Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LdEiLKbnZZaiKobWwD1R0Hnuh7Q.roa
File: LdEiLKbnZZaiKobWwD1R0Hnuh7Q.roa (raw, json)
Hash identifier: QN/Tqv6qK+1ZQu6wK3X4YctlBrL8l7q8wfPycn81eNw=
Subject key identifier: 2D:D1:22:2C:A6:E7:65:96:A2:2A:86:D6:C0:3D:51:D0:79:EE:87:B4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B678D022AC9F2FCCBB76A677EAA98A0E0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LdEiLKbnZZaiKobWwD1R0Hnuh7Q.roa
Signing time: Wed 25 Oct 2023 15:56:16 +0000
ROA not before: Wed 25 Oct 2023 15:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.43.143.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Oct 2023 23:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:8d:02:2a:c9:f2:fc:cb:b7:6a:67:7e:aa:98:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 25 15:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dd1222ca6e76596a22a86d6c03d51d079ee87b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6f:1b:8d:01:59:ca:ec:07:9c:a0:ef:4c:bb:
f7:2a:58:84:f5:42:a6:dd:d6:99:61:bb:f1:ac:b8:
65:14:d2:c6:53:13:b8:57:2e:8e:ad:59:7c:59:df:
92:b5:2f:f8:26:ce:29:e5:6c:a5:ba:61:69:cd:a8:
4c:09:05:8a:02:aa:55:c1:9a:cc:04:25:ce:0a:4c:
4d:75:a2:80:3d:de:e9:4e:56:0c:85:93:71:2f:a6:
3c:f9:3e:96:1a:0a:17:e4:2c:92:39:b6:85:3a:8f:
be:4a:78:6c:86:ba:fe:87:6b:59:0c:48:2d:e7:11:
28:0c:0b:75:be:6c:ff:e5:be:f5:c7:4a:fc:df:8b:
5f:5d:2f:67:cd:15:08:1e:a0:30:a7:f5:5b:1a:50:
da:d6:c9:62:05:b6:e4:72:67:72:b6:52:05:b9:8f:
70:bb:fd:3e:9c:d2:e6:bc:a7:28:ee:2b:ed:80:f1:
85:59:ad:95:b6:8c:f9:f1:4b:40:61:f1:e1:4e:26:
e4:24:09:99:cc:6a:e7:20:32:b2:d3:1b:61:4e:1d:
81:01:45:5f:98:c7:88:f3:34:16:e3:a9:0f:64:1c:
27:e8:a7:78:48:d1:9c:d8:a5:06:82:99:f4:f4:dc:
1f:46:0f:c3:59:ed:aa:1a:3f:1d:54:09:fa:65:f0:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:22:2C:A6:E7:65:96:A2:2A:86:D6:C0:3D:51:D0:79:EE:87:B4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LdEiLKbnZZaiKobWwD1R0Hnuh7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.34.228.0/24
89.34.230.0/23
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.181.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
06:c2:b5:30:59:1f:05:cd:9d:02:0a:b8:00:b2:20:a2:06:ba:
f0:ca:d2:db:09:8e:b9:7b:7c:92:2a:58:f6:af:e5:19:9c:bc:
64:11:b4:86:ee:b7:ea:51:00:35:2e:fb:e8:3e:ff:be:e0:78:
00:68:09:24:b4:3a:bf:b2:8c:40:a8:db:b1:bb:ed:4f:7d:7b:
1e:4c:cc:f0:2f:59:26:74:e5:54:7b:58:1d:8a:95:93:5d:66:
b5:ab:5d:a8:13:93:9d:be:6f:80:19:9f:f2:30:db:6c:58:70:
38:6a:c7:9e:56:c3:75:f9:b9:50:02:62:70:b2:c1:f0:8f:e9:
76:a1:24:5d:d4:55:2b:db:0f:35:b9:dc:40:37:6e:8f:d9:24:
d8:79:40:c1:4a:39:bb:ee:ea:9f:26:bb:37:81:ce:50:c9:39:
b8:25:1b:e4:47:fa:5a:f5:07:f5:6f:56:82:47:3d:44:b9:5c:
00:bf:8a:98:47:1e:da:3d:31:ad:76:7a:0f:36:a9:79:c2:b2:
d5:d5:81:b8:56:6e:41:52:00:e1:58:a6:67:99:57:ab:75:b7:
e7:cd:13:68:02:2a:bb:d7:91:b5:00:d7:5e:7d:58:82:25:25:
52:aa:36:83:3c:a8:eb:d4:4f:63:d9:64:d5:8a:c4:16:1f:48:
06:8c:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org