Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/VOeuLpOx-9rUtgpc9mWKzO61Aq4.roa
File: VOeuLpOx-9rUtgpc9mWKzO61Aq4.roa (raw, json)
Hash identifier: +7bJmLneF8fZVWXj2rmXr4Zs7B/A4q+acRp3+yJXBiQ=
Subject key identifier: 54:E7:AE:2E:93:B1:FB:DA:D4:B6:0A:5C:F6:65:8A:CC:EE:B5:02:AE
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 018CC6B910BD9D9D40EFF317BB6E0EF856BA
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/VOeuLpOx-9rUtgpc9mWKzO61Aq4.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50710
IP address blocks: 185.141.9.0/24 maxlen: 24
185.141.11.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
109.224.52.0/22 maxlen: 22
109.224.56.0/22 maxlen: 22
109.224.56.0/21 maxlen: 21
109.224.60.0/22 maxlen: 22
109.224.1.0/24 maxlen: 24
109.224.0.0/21 maxlen: 21
109.224.2.0/23 maxlen: 23
109.224.0.0/18 maxlen: 18
109.224.4.0/22 maxlen: 22
109.224.8.0/21 maxlen: 21
109.224.8.0/22 maxlen: 22
109.224.13.0/24 maxlen: 24
109.224.12.0/23 maxlen: 23
109.224.12.0/24 maxlen: 24
109.224.14.0/24 maxlen: 24
109.224.14.0/23 maxlen: 23
109.224.15.0/24 maxlen: 24
109.224.16.0/22 maxlen: 22
109.224.24.0/22 maxlen: 22
109.224.20.0/22 maxlen: 22
109.224.28.0/24 maxlen: 24
109.224.30.0/23 maxlen: 23
109.224.29.0/24 maxlen: 24
109.224.32.0/24 maxlen: 24
109.224.32.0/22 maxlen: 22
109.224.36.0/22 maxlen: 22
109.224.41.0/24 maxlen: 24
109.224.40.0/24 maxlen: 24
109.224.40.0/21 maxlen: 21
109.224.42.0/23 maxlen: 23
109.224.42.0/24 maxlen: 24
109.224.43.0/24 maxlen: 24
109.224.44.0/22 maxlen: 22
109.224.48.0/21 maxlen: 21
109.224.48.0/22 maxlen: 22
185.118.96.0/22 maxlen: 22
185.118.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 08:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:10:bd:9d:9d:40:ef:f3:17:bb:6e:0e:f8:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54e7ae2e93b1fbdad4b60a5cf6658acceeb502ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:4e:03:3a:80:00:6f:d7:15:d5:bf:36:d8:
ab:8f:c5:77:bd:1d:8e:80:9f:bb:e1:55:38:26:a6:
f0:08:cb:30:06:d6:67:c7:fe:f6:48:9e:fc:f8:95:
a1:9c:8c:dd:61:1f:4d:fb:28:dc:68:b1:27:e4:9c:
71:df:23:a1:23:25:37:0b:ae:0b:c9:26:2f:07:2e:
59:12:cc:23:12:4b:67:bd:39:1d:10:0f:3f:16:f5:
c0:04:25:a3:05:c5:fd:43:9f:dd:91:4a:a6:90:2e:
a7:f7:d5:00:e2:59:ab:3f:bc:65:d0:d7:c5:77:fd:
9a:22:f2:83:8e:63:50:ef:0c:5d:f3:d0:e1:c6:05:
1e:81:cf:a0:50:f5:49:ec:db:8a:78:16:b7:2f:c8:
5b:e2:42:9f:f2:f7:37:4f:ca:b2:49:71:01:e0:9d:
3d:bb:ea:32:d1:6e:f8:a9:43:2e:e4:62:a6:3a:61:
92:e8:ff:a3:47:98:52:0f:00:8f:71:6c:5c:7e:be:
ac:14:a8:7f:38:62:90:24:7e:c7:2b:c9:eb:a7:ef:
9f:3b:21:db:40:49:4a:c6:db:d0:66:68:95:5b:a9:
43:05:da:7c:b3:1b:76:ad:38:6a:38:2c:ef:c5:1f:
9d:79:18:59:29:78:91:17:a3:b7:e1:d4:33:f2:e1:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:AE:2E:93:B1:FB:DA:D4:B6:0A:5C:F6:65:8A:CC:EE:B5:02:AE
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/VOeuLpOx-9rUtgpc9mWKzO61Aq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.0.0/18
185.118.96.0/22
185.141.9.0-185.141.11.255
Signature Algorithm: sha256WithRSAEncryption
16:79:cc:23:9e:18:a6:41:60:bd:3e:42:3e:e4:cf:88:c7:45:
08:ef:7c:8c:77:d3:26:8a:26:7c:34:4a:d2:52:99:e4:dd:f6:
2c:c1:6a:9f:92:a6:33:3f:43:63:5a:43:bf:98:44:0f:39:13:
c1:f2:e6:e0:cd:6a:24:06:5a:06:0e:d4:dc:07:16:19:27:bc:
39:d4:93:bd:81:4a:66:34:93:f6:0a:07:8d:be:f3:32:56:0d:
0e:ff:b2:94:f0:e2:e7:15:4c:ad:ba:b4:3d:b5:0f:81:90:eb:
ae:b6:d3:1c:b8:65:ae:e2:cb:37:c3:a0:ed:85:97:7d:65:11:
bb:88:e8:34:ef:a0:d8:6c:23:df:d8:62:94:46:39:43:60:a0:
e8:c9:e3:13:f4:f3:fc:06:b0:9c:ef:be:fc:1b:2c:91:57:cd:
79:a6:7c:b2:d4:2b:70:c7:20:32:fc:28:22:9a:cb:b8:ea:ce:
d0:d9:59:8b:d8:ac:ee:d1:ba:d6:ef:fe:81:28:4b:5b:e7:51:
fc:e1:35:e4:ef:72:eb:db:c1:36:e4:d9:56:38:2a:5a:82:e6:
fd:dd:8e:ab:06:2b:5b:30:8a:6d:c0:11:e0:92:b1:6b:03:b6:
f5:cd:7b:27:39:a7:56:7d:ab:9f:1f:d7:a1:b9:34:b5:fa:8e:
88:ec:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:07 2024 by rpki-client on console-ams.rpki-client.org