Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BA9wh1vdZdhtNlN40qCpXNDiYak.roa
File: BA9wh1vdZdhtNlN40qCpXNDiYak.roa (raw, json)
Hash identifier: a0mU3F8uQ7WUsiZ28cIThrBxCrZiGHpAeTLi1zuBMaM=
Subject key identifier: 04:0F:70:87:5B:DD:65:D8:6D:36:53:78:D2:A0:A9:5C:D0:E2:61:A9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0187989DA7CAA9F663952469502549CD0C00
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BA9wh1vdZdhtNlN40qCpXNDiYak.roa
Signing time: Wed 19 Apr 2023 08:24:41 +0000
ROA not before: Wed 19 Apr 2023 08:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.12.0/23 maxlen: 23
188.241.240.0/23 maxlen: 23
188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.42.80.0/21 maxlen: 22
89.42.88.0/21 maxlen: 22
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.2.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.46.0.0/23 maxlen: 23
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
93.119.104.0/22 maxlen: 22
93.119.104.0/24 maxlen: 24
93.119.105.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:9d:a7:ca:a9:f6:63:95:24:69:50:25:49:cd:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 19 08:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=040f70875bdd65d86d365378d2a0a95cd0e261a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:a8:d3:94:c4:94:f0:45:6e:5e:f4:14:2c:
2e:38:66:77:c4:3f:63:30:e3:cc:aa:80:f5:b1:17:
74:88:5b:4e:1c:44:e2:71:a8:b7:03:ee:a0:5f:a6:
c7:42:d6:d0:81:0b:ca:e5:13:5c:e1:42:c8:90:d2:
0c:fc:f1:21:f7:ae:b2:3d:02:28:fd:59:9c:b1:db:
77:4f:ad:45:4d:91:12:88:68:51:10:b8:15:db:5d:
75:32:73:0e:cd:e5:25:ce:3d:64:ec:78:ba:44:39:
19:64:02:08:c0:ad:65:06:10:c5:3f:50:9c:57:2c:
89:27:77:02:7a:c8:cd:89:f9:26:ce:41:09:2f:f6:
2c:6d:b7:5e:2b:66:51:11:ce:a3:23:41:d7:54:88:
64:48:e2:dd:51:2d:83:8b:bf:4e:41:6e:61:73:0d:
ce:a4:59:86:e4:f4:67:91:06:4a:68:c3:ce:3e:e9:
13:37:ff:50:0c:b5:5e:b9:bd:6e:65:54:88:d5:93:
56:69:00:54:68:a2:59:f9:e2:04:45:f9:4e:22:3d:
6e:47:b2:0d:f4:a8:af:3f:74:f6:51:2a:81:45:b2:
7a:d2:32:fa:80:2b:f1:dc:d0:6c:3f:56:80:5e:4c:
a6:9c:fe:44:e6:12:b3:19:dc:37:4e:56:3c:28:2c:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:70:87:5B:DD:65:D8:6D:36:53:78:D2:A0:A9:5C:D0:E2:61:A9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BA9wh1vdZdhtNlN40qCpXNDiYak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.80.0/20
89.43.140.0/22
89.45.164.0/24
89.46.0.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
93.119.104.0/22
188.241.240.0/23
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
71:78:97:82:2e:e7:c8:8e:c7:87:30:85:cf:6e:b1:e3:81:68:
3e:1a:a7:84:47:29:d6:99:1c:40:dc:08:33:59:52:99:1e:7c:
83:88:3d:e9:df:56:19:ed:ac:ed:96:2b:a9:30:86:81:a2:2c:
0b:32:35:f2:1a:8b:87:42:45:4b:17:0c:20:6a:41:c6:ab:7c:
e8:3f:fa:e7:c3:b7:ef:4f:e0:d4:88:48:98:b7:6f:49:f1:7e:
6a:ba:22:10:13:7d:b7:41:eb:81:5a:b6:e7:9e:f6:2c:be:35:
a8:20:cb:bf:6c:18:4b:43:f1:5f:a7:b8:a6:57:28:f5:d5:d3:
1f:6e:ce:6c:07:62:21:42:89:60:8d:b0:db:a2:99:6e:cd:92:
73:34:9c:b5:ea:a8:15:c0:1f:f4:4f:96:61:38:7f:d4:26:3a:
21:fb:39:a5:33:e1:ad:1f:6e:98:92:c0:80:fa:11:77:a7:bb:
5c:42:85:bd:ae:98:0a:16:51:c0:86:7f:9f:d0:58:b8:c5:51:
e3:a9:06:b3:79:e8:f0:b3:17:4c:e5:b8:35:a6:07:62:d2:44:
ea:a5:50:ee:f3:41:7f:fc:59:4e:22:48:ba:a6:f1:fc:3b:5c:
33:9e:6b:21:e7:47:31:e5:32:95:8e:05:50:f1:75:97:da:e6:
0f:25:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org