Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9VFCt3qgwz8R8rTuodcYvzz6Zfw.roa
File: 9VFCt3qgwz8R8rTuodcYvzz6Zfw.roa (raw, json)
Hash identifier: PwNUQ0ohD93/d39HsWNhX2h2yQFlTB6E+Bh8appVo7U=
Subject key identifier: F5:51:42:B7:7A:A0:C3:3F:11:F2:B4:EE:A1:D7:18:BF:3C:FA:65:FC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0187550CCC03C9DF7F3420877611F44B23B9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9VFCt3qgwz8R8rTuodcYvzz6Zfw.roa
Signing time: Thu 06 Apr 2023 05:31:54 +0000
ROA not before: Thu 06 Apr 2023 05:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.12.0/23 maxlen: 23
188.241.240.0/23 maxlen: 23
188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.42.80.0/21 maxlen: 22
89.35.158.0/24 maxlen: 24
89.42.88.0/21 maxlen: 22
188.240.221.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.2.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.46.0.0/23 maxlen: 23
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
93.119.104.0/22 maxlen: 22
93.119.104.0/24 maxlen: 24
93.119.105.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Apr 2023 08:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:0c:cc:03:c9:df:7f:34:20:87:76:11:f4:4b:23:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 6 05:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f55142b77aa0c33f11f2b4eea1d718bf3cfa65fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:75:9e:f9:5f:19:d0:5f:9b:49:e6:8d:f8:
25:33:49:14:a7:d8:83:1d:d4:bb:c8:69:b2:6e:82:
41:fc:35:4f:95:4a:93:cd:70:b8:0f:b3:9f:a7:dd:
26:0b:71:79:f0:2b:88:70:fe:3d:c5:31:b2:ee:db:
2c:bd:a2:54:19:20:a9:cc:f2:a0:f2:16:b9:f4:42:
1e:10:e1:56:4a:9c:d2:27:74:63:c6:7a:50:71:18:
47:11:d7:24:10:89:a9:3e:e5:03:d0:58:7c:3c:e1:
1c:18:83:ef:96:dc:0a:7e:91:46:0e:59:dd:42:f8:
7f:0b:e3:31:f1:75:50:ea:c7:f1:09:63:52:03:51:
9a:d8:a9:16:7b:08:82:4b:26:93:55:30:aa:12:d5:
ed:e0:f4:5f:49:60:91:ee:57:1c:10:b7:bd:cc:6f:
da:79:ca:c6:94:6b:01:7f:27:79:60:64:ca:d8:b6:
84:15:bb:cc:6b:e0:0d:92:72:69:9d:e5:4b:b0:25:
b0:fe:49:3a:be:a4:9b:c3:ec:1d:fc:68:c0:d0:29:
68:63:fa:fb:13:f2:cc:d6:ca:50:f0:11:30:6c:80:
3d:fd:8d:79:27:9c:a9:2a:76:96:fe:d9:74:6c:d5:
d1:68:39:a8:df:d9:87:b8:9d:7c:45:25:52:63:c8:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:42:B7:7A:A0:C3:3F:11:F2:B4:EE:A1:D7:18:BF:3C:FA:65:FC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9VFCt3qgwz8R8rTuodcYvzz6Zfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.80.0/20
89.43.140.0/22
89.45.164.0/24
89.46.0.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
93.119.104.0/22
188.240.210.0/24
188.240.221.0/24
188.241.240.0/23
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
23:d4:f1:3d:a7:d2:a7:11:79:d3:9f:d7:36:51:27:74:bb:04:
fa:bf:f8:7a:d7:35:99:97:9c:15:12:72:09:c3:93:3d:dc:db:
7e:35:82:7b:b6:20:59:26:f3:5d:5d:69:2d:25:5f:31:60:6f:
7e:c0:fe:78:a2:2b:45:16:6e:4c:dc:3a:ef:3b:57:4f:26:d6:
e5:0c:25:09:ab:92:ac:e2:9e:61:85:0f:bd:88:46:e4:e9:80:
e1:ae:ee:95:4d:47:3f:1e:ba:5a:8b:f6:d2:d8:58:9c:08:8e:
d3:69:a8:92:b8:c8:dd:a8:b7:45:a9:db:fa:3a:db:ee:42:02:
4d:82:ed:ce:ce:b5:51:f1:55:9a:1a:83:b1:26:d5:9e:96:57:
c2:36:b2:55:da:b4:2c:f2:ae:89:00:56:66:ad:fb:de:f8:e1:
ec:7a:e6:cc:d4:d9:12:94:13:a8:62:5b:11:20:d9:41:81:c4:
50:05:d8:57:d9:bd:2d:ab:e6:7e:65:6a:45:f0:c8:74:43:91:
cc:65:37:f8:bd:8e:5f:e3:62:ba:65:02:2e:48:9d:cd:60:db:
90:7e:6b:f3:20:f9:8d:1c:fa:3d:05:c0:3c:b2:e9:c1:07:df:
ab:06:26:92:45:b1:1c:7d:9b:c7:5b:b4:ba:18:e8:d5:d2:5f:
3f:e5:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org