Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EsaBcDQjB5JGHAWivheb7JnJeCE.roa
File: EsaBcDQjB5JGHAWivheb7JnJeCE.roa (raw, json)
Hash identifier: rkQLJMQ6r65uQ0xa9/r8lWcvqtxUJgqwccxlHkJyZlI=
Subject key identifier: 12:C6:81:70:34:23:07:92:46:1C:05:A2:BE:17:9B:EC:99:C9:78:21
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01898BADB08BFB1D66838ED10D345D6C2F63
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EsaBcDQjB5JGHAWivheb7JnJeCE.roa
Signing time: Tue 25 Jul 2023 06:12:43 +0000
ROA not before: Tue 25 Jul 2023 06:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Aug 2023 05:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:ad:b0:8b:fb:1d:66:83:8e:d1:0d:34:5d:6c:2f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 25 06:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c6817034230792461c05a2be179bec99c97821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:d2:94:06:b8:19:04:42:e2:a1:b1:b4:77:
6b:7b:87:84:7f:a1:51:b3:fa:7e:b7:40:6d:01:15:
19:9f:a7:4b:9d:29:f6:df:1d:6a:0b:a1:8c:0b:8e:
a4:21:1a:eb:4a:af:41:bd:41:01:6d:a6:a6:5a:78:
42:c7:04:f6:01:70:be:db:a7:02:2d:54:f8:82:15:
ad:1d:42:52:72:ab:12:e4:95:36:b3:09:6b:68:4f:
64:0c:70:c8:f3:d7:75:fb:0a:ea:4d:bc:b8:50:ff:
1d:a9:32:ca:bf:d6:f5:fb:18:81:ae:50:24:0f:ca:
83:ef:ec:b2:1e:41:90:c5:53:11:e5:3b:e7:7b:f9:
a5:2d:5b:f9:d7:86:4a:2c:51:da:50:94:10:dd:4e:
e3:63:89:c6:58:65:ae:ab:45:59:cf:b2:da:6f:50:
cf:b3:91:58:13:ed:47:98:78:b2:3e:24:7d:06:9a:
9d:39:ae:23:91:ff:b9:df:38:1d:7a:cd:c4:53:49:
82:d0:7a:c9:3f:db:86:b3:24:b4:0f:a7:32:ca:b5:
30:a3:0d:a0:9d:af:22:44:1e:f2:71:51:94:5b:7a:
69:cd:0c:53:eb:a1:33:91:61:69:bd:03:8c:49:b0:
85:8a:43:ff:bc:fe:03:1f:0a:04:40:2e:10:5d:76:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:81:70:34:23:07:92:46:1C:05:A2:BE:17:9B:EC:99:C9:78:21
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EsaBcDQjB5JGHAWivheb7JnJeCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
2a:66:8a:e9:d6:7d:80:74:f5:b0:06:c5:fb:d5:6a:9d:b4:66:
f1:cd:59:bf:54:91:61:62:be:2f:fe:f8:69:3a:0a:1c:38:15:
a7:8a:e3:c6:61:11:ef:41:8c:57:30:ef:e2:44:be:03:16:53:
ef:24:c3:32:cd:50:d6:cc:d1:a6:9c:33:f9:97:3b:b2:ac:bd:
85:37:9b:0d:44:59:72:3d:63:23:60:da:ad:65:fb:ef:10:2d:
77:0b:8e:73:3a:52:a1:54:f3:31:6b:2a:e6:54:17:d8:69:82:
50:1b:1b:72:f8:4b:40:54:c1:5b:a3:f7:72:4d:77:01:0c:da:
a2:eb:2a:47:2d:94:ad:62:f3:97:ad:1a:dd:74:2d:42:60:06:
2a:13:fd:04:ad:30:9d:9d:55:1a:6e:eb:5d:53:46:4d:78:20:
0a:4e:46:d8:fc:a6:37:d1:85:1c:1d:60:0d:26:43:a5:00:49:
4b:c2:6f:e8:fa:57:4d:e8:c5:e2:de:46:a3:12:cc:3b:40:b5:
20:ef:e1:b1:a4:bf:ec:aa:0d:f1:78:a4:53:89:11:75:df:14:
41:c2:9f:20:18:eb:6e:48:5e:0a:59:66:ad:90:62:96:9e:4b:
5c:69:4b:70:8a:b8:0d:b9:0f:44:bf:35:00:d8:2d:d6:f5:79:
8e:84:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org