Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BHmEmth0xaSunz9Es_M6SkLWsOQ.roa
File: BHmEmth0xaSunz9Es_M6SkLWsOQ.roa (raw, json)
Hash identifier: h3cPB7sAhT5/4FsSDQqeDLIhih9rc6gqAqaAWIHVdQY=
Subject key identifier: 04:79:84:9A:D8:74:C5:A4:AE:9F:3F:44:B3:F3:3A:4A:42:D6:B0:E4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01893E88F589A213CB7CC828942B87FD25B9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BHmEmth0xaSunz9Es_M6SkLWsOQ.roa
Signing time: Mon 10 Jul 2023 06:41:50 +0000
ROA not before: Mon 10 Jul 2023 06:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.12.0/23 maxlen: 23
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.42.88.0/21 maxlen: 22
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.2.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.46.0.0/23 maxlen: 23
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:88:f5:89:a2:13:cb:7c:c8:28:94:2b:87:fd:25:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 10 06:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0479849ad874c5a4ae9f3f44b3f33a4a42d6b0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:e5:e4:d8:2f:e9:24:49:b4:31:69:c4:40:
49:25:b5:be:b7:60:6a:d4:e6:5e:0e:9c:0a:b8:c3:
ea:0d:02:8f:60:52:02:12:34:cc:83:36:08:6c:14:
8f:e2:35:2b:9b:81:e4:60:25:3d:87:b5:95:a8:c5:
57:7b:e5:f1:6c:4f:da:aa:b2:e3:55:d0:8e:99:46:
a8:af:ab:b8:a5:e1:5d:ff:26:c2:56:57:86:17:be:
fb:bb:d8:42:07:78:4a:28:12:12:ab:63:62:db:bb:
ac:33:38:93:e7:05:79:52:88:db:63:fd:ea:11:15:
7a:af:31:17:dc:73:1c:f1:43:3d:f9:fb:f9:aa:2e:
49:13:35:aa:54:23:21:5d:cc:79:c0:9d:ea:82:53:
bc:07:db:cc:c5:f7:1a:de:71:48:72:8a:e8:6a:96:
c5:e6:6e:8d:df:09:e1:8b:3e:ae:ca:c8:c7:db:13:
40:84:4f:c7:7e:3c:42:c7:13:7f:5c:6f:93:42:73:
e9:aa:90:bb:53:ff:ff:ec:cc:ef:eb:4d:7c:4e:83:
01:0c:9c:c0:4d:7b:09:4a:50:42:02:54:05:54:6d:
b5:17:ee:85:91:df:0d:10:98:a5:57:91:dc:e2:1d:
1a:a4:e4:f3:cb:dc:30:31:da:e4:bf:29:12:73:a7:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:84:9A:D8:74:C5:A4:AE:9F:3F:44:B3:F3:3A:4A:42:D6:B0:E4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BHmEmth0xaSunz9Es_M6SkLWsOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.88.0/21
89.43.140.0/22
89.45.164.0/24
89.46.0.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
2b:b4:90:ad:2f:9c:89:84:80:fa:09:f9:58:8b:49:53:64:c1:
13:68:05:ea:d9:04:7e:ce:27:2b:f1:d4:ce:48:8a:46:03:ed:
63:82:29:8b:c7:23:70:ce:4c:62:4a:f9:3d:57:20:9c:48:cf:
09:e5:f5:74:a7:4c:82:a2:5e:c9:ec:90:e2:66:8e:5a:a0:14:
a2:c7:6f:29:af:3a:85:92:1b:35:d8:aa:f5:42:ef:5c:4b:40:
a2:60:10:c7:2e:fc:63:f1:e4:0f:fc:2e:6b:34:bf:88:ed:3d:
03:c2:b6:a7:a8:f9:1b:4d:40:f8:3e:a5:2e:79:73:68:3f:ff:
c0:39:d4:c1:0a:8a:f4:98:e8:d2:c9:68:ef:72:4e:32:4c:05:
06:d6:36:99:ae:87:3e:d3:37:a4:f6:35:6a:29:72:71:92:02:
c6:d0:3c:2e:ef:da:ad:06:a4:b1:5e:18:1e:4a:c5:34:29:34:
64:ef:c1:4d:2a:1a:ef:d3:99:1c:3b:46:95:cb:a7:4e:cf:a8:
7e:f8:1e:8b:37:91:16:50:04:f2:82:f2:d4:7d:5b:67:39:e4:
a5:99:41:77:b4:b6:56:a3:7c:17:bd:ca:1d:8c:dd:c5:60:aa:
c8:01:98:0e:e9:de:b8:6b:cb:aa:d6:81:fb:7a:0a:36:7e:43:
d0:a1:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-ams.rpki-client.org