Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/k5Aehtqf4g3Xpiga5wHnsIf4v8Q.roa
File: k5Aehtqf4g3Xpiga5wHnsIf4v8Q.roa (raw, json)
Hash identifier: D4dk9OHRaY0bn5PMAH3GdPCKbVLsSow/S9Xsx6JbSlw=
Subject key identifier: 93:90:1E:86:DA:9F:E2:0D:D7:A6:28:1A:E7:01:E7:B0:87:F8:BF:C4
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A3B38E7E6FD0C925C3D1DDC4FB95ECE96
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/k5Aehtqf4g3Xpiga5wHnsIf4v8Q.roa
Signing time: Mon 28 Aug 2023 08:18:19 +0000
ROA not before: Mon 28 Aug 2023 08:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57829
IP address blocks: 185.224.56.0/22 maxlen: 24
185.57.168.0/22 maxlen: 24
185.56.212.0/22 maxlen: 24
91.223.51.0/24 maxlen: 24
84.19.128.0/20 maxlen: 24
91.192.252.0/22 maxlen: 24
91.224.36.0/23 maxlen: 24
193.138.74.0/24 maxlen: 24
193.41.118.0/23 maxlen: 24
84.19.144.0/21 maxlen: 24
195.78.37.0/24 maxlen: 24
195.78.36.0/24 maxlen: 24
185.114.104.0/22 maxlen: 24
188.65.152.0/21 maxlen: 24
193.254.192.0/23 maxlen: 24
81.201.208.0/20 maxlen: 24
45.137.208.0/22 maxlen: 24
2a0b:fd80::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
2a0b:fd87::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:38:e7:e6:fd:0c:92:5c:3d:1d:dc:4f:b9:5e:ce:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 28 08:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93901e86da9fe20dd7a6281ae701e7b087f8bfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:59:81:06:e6:6d:f8:74:52:2e:1d:9a:85:b0:
4a:23:39:74:77:6e:aa:bb:5a:e1:2a:58:86:08:08:
cc:1b:01:2e:3e:1b:8f:d7:d0:e8:59:30:a1:86:ec:
9b:71:51:39:8b:5a:cb:06:2a:b9:e5:14:f8:5a:7d:
8d:94:70:45:03:0d:fa:e3:5f:57:23:02:59:95:22:
b8:ef:b2:fa:f7:00:33:21:0c:8f:65:c2:00:96:67:
7e:df:5d:f2:e0:40:61:ce:eb:3b:3f:cf:7c:0a:66:
db:21:b4:da:72:fa:a2:4c:1b:36:83:ac:2c:ee:77:
8d:88:ce:71:44:88:84:32:3d:7d:d4:6e:69:73:b4:
ab:4c:25:a8:4e:71:d8:5d:fa:d1:78:9b:66:93:a6:
05:d5:17:75:2b:58:8e:fd:33:a2:c0:f8:69:3d:de:
b6:c9:81:0c:62:8f:df:52:42:3b:a6:04:2b:4d:86:
3a:3d:bd:ad:80:d0:c2:62:db:bc:25:6a:26:f8:66:
5e:e2:68:32:2a:5b:62:24:bd:2b:5f:2f:4e:46:a4:
07:eb:c0:30:e4:21:85:80:d0:0d:70:0a:5b:6f:cf:
2c:9a:ea:35:b6:4f:68:9b:96:db:a8:9f:20:6f:d1:
20:d4:0b:79:ec:a2:88:c5:08:35:c6:a4:67:00:59:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:1E:86:DA:9F:E2:0D:D7:A6:28:1A:E7:01:E7:B0:87:F8:BF:C4
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/k5Aehtqf4g3Xpiga5wHnsIf4v8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
84.19.128.0-84.19.151.255
91.192.252.0/22
91.223.51.0/24
91.224.36.0/23
185.56.212.0/22
185.57.168.0/22
185.114.104.0/22
185.224.56.0/22
188.65.152.0/21
193.41.118.0/23
193.138.74.0/24
193.254.192.0/23
195.78.36.0/23
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd80::-2a0b:fd82:ffff:ffff:ffff:ffff:ffff:ffff
2a0b:fd87::/32
Signature Algorithm: sha256WithRSAEncryption
48:98:38:c3:56:35:72:73:3c:28:cc:fd:8d:5e:c6:52:99:34:
eb:52:7f:57:bf:61:93:a5:40:5c:fe:13:64:7b:df:f8:37:44:
7c:32:e1:14:68:6f:2e:c9:f4:3c:cb:14:ce:c6:4e:0c:8d:fc:
7c:43:3b:2f:78:b9:b2:33:dc:68:7f:6c:6c:8b:dd:d1:a0:04:
c6:e1:5b:f5:4b:92:26:1c:d0:e0:63:ed:5c:a9:19:8c:f8:e1:
5e:28:45:98:f2:fc:82:17:53:58:56:98:f1:44:57:a9:25:ae:
8a:fb:1d:b4:40:41:d9:68:f4:02:48:e1:bf:c8:04:5c:50:ee:
b4:1d:ea:a2:3d:c4:2d:2a:fe:86:2c:60:7a:7b:fb:2f:33:6c:
e3:a7:81:30:44:f2:fe:62:cf:36:10:e0:7c:9b:35:73:19:60:
93:f1:b2:75:f0:1b:a0:77:81:55:56:70:fb:45:be:9e:37:7d:
c7:4f:06:8b:0e:a7:1b:7a:a6:10:b6:03:58:9a:3a:78:aa:22:
eb:7a:9e:8c:e8:18:f9:80:91:d8:53:c9:8f:8b:53:a2:39:c0:
d9:c5:f3:49:ad:61:12:aa:60:0b:f6:7f:cb:c4:93:e6:70:51:
82:89:a1:cd:d9:48:d5:b6:8b:aa:3b:2e:49:ae:ce:2a:71:f1:
82:a3:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:34 2024 by rpki-client on console-fra.rpki-client.org