Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TsbSCfFiNhzAhaG2AUHTirHeGuU.roa
File: TsbSCfFiNhzAhaG2AUHTirHeGuU.roa (raw, json)
Hash identifier: pxVuP1efkatbBQQ05U8GRH/zMtOy4rm4LRBZ4aZTkvs=
Subject key identifier: 4E:C6:D2:09:F1:62:36:1C:C0:85:A1:B6:01:41:D3:8A:B1:DE:1A:E5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01869D12054AE3C16FBA3A2922262EEA042B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TsbSCfFiNhzAhaG2AUHTirHeGuU.roa
Signing time: Wed 01 Mar 2023 12:07:29 +0000
ROA not before: Wed 01 Mar 2023 12:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.12.0/23 maxlen: 23
188.241.240.0/23 maxlen: 23
188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.42.80.0/21 maxlen: 22
89.35.158.0/24 maxlen: 24
89.42.88.0/21 maxlen: 22
188.240.221.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.2.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.46.0.0/23 maxlen: 23
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
93.119.104.0/22 maxlen: 22
93.119.104.0/24 maxlen: 24
93.119.105.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.33.192.0/22 maxlen: 22
89.33.192.0/24 maxlen: 24
89.33.194.0/24 maxlen: 24
89.33.193.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Apr 2023 05:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:12:05:4a:e3:c1:6f:ba:3a:29:22:26:2e:ea:04:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 1 12:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec6d209f162361cc085a1b60141d38ab1de1ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:cb:c0:28:f6:56:29:e3:23:43:84:bb:b5:
86:c5:e0:90:4d:12:24:f5:7d:d4:e6:19:e8:74:93:
3e:e3:9b:e6:e6:39:57:8c:5e:d7:c9:72:b2:bf:1e:
ae:7f:e9:d7:98:cc:8e:5a:a7:cd:f2:44:b3:5e:98:
a7:19:8e:6f:ac:ee:4d:57:9c:b5:05:f7:0a:0a:af:
44:53:59:d6:6f:02:1a:de:6f:48:7f:fc:6e:cb:db:
43:1a:3b:68:78:1c:39:85:b6:6f:09:e2:70:41:ad:
50:c4:6f:12:d5:9b:a5:f5:d8:a2:be:4a:74:b6:31:
d0:f7:5a:8d:51:7a:b0:7a:83:81:3b:0b:ab:0c:ce:
32:13:42:0d:ba:01:3a:52:11:e2:0d:6e:23:0f:c0:
de:93:7e:94:07:25:03:38:ea:68:3a:89:41:86:5a:
c1:5f:99:7d:87:be:62:e2:01:16:22:76:e2:1f:b2:
19:2e:1a:1c:10:e8:e4:2e:5d:a2:90:88:7f:79:7b:
01:cf:01:a3:cc:86:22:12:d4:52:75:e0:63:f0:a3:
85:8d:80:af:5e:d3:5a:30:09:cb:cb:85:f2:a9:3c:
bc:ee:6d:ad:b8:f9:1d:46:9e:7b:3b:8d:cd:a2:32:
3a:44:42:3a:ff:5d:f2:44:78:63:8a:97:6c:49:25:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:D2:09:F1:62:36:1C:C0:85:A1:B6:01:41:D3:8A:B1:DE:1A:E5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TsbSCfFiNhzAhaG2AUHTirHeGuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.33.192.0/22
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.80.0/20
89.43.140.0/22
89.45.164.0/24
89.46.0.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
93.119.104.0/22
188.240.210.0/24
188.240.221.0/24
188.241.240.0/23
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
46:f1:c9:77:6c:dc:a8:3d:58:32:ed:84:e4:67:43:4e:9f:70:
17:0a:46:75:cc:67:98:ce:b2:3d:ec:a5:e0:88:28:93:3d:db:
dd:cc:99:0d:d7:54:f5:c1:78:21:97:7a:eb:52:74:d9:fd:c6:
36:ee:b2:58:54:46:27:7c:ae:7f:e8:e6:a5:90:d6:92:df:98:
42:af:b5:41:ad:35:27:c6:5c:66:c6:66:41:45:a6:13:63:45:
0f:fa:9c:8a:94:a0:77:dc:93:ff:dd:3e:cd:53:80:c3:0c:68:
7e:54:0d:63:9e:03:c9:94:b2:34:89:69:6a:f2:8b:6e:f0:25:
57:ae:69:dd:4a:17:ae:fe:7a:3c:d3:6e:62:f4:d2:81:44:58:
c4:ba:87:5a:bd:54:48:52:c4:82:3b:d6:66:78:f6:6f:6e:f5:
0f:95:77:8d:b3:89:ba:a9:15:bc:75:76:16:45:34:0d:93:c4:
59:20:3b:ab:62:b5:55:d4:05:e2:79:84:ad:7d:a6:d1:75:e4:
82:b2:d5:d4:a5:02:d8:5e:be:a8:5b:92:f8:15:1d:a0:e7:fb:
0e:66:52:fc:10:af:7b:ae:aa:5c:1e:81:72:aa:86:3a:90:06:
17:79:d8:55:93:4a:b2:d4:27:0d:a4:31:93:cb:08:71:37:a0:
27:08:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org