Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/4R0VbIUI69AW8Wib2TbigO5S0aY.roa
File: 4R0VbIUI69AW8Wib2TbigO5S0aY.roa (raw, json)
Hash identifier: VAR94r2SROtjwBGxU1ZCIT0FRtYSXei7xSnGyDKRpM4=
Subject key identifier: E1:1D:15:6C:85:08:EB:D0:16:F1:68:9B:D9:36:E2:80:EE:52:D1:A6
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 018D9C8801B69DDB9201B723CC33A6EBE99E
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/4R0VbIUI69AW8Wib2TbigO5S0aY.roa
Signing time: Mon 12 Feb 2024 08:56:15 +0000
ROA not before: Mon 12 Feb 2024 08:56:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33885
IP address blocks: 84.55.64.0/18 maxlen: 18
89.253.64.0/18 maxlen: 18
92.244.0.0/19 maxlen: 19
94.137.96.0/19 maxlen: 19
109.104.0.0/19 maxlen: 19
178.78.192.0/18 maxlen: 18
185.86.100.0/22 maxlen: 22
212.107.128.0/19 maxlen: 19
2a01:3b8:4000::/35 maxlen: 35
Validation: Failed, certificate revoked on Mon 12 Feb 2024 11:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:88:01:b6:9d:db:92:01:b7:23:cc:33:a6:eb:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Feb 12 08:56:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e11d156c8508ebd016f1689bd936e280ee52d1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:29:19:79:4b:7e:da:dd:39:ff:56:c7:90:
82:9d:28:ee:3f:b8:d2:d6:1d:4c:cc:b4:6c:86:39:
25:90:95:5e:d2:5e:86:f3:a7:96:22:99:32:05:bd:
01:6d:31:4e:a7:d2:40:88:80:f4:8a:03:41:64:59:
43:c9:0b:b7:1e:ee:05:fb:9c:85:8c:a4:12:d2:42:
e6:86:cf:d3:7d:75:28:20:2d:b4:03:5a:5b:50:ed:
01:22:76:6f:36:f7:68:ae:66:13:73:62:d8:b5:98:
df:39:b6:d5:49:9f:a7:39:38:85:aa:11:74:d2:71:
61:1e:65:b2:95:84:22:52:16:8a:0f:69:99:98:0b:
07:b9:6e:aa:8b:c3:6b:bd:97:e9:ae:45:37:0a:e7:
da:83:d7:1b:29:38:7d:28:89:8e:bd:31:1b:6b:6a:
65:f8:8c:7e:71:78:64:d8:8b:ff:88:91:63:ec:0d:
64:0b:5b:b7:9b:92:0e:e3:81:0a:2c:8b:18:ba:26:
c4:54:f9:44:ac:8e:ef:8c:75:5c:58:ae:df:b3:27:
41:0b:2b:13:fc:82:e5:e9:dd:f3:89:6b:e6:8d:31:
06:3e:94:56:6d:ad:c4:24:f1:16:d2:a8:ac:a5:a0:
3e:53:d9:af:54:67:55:bb:fe:a5:8b:cc:d7:4a:b7:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:15:6C:85:08:EB:D0:16:F1:68:9B:D9:36:E2:80:EE:52:D1:A6
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/4R0VbIUI69AW8Wib2TbigO5S0aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.64.0/18
89.253.64.0/18
92.244.0.0/19
94.137.96.0/19
109.104.0.0/19
178.78.192.0/18
185.86.100.0/22
212.107.128.0/19
IPv6:
2a01:3b8:4000::/35
Signature Algorithm: sha256WithRSAEncryption
60:bf:43:60:ae:4e:36:dc:ba:db:c0:16:5e:1a:de:26:b6:65:
ef:a0:c1:a9:ca:31:10:8f:c3:df:e1:d6:23:07:b5:e9:c6:8c:
f4:e4:88:02:1d:7f:27:a4:13:25:61:08:f2:b5:81:68:d0:cb:
87:23:4f:97:2f:66:86:82:c5:a9:e3:2a:78:f0:d4:5c:fc:1a:
b5:62:ad:16:d8:ea:d3:63:3a:67:b1:78:5c:b9:a4:7f:e7:8e:
0e:14:b0:ae:d9:69:97:c6:49:e6:d5:c8:1c:d9:ed:58:8f:04:
95:41:99:50:10:41:51:d9:36:97:5f:bb:50:6c:c9:58:c2:ec:
70:7a:30:79:dc:97:7a:8a:20:39:94:d9:50:3d:ee:45:db:64:
8b:ea:91:20:e8:58:8b:9e:ee:73:aa:f7:93:ce:d9:26:26:76:
45:41:09:ed:7f:cb:4d:ac:68:68:d9:8c:e9:b0:82:53:f5:92:
2b:b1:74:cc:35:86:5e:f1:85:b9:55:0f:13:46:7e:1f:cf:78:
9a:27:45:0f:9e:31:13:04:ac:43:5e:7b:56:48:c0:14:72:ce:
82:1c:bf:71:57:fd:ac:e7:2d:52:b6:fa:24:85:5f:ed:bc:60:
8f:9a:3e:5c:3c:cd:b4:0f:7b:7b:68:21:5a:15:7e:9e:8d:e2:
ac:07:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:54 2024 by rpki-client on console-ams.rpki-client.org