Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5DuQbPSm_fDlb48hTI9PnlPjVeI.roa
File: 5DuQbPSm_fDlb48hTI9PnlPjVeI.roa (raw, json)
Hash identifier: qgnN4vDf9LOD1NvehQjLttzoh9B1+Gu21o37Hh67VzM=
Subject key identifier: E4:3B:90:6C:F4:A6:FD:F0:E5:6F:8F:21:4C:8F:4F:9E:53:E3:55:E2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D5AB7EE115FD93BE446F028968DEF0EC1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5DuQbPSm_fDlb48hTI9PnlPjVeI.roa
Signing time: Tue 30 Jan 2024 14:13:39 +0000
ROA not before: Tue 30 Jan 2024 14:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 86.106.81.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.96.0/24 maxlen: 24
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
188.241.3.0/24 maxlen: 24
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 08:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:b7:ee:11:5f:d9:3b:e4:46:f0:28:96:8d:ef:0e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 30 14:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e43b906cf4a6fdf0e56f8f214c8f4f9e53e355e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:b4:32:33:26:a2:84:45:65:0c:35:8a:bc:
7c:df:58:34:91:fa:9b:43:d7:43:52:26:1c:62:db:
c0:93:e3:06:05:fb:4a:f3:6a:ca:f8:ac:15:38:72:
b0:b6:a7:f0:28:ac:c0:a5:38:f3:70:7b:6a:fb:a7:
95:87:70:29:e5:20:3a:0f:b3:12:8f:f2:45:1a:e9:
f7:6d:0b:df:19:12:4d:00:a6:ff:a7:78:6c:3c:f6:
51:81:7b:f1:82:28:a4:48:e2:b2:07:a2:c7:1d:e6:
22:f2:b7:08:ef:03:89:45:ca:c7:4e:88:d4:66:72:
77:7f:ef:be:27:3d:12:8c:a0:79:ac:75:5d:18:2f:
d9:ec:32:91:f5:4d:a1:48:8b:05:55:d1:3a:30:aa:
8b:ba:02:fe:2d:d1:3c:76:c3:18:fc:98:d2:3e:7b:
a3:18:0c:c2:55:1b:e1:d9:7e:f5:bb:35:29:ad:1e:
89:fc:b7:1e:d2:84:d8:b2:a0:8c:af:22:74:ba:7a:
b9:8f:df:2e:38:cb:ec:24:14:96:cb:e6:51:de:36:
94:14:6f:a3:22:59:8d:35:5e:0a:e7:bd:2e:66:da:
b6:4d:e4:a6:c2:e2:af:35:64:17:bf:e9:b6:9e:b7:
93:46:ac:c4:98:90:88:55:c9:05:c8:04:82:90:48:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:90:6C:F4:A6:FD:F0:E5:6F:8F:21:4C:8F:4F:9E:53:E3:55:E2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5DuQbPSm_fDlb48hTI9PnlPjVeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.34.27.0/24
89.35.158.0/24
89.38.228.0/23
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0/20
89.47.114.0/23
89.47.118.0-89.47.120.255
89.47.122.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
188.241.3.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
77:ce:0a:cb:f4:5d:44:83:50:17:7b:ac:5c:f4:e4:d3:b1:fa:
33:ec:ca:7a:60:ac:37:0f:04:9e:da:81:f8:d6:db:fc:c1:05:
25:d6:39:d4:f5:6c:b2:fb:14:fc:6b:fb:8f:e9:d8:5d:a7:d3:
15:a7:8d:2f:ac:c8:52:d7:dd:39:a6:3b:45:24:ab:78:d5:83:
40:7a:95:6f:aa:15:74:e3:4d:6d:24:28:ef:3f:70:0d:5f:ce:
fa:b4:09:df:a0:2d:42:32:05:52:12:54:48:07:af:79:8e:24:
25:06:d7:67:b6:fd:3f:40:aa:b0:44:ab:d8:98:a9:00:12:f3:
a6:1f:df:48:d2:96:26:ee:c2:34:5d:ad:cc:7b:d5:d6:47:37:
f7:6c:ad:72:8e:b8:f3:ca:78:9e:7f:e3:df:82:6e:8a:51:f1:
fa:58:e3:39:6d:35:a3:a0:13:4e:92:98:03:ee:79:3c:c1:7e:
2e:91:a0:94:66:dc:03:b5:1d:30:e9:1a:b5:d1:78:c8:c4:05:
09:8b:a8:7b:7a:6e:8b:c8:c9:35:7e:3f:cc:99:2b:20:da:8f:
fa:80:56:8c:89:08:3c:8c:7b:8c:e2:25:b9:34:9e:e7:3d:f3:
37:12:8e:ca:ba:1c:25:3d:7e:4d:b0:83:78:3c:ff:29:4e:31:
3f:e5:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org