Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/B6_dtjsg0LM9K0Ftex_MzG3Jy_M.roa
File: B6_dtjsg0LM9K0Ftex_MzG3Jy_M.roa (raw, json)
Hash identifier: ysBxxKS0Dr+mBQ5g5AJ7z06jcawIObNA+35/1EZgx5E=
Subject key identifier: 07:AF:DD:B6:3B:20:D0:B3:3D:2B:41:6D:7B:1F:CC:CC:6D:C9:CB:F3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BA080C726F53BDEDA5779327C3DA3B956
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/B6_dtjsg0LM9K0Ftex_MzG3Jy_M.roa
Signing time: Sun 05 Nov 2023 17:21:16 +0000
ROA not before: Sun 05 Nov 2023 17:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 93.114.194.0/24 maxlen: 24
86.107.179.0/24 maxlen: 24
86.107.178.0/24 maxlen: 24
185.101.107.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.41.181.0/24 maxlen: 24
89.41.180.0/24 maxlen: 24
188.211.233.0/24 maxlen: 24
188.241.219.0/24 maxlen: 24
188.241.218.0/24 maxlen: 24
89.36.95.0/24 maxlen: 24
89.36.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:80:c7:26:f5:3b:de:da:57:79:32:7c:3d:a3:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 5 17:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07afddb63b20d0b33d2b416d7b1fcccc6dc9cbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:9e:9a:35:55:50:e1:7f:00:69:28:50:ac:
40:65:6e:21:d1:ea:35:cf:e7:b5:9a:b0:cc:78:05:
fc:a3:f2:df:a7:a7:2d:1e:b0:3d:43:39:3f:f1:43:
57:2e:49:9c:79:9a:a6:6b:36:49:69:b3:39:8d:58:
c3:eb:01:a1:f9:41:e1:5f:62:9d:c7:49:fa:e8:fc:
7b:92:d9:76:0a:5a:2b:38:c6:80:2d:24:f1:5b:cf:
e9:3d:a8:ed:f9:47:55:d9:45:3e:40:65:89:21:be:
cb:58:33:11:54:ae:de:b7:ff:29:9f:c0:26:75:88:
33:66:8a:dd:88:dc:ef:95:7e:02:59:59:78:c9:26:
ca:42:9b:67:33:d9:d7:97:00:a1:bf:73:84:a7:27:
36:5f:e7:9a:53:b4:fc:98:a9:26:e0:86:27:de:97:
63:e4:8b:fd:c7:09:01:c7:2a:ed:4d:43:34:7c:22:
e2:22:ad:75:7f:58:e5:1a:ed:be:f6:e3:0a:6b:24:
58:a7:3c:0a:31:69:8e:4b:5b:15:d3:6a:64:74:b2:
9d:c6:48:ee:da:2e:93:fd:e7:ea:ac:10:2b:bf:3b:
b1:1c:4c:27:79:55:9a:5a:51:76:ad:37:40:d3:76:
ba:36:44:96:0b:fd:d6:fa:47:2b:d1:19:ed:6b:f9:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:DD:B6:3B:20:D0:B3:3D:2B:41:6D:7B:1F:CC:CC:6D:C9:CB:F3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/B6_dtjsg0LM9K0Ftex_MzG3Jy_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.178.0/23
89.34.27.0/24
89.36.94.0/23
89.41.180.0/23
93.114.194.0/24
185.101.107.0/24
188.211.233.0/24
188.241.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:8d:ae:a2:54:c0:d2:d0:3d:53:b9:94:38:53:c0:55:a6:8f:
38:47:e4:bf:1f:31:c6:b1:ec:c9:cc:29:a4:a7:e8:03:f9:c3:
51:e8:0a:b3:61:4f:25:72:ab:a7:de:82:34:20:22:cc:fa:c4:
5b:4d:df:aa:fc:5b:41:95:92:ce:19:7a:73:fa:4f:ee:90:04:
18:79:54:94:4b:b1:42:58:f2:c7:12:b9:bf:74:e5:10:0b:1b:
4f:26:92:ea:11:41:b7:5d:78:1e:9d:a6:98:f9:67:90:b8:4f:
e2:8a:c1:c1:6a:66:2b:a8:c2:3b:5a:c8:41:bf:09:37:b4:74:
6b:bc:16:46:b5:7d:c0:79:e7:31:13:a0:c1:3d:a5:0a:9e:f9:
53:0a:ed:e1:78:30:e8:ef:93:fe:e5:af:f2:bc:67:4f:30:38:
d8:be:94:f0:2c:0e:9d:52:2e:91:fe:83:18:48:4c:06:17:b0:
01:89:f5:be:72:e4:30:18:79:91:9c:8b:0c:74:b8:5a:72:7d:
aa:2d:30:0d:db:89:a4:39:30:b8:d1:e1:cc:aa:75:d6:5d:5b:
57:91:bd:a8:a5:fd:6b:3c:d5:e9:0b:28:dc:9b:92:b4:31:be:
bb:2f:bd:5f:99:5a:71:55:ab:cd:a1:e5:2d:16:50:cc:eb:fe:
91:59:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org