:6b:e7:02:26:fd:95:98:ee:36:5d:c7:9d:
6f:41:e5:51:5b:4e:77:cf:c5:ad:06:b0:4a:73:21:
8f:f0:69:4e:db:0e:e8:dd:fb:e0:c7:45:7b:f7:f4:
2a:8d:7a:bb:ca:b9:e5:36:a0:92:74:7a:8b:20:5f:
45:f5:c7:28:39:1a:de:7d:19:74:7e:74:a8:98:4a:
a7:cb:f8:a6:7b:e6:14:24:f6:86:3e:12:72:43:6d:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:73:5B:36:D8:10:07:6D:4B:63:46:42:61:46:7A:BB:87:3F:8C:33
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
91:28:55:6b:00:0e:9d:82:43:81:da:2f:a1:bc:fc:ee:52:10:
01:55:22:35:73:63:53:86:9f:c5:6f:1c:67:85:10:1c:c2:44:
c7:fc:8a:4d:c5:b3:4f:90:23:fb:3d:59:30:cd:a1:4a:2d:f1:
1d:05:f3:b8:08:15:3a:dd:45:67:52:b8:14:f6:c7:78:85:9f:
f2:74:d8:85:c0:32:ff:41:ea:9a:1d:0c:22:ec:2b:0f:61:0f:
0b:dc:bb:16:7d:72:ee:5d:e5:08:32:b5:fb:ed:94:7e:cf:09:
bc:eb:95:ed:f3:d4:a3:6f:23:22:8f:41:2a:5b:2a:aa:32:09:
70:6b:cc:29:84:5c:44:9d:98:38:30:9c:92:68:26:32:53:57:
6f:94:3f:3c:3f:74:52:9b:3d:6b:d3:d4:0f:d4:80:5e:cc:89:
87:ff:ba:1f:43:af:fa:df:ae:94:02:b0:77:69:28:47:58:d1:
54:50:87:50:4c:91:ea:1e:ce:ba:02:27:cc:e1:90:86:ff:6d:
28:f5:bc:d6:38:87:5b:d0:50:7e:b7:c6:85:ae:6c:ff:de:a9:
8c:f9:d7:bc:80:91:b9:91:5a:59:02:47:30:b0:06:c5:9d:0d:
f9:6c:9e:54:95:dc:ed:67:11:df:f7:a2:88:ac:9e:c8:a8:e5:
c0:5c:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:19 2024 by rpki-client on console-ams.rpki-client.org