Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/938394bBwzNj4LWxRRJM_zeS0mc.roa
File: 938394bBwzNj4LWxRRJM_zeS0mc.roa (raw, json)
Hash identifier: 23qnP5XWzmzCVIfwiq8bdce4EYAAlJkz7czrg/dgJIA=
Subject key identifier: F7:7F:37:F7:86:C1:C3:33:63:E0:B5:B1:45:12:4C:FF:37:92:D2:67
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A427120BBA53E7A85E22C6AD139546480
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/938394bBwzNj4LWxRRJM_zeS0mc.roa
Signing time: Tue 29 Aug 2023 17:57:04 +0000
ROA not before: Tue 29 Aug 2023 17:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.225.0/24 maxlen: 24
89.34.224.0/24 maxlen: 24
89.34.226.0/24 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Aug 2023 22:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:71:20:bb:a5:3e:7a:85:e2:2c:6a:d1:39:54:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 29 17:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77f37f786c1c33363e0b5b145124cff3792d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:37:89:2a:8a:3d:b4:0a:ac:67:4b:6e:21:
7e:26:cf:02:e7:8a:0b:55:e3:58:46:da:21:46:3d:
43:d1:a8:57:8d:dc:1b:2a:1e:9e:a3:11:55:76:41:
07:49:20:ae:89:2f:c6:01:1e:b9:84:36:06:04:f6:
0f:1c:43:fe:c4:17:97:97:41:0b:c6:a9:b4:ee:a1:
93:07:bf:cd:14:f2:1c:f2:55:c0:89:88:75:50:d7:
8b:36:b7:6d:1e:60:3c:22:26:8b:89:01:11:e9:b0:
5c:56:c8:3e:6d:27:6f:ad:e9:77:d3:e7:f3:80:ac:
27:84:20:ee:46:e1:6b:b2:24:0a:a9:32:26:18:5e:
69:d2:ce:9c:0f:37:05:64:0c:95:fa:b4:1f:59:27:
2b:ac:34:b0:b1:14:d9:e1:d4:23:61:27:53:46:ee:
f3:82:81:c7:42:02:1a:71:0d:29:97:4a:05:6b:d0:
c9:ae:f8:6c:85:29:08:03:25:73:2e:90:c1:31:c8:
ca:0d:58:8f:84:31:5c:07:f2:c1:14:a1:0d:ce:4e:
69:43:f4:ce:f4:76:ab:09:e7:f9:c5:8e:d1:b0:12:
63:ce:5f:f2:69:13:b8:9e:34:de:1f:87:62:76:52:
69:4f:00:9f:c5:05:72:bc:43:55:ec:a5:af:5f:a4:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:37:F7:86:C1:C3:33:63:E0:B5:B1:45:12:4C:FF:37:92:D2:67
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/938394bBwzNj4LWxRRJM_zeS0mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.34.27.0/24
89.34.224.0-89.34.226.255
89.34.228.0/24
89.34.230.0/23
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
5f:13:86:a0:f6:38:28:c7:ad:4d:28:ab:92:fb:c6:d7:87:fd:
80:6d:53:c0:e8:bc:29:b3:7a:4f:c7:ef:60:d2:0b:57:a6:a5:
47:0b:23:58:45:0e:b9:a0:c0:67:65:24:4f:e0:15:ce:80:f0:
63:b7:68:a7:12:b2:0b:64:f0:ed:92:7f:e7:a6:54:a7:89:3e:
e4:55:85:ef:c9:25:e0:4b:b6:e7:b7:82:82:98:73:98:ee:47:
db:5c:d0:cf:43:60:ba:64:97:df:1b:59:53:60:87:9e:cb:ff:
7b:fc:58:5d:54:77:5c:d9:bd:eb:7f:8c:ba:35:71:44:94:80:
96:c6:b8:67:72:d0:2f:7a:52:dd:6b:e4:91:37:96:92:fc:32:
75:f1:9f:26:e7:85:7e:fa:21:96:3d:1a:07:31:f3:aa:76:aa:
9e:de:c9:55:ec:07:ae:d0:4d:a8:6e:96:3f:5d:fc:4c:95:c5:
83:f1:54:e9:8e:ec:40:55:13:cd:b1:9b:f4:e8:96:3a:7c:25:
42:60:ac:6c:b3:83:a4:d8:50:3a:40:8d:95:e1:fb:0c:f1:01:
5f:49:51:49:b3:47:4d:bf:97:87:65:e4:d2:aa:1a:50:6f:06:
43:44:81:bd:91:00:0a:d3:ce:5a:7b:dc:43:22:fd:63:7c:23:
db:17:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org