Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8C1aw6nV2LPedJ23WaUHljMIBU.roa
File: J8C1aw6nV2LPedJ23WaUHljMIBU.roa (raw, json)
Hash identifier: 2PAB30Rvo6pBVnMUE39r7Rn4vR3qMHOhjI8TwJbj8tU=
Subject key identifier: 27:C0:B5:6B:0E:A7:57:62:CF:79:D2:76:DD:66:94:1E:58:CC:20:15
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A437F34D72A3AFDD490B9BF796C89C51B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8C1aw6nV2LPedJ23WaUHljMIBU.roa
Signing time: Tue 29 Aug 2023 22:52:04 +0000
ROA not before: Tue 29 Aug 2023 22:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.225.0/24 maxlen: 24
89.34.224.0/24 maxlen: 24
89.34.226.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Sep 2023 08:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:7f:34:d7:2a:3a:fd:d4:90:b9:bf:79:6c:89:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 29 22:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c0b56b0ea75762cf79d276dd66941e58cc2015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:0d:e2:cf:b0:5b:ec:51:b4:8b:3a:d5:26:
2f:a0:a0:e7:ba:62:91:fe:6b:97:51:ee:5d:20:bc:
33:40:0d:16:bd:e3:4b:df:ce:9b:db:ec:84:55:90:
91:1d:29:fb:d5:a8:bb:17:a5:6a:8c:2b:b1:34:67:
d6:51:0e:8b:47:c1:f1:fc:66:ff:86:52:04:48:a2:
94:9c:47:5d:08:78:8f:af:6d:bf:9d:d8:99:3e:73:
7b:52:4c:ab:86:f8:35:db:d2:fe:b4:04:40:e4:9d:
0f:98:95:7a:31:c0:47:5e:d6:00:15:df:ee:9d:02:
f9:eb:3c:4e:73:a6:19:45:c3:bd:68:e1:ee:7a:77:
1a:f3:b6:ea:20:54:47:07:fb:37:41:71:3e:a1:cb:
72:07:f0:6b:f6:22:4a:15:3c:36:57:54:46:88:00:
0c:69:b3:50:2b:df:17:36:5c:1c:6f:4e:b1:de:1d:
25:74:91:e6:aa:3c:13:65:41:8e:a0:c8:b0:cd:3f:
2c:8f:54:9b:52:71:58:2b:e6:6d:76:50:71:45:f3:
c3:a6:17:8a:9b:57:18:3e:87:6a:0b:82:27:40:ff:
33:2f:99:47:69:7c:04:a0:a6:f5:45:47:35:02:a8:
93:13:9c:bb:c1:38:e4:f5:f3:e5:21:cf:b8:06:89:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:B5:6B:0E:A7:57:62:CF:79:D2:76:DD:66:94:1E:58:CC:20:15
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8C1aw6nV2LPedJ23WaUHljMIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.34.27.0/24
89.34.224.0-89.34.226.255
89.34.228.0/24
89.34.230.0/23
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
22:2b:d1:b1:b5:22:d2:49:39:7b:18:88:7f:ea:b7:be:a3:97:
b4:0e:5a:a1:2d:dc:d4:47:5c:ae:2e:9b:e7:f5:8a:a6:4f:be:
7b:03:4c:d7:11:f0:33:f3:3e:53:fe:7a:89:72:13:75:5f:6b:
81:49:9e:51:b8:fb:b6:f9:30:3f:3e:2a:15:36:96:f3:01:5d:
ee:bf:fb:b7:d5:c9:86:0d:7f:3f:3d:c6:56:61:44:c9:41:c9:
38:16:be:03:07:29:4f:b2:cd:aa:94:10:2b:fb:98:8b:28:79:
e4:95:c8:e6:a7:cd:b8:fd:b2:f9:ef:c7:40:22:1b:d4:4d:da:
d6:ba:21:8c:2d:e2:15:be:92:c9:ea:3a:ee:aa:5b:d6:cb:2e:
62:a7:e4:0d:33:09:39:9a:0e:ae:16:b0:dc:0c:8d:0a:fb:21:
81:34:62:e7:7b:b1:27:f8:30:e5:a2:50:b7:b8:51:11:76:d5:
43:81:9e:98:66:e6:19:c7:2c:1d:f4:be:68:66:05:9a:86:9a:
b9:50:08:67:a7:94:e8:d5:1f:f7:6a:cc:56:d0:12:92:41:bb:
b9:8d:d3:ff:4c:2c:76:56:30:ad:88:d3:4c:39:72:8e:f5:1c:
d0:9f:ef:83:87:c9:2a:28:e0:ce:17:61:50:83:7a:e6:30:25:
fd:fe:cc:3a
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAYpDfzTXKjr91JC5v3lsicUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwODI5MjI1MjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2MwYjU2YjBlYTc1NzYyY2Y3OWQyNzZkZDY2OTQxZTU4Y2MyMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma8N4s+wW+xRtIs61SYvoKDnumKR
/muXUe5dILwzQA0WveNL386b2+yEVZCRHSn71ai7F6VqjCuxNGfWUQ6LR8Hx/Gb/
hlIESKKUnEddCHiPr22/ndiZPnN7Ukyrhvg129L+tARA5J0PmJV6McBHXtYAFd/u
nQL56zxOc6YZRcO9aOHuenca87bqIFRHB/s3QXE+octyB/Br9iJKFTw2V1RGiAAM
abNQK98XNlwcb06x3h0ldJHmqjwTZUGOoMiwzT8sj1SbUnFYK+ZtdlBxRfPDpheK
m1cYPodqC4InQP8zL5lHaXwEoKb1RUc1AqiTE5y7wTjk9fPlIc+4BomD+QIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFCfAtWsOp1diz3nSdt1mlB5YzCAVMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSjhDMWF3Nm5WMkxQZWRKMjNXYVVIbGpNSUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizB6BAIAATB0AwQAWSEN
AwQAWSIbMAwDBAVZIuADBABZIuIDBABZIuQDBAFZIuYDBABZI54DBABZJ28DBABZ
KEMDBAJZK4wDBABZLaQDBABZLgMDBAVZL2ADBANdcbADBABdccwDBABdck8DBABd
csIDBALBE8ADBAHDHAIwDQQCAAIwBwMFACABTRgwDQYJKoZIhvcNAQELBQADggEB
ACIr0bG1ItJJOXsYiH/qt76jl7QOWqEt3NRHXK4um+f1iqZPvnsDTNcR8DPzPlP+
eolyE3Vfa4FJnlG4+7b5MD8+KhU2lvMBXe6/+7fVyYYNfz89xlZhRMlByTgWvgMH
KU+yzaqUECv7mIsoeeSVyOanzbj9svnvx0AiG9RN2ta6IYwt4hW+ksnqOu6qW9bL
LmKn5A0zCTmaDq4WsNwMjQr7IYE0Yud7sSf4MOWiULe4URF21UOBnphm5hnHLB30
vmhmBZqGmrlQCGenlOjVH/dqzFbQEpJBu7mN0/9MLHZWMK2I00w5co71HNCf74OH
ySoo4M4XYVCDeuYwJf3+zDo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org