Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/aJYFpO79kxJU5nN_eG5mt4EeeAM.roa
File: aJYFpO79kxJU5nN_eG5mt4EeeAM.roa (raw, json)
Hash identifier: eu0Dcv4A7WC29ACh609m3FHUf5x9pLO4Iy0dh5EK/9g=
Subject key identifier: 68:96:05:A4:EE:FD:93:12:54:E6:73:7F:78:6E:66:B7:81:1E:78:03
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018D9E366786A31AD16D9C2DA5D15D282309
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/aJYFpO79kxJU5nN_eG5mt4EeeAM.roa
Signing time: Mon 12 Feb 2024 16:46:21 +0000
ROA not before: Mon 12 Feb 2024 16:46:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.57.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.235.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.238.0/24 maxlen: 24
89.47.0.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
193.138.192.0/23 maxlen: 23
193.138.194.0/24 maxlen: 24
2a05:8880::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 08 Apr 2024 17:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:36:67:86:a3:1a:d1:6d:9c:2d:a5:d1:5d:28:23:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Feb 12 16:46:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=689605a4eefd931254e6737f786e66b7811e7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:0b:0b:a6:05:4a:7c:a9:2c:50:80:87:6a:
14:ac:d2:62:d4:e3:aa:18:f6:a4:ff:0c:f4:f4:86:
86:c5:b2:63:27:bd:43:41:60:8f:8c:5d:ef:8f:f7:
20:64:76:17:03:84:7e:4e:fe:fa:83:90:32:1c:b1:
59:bc:9d:c8:89:cd:bb:cb:03:67:06:84:14:d9:67:
e9:9c:81:dc:dc:77:15:06:f5:75:8e:7f:ee:4f:f9:
0f:15:8f:20:f5:6e:95:54:94:03:99:bc:e9:35:13:
ee:c6:79:58:9b:b9:f4:06:55:e0:ef:06:0d:f5:a8:
f5:fe:1f:18:a1:57:73:89:f1:dd:2e:b7:2c:bc:d2:
de:48:0a:6b:6a:c7:2a:9d:1d:ae:c7:b8:23:c5:d4:
d9:4f:a8:46:86:17:04:bd:e3:4f:21:e6:86:99:60:
77:ee:e7:37:45:94:ec:de:3a:35:cc:d1:4f:38:be:
05:90:1b:13:d3:6e:6a:ab:ad:7c:7d:82:ae:94:ee:
87:2c:8d:f6:96:bb:28:dd:90:80:74:0d:a2:65:f9:
14:48:06:eb:e0:9f:e4:64:d3:5b:97:93:18:bf:cb:
24:54:2b:5c:d3:f0:45:4e:80:c6:c7:ea:52:d1:4f:
ab:4a:5b:18:cf:30:9b:41:de:cb:f4:4f:3e:d6:2f:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:05:A4:EE:FD:93:12:54:E6:73:7F:78:6E:66:B7:81:1E:78:03
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/aJYFpO79kxJU5nN_eG5mt4EeeAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0/24
86.107.60.0/23
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.235.0-89.35.236.255
89.35.238.0/24
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
188.211.164.0/23
193.138.192.0-193.138.194.255
IPv6:
2a05:8880::/30
Signature Algorithm: sha256WithRSAEncryption
01:37:97:a9:9e:07:44:68:1a:d6:66:d0:ad:da:33:53:f7:73:
99:88:06:4a:b8:a4:87:74:d8:10:2f:d5:ad:73:e5:a4:0d:f8:
58:c1:f1:71:42:29:7c:3a:6f:d8:06:75:7b:08:a5:c9:b8:0c:
66:74:ac:40:eb:8f:b0:20:3c:3b:35:57:22:5c:e4:9b:9c:bc:
09:2b:94:ed:d5:f9:0b:6d:85:9b:8c:22:46:c4:71:67:cb:a1:
25:b2:aa:27:3b:a0:2c:71:b5:2d:9f:6e:61:09:c3:c1:78:b4:
24:c5:bd:7f:6b:03:e5:cd:a0:b5:3a:24:b4:ed:ea:bf:67:fe:
46:84:de:5a:4b:e7:81:6f:b5:a0:b2:3a:e4:77:98:a4:45:01:
89:d9:ad:f6:c6:70:b3:f9:fe:a0:08:29:7f:ce:65:a8:e0:ed:
6b:2c:8e:05:a7:8d:09:49:70:7b:09:6e:21:62:23:91:6a:6b:
55:78:ca:f6:a0:75:a8:61:17:3b:a2:ed:7e:7f:32:66:47:f8:
b9:71:82:b2:33:c3:1a:e9:1d:df:ab:14:18:ea:28:bc:7f:82:
4b:1a:49:5f:7a:f7:f8:81:2f:0e:6e:fc:bd:2d:94:87:33:a2:
82:57:fb:83:b5:80:70:37:1a:0d:a6:9e:4f:dc:9e:37:fa:31:
d1:3e:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-fra.rpki-client.org