Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OaZ6sRlmIfynoPqXDW6hM9qBmW8.roa
File: OaZ6sRlmIfynoPqXDW6hM9qBmW8.roa (raw, json)
Hash identifier: FOadYY/UQigjC5rL+yJUCdrK9ewpKSiiXYrEFQGYo8k=
Subject key identifier: 39:A6:7A:B1:19:66:21:FC:A7:A0:FA:97:0D:6E:A1:33:DA:81:99:6F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B5D7DA127541E0803A511D8BC04C84BF6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OaZ6sRlmIfynoPqXDW6hM9qBmW8.roa
Signing time: Mon 23 Oct 2023 17:03:16 +0000
ROA not before: Mon 23 Oct 2023 17:03:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
93.113.180.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.141.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Oct 2023 07:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:7d:a1:27:54:1e:08:03:a5:11:d8:bc:04:c8:4b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 23 17:03:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39a67ab1196621fca7a0fa970d6ea133da81996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:20:c8:ee:66:4c:94:1e:2c:b3:be:42:fe:
d8:91:f1:0c:e8:11:6e:b7:00:a4:6b:49:be:9b:da:
71:e4:b8:fe:bc:13:9e:00:9a:a7:0f:2f:ae:ea:71:
01:2e:b8:a4:74:58:20:e2:78:c7:2f:80:f2:9e:a9:
e7:74:6a:d5:4f:87:c0:cb:3d:2b:31:12:2e:f1:c6:
47:0b:01:03:60:ab:9c:27:e4:d6:f8:80:9a:df:78:
6b:40:13:1b:df:92:16:37:89:28:75:72:8d:a9:20:
9e:93:89:7e:ff:ec:a1:f3:d0:65:e1:b1:a5:ab:19:
98:ce:1f:58:e2:09:e4:76:e1:e1:ca:8b:85:96:76:
8b:32:ff:9f:8f:70:83:da:ac:ce:54:39:b2:ed:28:
e4:0e:0c:45:f8:9e:6a:19:01:ab:c5:58:f9:03:14:
86:dc:46:ac:7c:9a:11:d2:8c:c2:d1:73:f1:6e:e9:
5c:78:7e:e2:db:18:43:7c:20:e8:9d:91:a4:f0:d7:
41:f8:f6:20:6a:05:c9:7c:82:d8:b6:cb:e3:9f:10:
74:27:05:7b:b3:f1:12:bf:8e:25:c4:3c:d0:b1:4b:
a0:88:ca:e9:f9:d0:3d:2a:25:87:2b:0c:c3:29:f3:
cb:b7:fb:e4:0b:d8:ec:07:41:4e:a5:49:ba:5c:0d:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:7A:B1:19:66:21:FC:A7:A0:FA:97:0D:6E:A1:33:DA:81:99:6F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OaZ6sRlmIfynoPqXDW6hM9qBmW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.34.228.0/24
89.34.230.0/23
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.180.0/23
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
43:8f:6b:4e:82:0e:df:a6:3e:aa:6b:d4:3a:3f:cc:6d:ef:82:
3d:cb:7e:b3:40:ee:87:70:a3:4b:e9:46:d4:be:06:74:78:45:
81:18:04:db:87:c7:9e:84:a2:64:c2:a9:6b:5b:e7:89:72:ec:
9a:88:eb:d0:d1:12:b2:ea:08:ef:2d:53:45:10:85:1b:73:ca:
39:06:38:ad:06:b1:2a:54:0f:40:8e:7f:b1:63:2c:30:4b:fb:
55:6b:62:db:da:9c:aa:c5:80:e9:b8:20:eb:c7:28:c1:d9:21:
20:d9:60:c1:e2:ea:75:ad:84:ec:46:bc:fd:7a:a2:97:99:e6:
16:6d:72:94:bd:f7:4e:b2:c4:7f:0a:41:d9:52:9a:3a:b5:99:
4c:c1:f9:83:da:ef:04:96:4d:22:bc:d4:15:c5:4f:92:02:ad:
8a:db:f5:95:52:c4:0e:bd:bd:c6:cc:48:0c:b5:8e:9b:95:a3:
80:ca:61:18:6d:b3:a5:51:22:ca:cd:6e:04:90:14:87:5c:aa:
7f:ee:c9:ab:49:67:5b:87:3a:08:e4:2d:8a:1a:4e:70:d9:35:
d7:ff:2c:bf:be:6b:ec:01:2e:61:78:ed:4f:f1:0c:04:56:ff:
c2:76:d5:57:9b:8c:13:dc:0e:0f:14:a4:b5:ff:f3:c6:85:19:
68:13:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org