Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_WUnx6TvQ5dAuF7cr1746OzWi3o.roa
File: _WUnx6TvQ5dAuF7cr1746OzWi3o.roa (raw, json)
Hash identifier: 6XRPZ9lSdqN04GK4MhrLM7DMv4NKfyVoy/buGuZgyEE=
Subject key identifier: FD:65:27:C7:A4:EF:43:97:40:B8:5E:DC:AF:5E:F8:E8:EC:D6:8B:7A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018F9B5F9A64E958A2F84C738E2AD0A512BC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_WUnx6TvQ5dAuF7cr1746OzWi3o.roa
Signing time: Tue 21 May 2024 13:38:04 +0000
ROA not before: Tue 21 May 2024 13:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.34.224.0/23 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.42.95.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 17:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:5f:9a:64:e9:58:a2:f8:4c:73:8e:2a:d0:a5:12:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 21 13:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd6527c7a4ef439740b85edcaf5ef8e8ecd68b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:a2:20:2a:aa:0f:10:b2:bd:f8:2d:09:0d:
aa:c6:20:77:da:aa:3f:d3:ad:40:2c:47:60:a5:da:
cf:50:73:bd:42:fc:55:12:69:f2:ad:38:e2:5b:b6:
52:4b:05:12:e9:c9:29:c4:b2:69:7d:43:d0:56:27:
83:e3:e6:d8:2b:da:42:47:44:e0:a3:d0:0c:f0:a2:
fb:1d:af:9e:f3:f4:58:7d:ed:ba:bd:f9:25:d2:be:
8a:17:02:e1:2a:e0:e0:ce:a9:a2:00:c0:2b:e6:85:
61:15:ce:7c:2e:4e:ab:7b:8e:90:58:f0:67:d9:b3:
d1:b9:5e:27:48:a6:2f:70:e9:fd:9d:f6:0a:5c:53:
ad:71:15:99:32:63:3a:a5:a2:2a:1d:56:33:89:e2:
48:3e:9d:85:56:45:47:0c:60:76:18:b7:31:f9:a8:
cc:5a:af:bc:59:08:86:40:58:c4:94:b3:3a:d6:be:
e3:f3:38:5b:3c:cb:91:a0:6a:af:bd:74:93:bf:83:
b5:3e:4a:94:bf:4f:0f:38:4c:26:da:32:a8:af:36:
8d:51:00:b3:58:93:84:a8:26:d9:8b:fc:9b:8f:04:
a0:71:74:4b:55:f6:fc:1d:85:63:ea:65:ce:77:46:
d0:f3:78:79:19:b3:3c:19:ce:60:1b:cc:1c:78:38:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:27:C7:A4:EF:43:97:40:B8:5E:DC:AF:5E:F8:E8:EC:D6:8B:7A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_WUnx6TvQ5dAuF7cr1746OzWi3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.34.228.0/24
89.34.231.0/24
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.42.95.0/24
89.42.143.0/24
89.43.140.0/24
89.43.143.0/24
89.46.0.0/24
89.46.3.0/24
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.127.255
93.113.181.0/24
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2d:1a:ab:5a:54:85:ff:59:30:0e:f2:40:e4:1e:17:bb:eb:
ab:14:3a:7c:2e:d1:9f:e3:17:ec:f5:1c:2c:54:35:36:79:f2:
5a:03:aa:fe:74:6b:c5:ae:c1:18:81:0a:28:9f:c5:68:f0:bc:
27:24:60:a6:9c:39:71:0c:77:a6:4b:13:9d:3e:76:d7:b2:3f:
ae:53:7b:f9:f8:d7:2d:97:0b:76:05:77:ed:70:6e:42:00:eb:
d8:e8:e0:ba:43:90:c2:6f:f7:1a:19:da:ee:a9:cf:ae:9e:96:
91:46:1a:ac:51:0a:91:f9:88:f8:de:91:d2:c5:43:23:b1:a3:
87:6c:8e:7f:a3:57:cf:bf:95:3f:05:72:fa:ec:b8:b8:56:dd:
13:64:f6:d3:f5:ca:1c:d0:17:11:37:e5:06:7b:93:c2:9a:d3:
c7:00:61:38:d8:a3:d5:38:0b:bb:03:d2:6b:b2:ba:d6:8d:5b:
aa:54:74:0f:94:72:15:f7:6a:1f:cc:8e:cd:2f:22:a6:45:cd:
c0:c0:20:2a:4d:80:0c:4e:da:1b:c5:13:26:ed:b0:07:e8:db:
a3:ae:e9:5e:cb:09:5f:0a:ab:24:20:cf:8d:01:12:67:7e:3b:
6d:9b:1b:a4:7d:11:e7:a6:32:f9:ef:ee:43:3a:87:0c:46:bd:
3b:17:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:38:39 2024 by rpki-client on console-ams.rpki-client.org