Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/S38_HkPRJFad-RoQSqoVynI3HIc.roa
File: S38_HkPRJFad-RoQSqoVynI3HIc.roa (raw, json)
Hash identifier: CmB25q3I0F6in+t4bDRc1+Wr6tEFSf7Fp2JDP/srwqw=
Subject key identifier: 4B:7F:3F:1E:43:D1:24:56:9D:F9:1A:10:4A:AA:15:CA:72:37:1C:87
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D22016A1D20F147253B3FE0B6DCF6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/S38_HkPRJFad-RoQSqoVynI3HIc.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Jan 2024 14:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:22:01:6a:1d:20:f1:47:25:3b:3f:e0:b6:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b7f3f1e43d124569df91a104aaa15ca72371c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:64:12:18:57:a8:6b:10:0b:6f:93:40:fa:
a1:38:ee:b5:87:7e:04:5d:a9:12:94:f7:25:d6:be:
95:79:82:79:dd:93:cf:4f:99:21:ac:03:1d:68:c9:
a5:96:00:fb:5f:09:05:f3:c6:d4:5b:5f:82:79:34:
c4:b4:0f:30:a4:85:90:04:91:b1:c4:eb:32:a4:e1:
b7:18:9b:4d:f5:5b:c3:1c:13:7f:a9:84:6c:0e:44:
6b:cb:14:1d:31:49:17:b0:1b:d0:4e:39:78:93:ab:
47:ac:b7:93:d6:d5:dc:21:a1:be:65:bb:f9:4b:08:
02:1e:9d:40:d9:25:37:f2:f0:a0:aa:1b:d9:14:89:
4f:e5:7e:71:ea:a6:5b:98:ab:f2:3b:bc:28:25:d5:
bd:06:db:d3:7d:ce:21:af:2d:8f:ca:ef:d3:5f:e5:
5f:fe:85:a2:27:5b:8f:05:e0:2d:a5:2a:1e:ee:90:
74:27:d4:8e:4c:80:96:fa:39:5e:c5:3c:31:8c:6e:
29:cb:d5:e2:37:7f:15:e3:7b:77:5d:87:09:46:64:
04:6e:a8:94:99:96:c2:c3:53:f8:66:91:be:f1:b4:
42:9c:b5:84:fd:e7:c4:e7:74:5d:9e:f0:47:87:3e:
cc:66:67:91:ea:ba:ad:50:d7:7f:64:2d:64:38:90:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:3F:1E:43:D1:24:56:9D:F9:1A:10:4A:AA:15:CA:72:37:1C:87
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/S38_HkPRJFad-RoQSqoVynI3HIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.35.158.0/24
89.38.228.0/23
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0/20
89.47.114.0/23
89.47.118.0-89.47.120.255
89.47.122.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
87:fd:0b:34:7a:01:3d:cb:45:e3:db:77:6b:5a:0e:f7:0c:bb:
07:e6:2f:3e:11:83:96:e0:5f:82:2e:3a:f8:4f:be:f6:fb:b4:
c0:82:7b:a9:38:bd:2f:bf:bc:d2:fa:2d:cd:b5:3c:3d:4d:35:
37:73:dc:55:e0:20:20:cf:c1:84:c9:06:00:63:10:e2:4d:a6:
e9:a4:ab:60:5d:a8:35:11:24:6b:68:1b:54:d6:7b:3f:81:31:
69:73:99:51:99:84:4a:68:f7:54:eb:2f:5f:30:8f:be:db:2a:
2d:6a:74:fc:a7:fd:16:20:47:3e:b3:9c:3e:f5:ac:75:9a:7e:
5c:50:57:02:60:24:4e:ec:6d:37:62:43:1c:24:8e:d8:11:31:
b3:97:10:13:37:2b:8a:0f:46:bf:49:43:83:19:01:0a:23:5c:
d6:57:f1:84:6c:07:0e:cf:4e:7b:e3:26:0a:af:53:aa:a4:42:
e2:ea:99:6b:74:22:65:ae:81:cf:95:a7:81:12:3c:d5:b0:ed:
0c:d1:d1:eb:15:5d:ca:04:8e:52:67:23:12:bb:37:2a:3c:6c:
01:8c:9d:f1:dc:6d:27:54:f2:a9:0d:84:02:b7:36:72:73:d0:
52:b1:f3:4d:55:11:c3:a5:03:32:8a:1b:59:b2:c0:31:f3:65:
6f:88:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org