Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KeNSXwGt_ulzmrRRbGgGFxNukPo.roa
File: KeNSXwGt_ulzmrRRbGgGFxNukPo.roa (raw, json)
Hash identifier: /84iXCx/MKxOOMwBJhxS1rotKaPLyLH4uNgkMEDSPkw=
Subject key identifier: 29:E3:52:5F:01:AD:FE:E9:73:9A:B4:51:6C:68:06:17:13:6E:90:FA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01897C99C21A6CFF1E5C6EEE522778BC5094
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KeNSXwGt_ulzmrRRbGgGFxNukPo.roa
Signing time: Sat 22 Jul 2023 07:56:38 +0000
ROA not before: Sat 22 Jul 2023 07:56:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
89.33.12.0/23 maxlen: 23
89.33.12.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.35.158.0/24 maxlen: 24
89.42.90.0/24 maxlen: 24
89.42.91.0/24 maxlen: 24
89.42.94.0/24 maxlen: 24
89.42.95.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Jul 2023 07:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:99:c2:1a:6c:ff:1e:5c:6e:ee:52:27:78:bc:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 22 07:56:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29e3525f01adfee9739ab4516c680617136e90fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:fc:db:05:50:85:47:7c:57:eb:e4:80:7a:
e5:7d:97:8c:20:de:46:2e:95:dd:07:f0:b3:42:e9:
99:20:95:d3:c1:21:e0:a2:2e:b5:e3:1f:22:04:29:
3e:c0:46:ed:1f:23:a6:f7:23:e2:4e:83:1b:2a:e9:
30:44:57:31:65:64:18:c1:e7:f3:af:6b:e0:76:e0:
cc:ad:eb:c4:a9:ef:10:c4:0a:f7:4a:6e:f8:9c:b2:
a0:b7:b8:87:38:38:b4:95:9e:f6:7f:3a:17:1a:62:
70:9a:27:a7:54:8d:8f:ed:79:dc:c7:c7:f7:21:a9:
74:c8:d8:90:ff:89:f1:c5:c3:2b:64:33:0d:2a:91:
5c:19:33:e3:e4:fe:eb:c1:b6:e9:d5:7c:01:fe:72:
ee:55:29:03:67:a0:9c:2d:3a:e1:27:9a:cf:ae:70:
bc:ce:27:23:2b:d7:1b:ce:61:a6:1b:dc:64:6b:e6:
97:ef:7d:fe:8f:e8:74:8e:9d:fc:fd:69:4f:1e:7e:
cd:12:33:7b:55:45:fb:0c:f5:d7:11:fb:db:62:eb:
ac:5f:b6:8f:ac:3f:ea:99:ad:36:61:51:13:bd:da:
ea:8f:3a:82:ea:aa:6b:ac:bb:7c:95:8d:de:e6:6a:
88:9d:f5:67:75:5c:cf:93:70:06:ba:ce:5e:d4:eb:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:52:5F:01:AD:FE:E9:73:9A:B4:51:6C:68:06:17:13:6E:90:FA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KeNSXwGt_ulzmrRRbGgGFxNukPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.90.0/23
89.42.93.0-89.42.95.255
89.43.140.0/22
89.45.164.0/24
89.46.2.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
16:7b:e1:05:94:31:85:6d:18:f5:c6:68:6c:19:2d:08:6f:3f:
52:88:43:9d:07:2a:3b:52:d0:03:75:98:03:5f:9e:02:c6:71:
0b:39:12:83:5f:cb:48:23:b3:a5:1f:8f:2d:64:a6:d7:28:00:
e9:28:11:13:7f:6f:c8:18:65:17:4d:67:95:27:a6:98:2f:a9:
6f:f5:8a:86:b0:9b:d2:96:7f:37:bd:3d:df:8b:5a:87:f4:32:
ae:63:32:3a:5d:bf:b9:8f:56:eb:4e:39:b7:56:4f:7c:65:91:
1a:46:55:b7:e3:12:b2:19:4d:f3:a4:a6:b2:69:55:ac:2c:63:
1a:da:44:cd:68:ee:72:d2:c5:91:e8:b5:8f:23:46:03:69:e7:
bf:ca:46:0d:72:ee:14:de:27:17:e2:7d:58:4c:20:17:6a:d1:
40:d1:38:d8:39:b7:59:f7:a5:c2:d8:1d:06:75:85:01:aa:28:
45:70:b6:72:79:c4:0b:3d:ef:af:f3:38:cb:84:0f:3d:cf:be:
ea:c1:6c:cf:1d:58:b7:01:0a:06:38:07:d8:03:d3:9c:7d:9b:
6a:18:1c:b9:1e:c9:6e:aa:9d:73:27:38:83:66:61:a4:98:de:
01:1e:61:2f:62:8b:3c:0c:95:93:e5:37:5e:3d:95:6b:ca:a8:
01:7b:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org