Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/m-ym9dyKGNYxh-CbkEm1-OKRr4k.roa
File: m-ym9dyKGNYxh-CbkEm1-OKRr4k.roa (raw, json)
Hash identifier: acQVxZYY8CJsNtArXjxC/KOfLzbojsakyqGFCC0Y9is=
Subject key identifier: 9B:EC:A6:F5:DC:8A:18:D6:31:87:E0:9B:90:49:B5:F8:E2:91:AF:89
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01897C9A7F5AC42A442741EA2B0952B0FDFF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/m-ym9dyKGNYxh-CbkEm1-OKRr4k.roa
Signing time: Sat 22 Jul 2023 07:57:27 +0000
ROA not before: Sat 22 Jul 2023 07:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
89.33.12.0/23 maxlen: 23
89.33.12.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.35.158.0/24 maxlen: 24
89.42.90.0/24 maxlen: 24
89.42.91.0/24 maxlen: 24
89.42.94.0/24 maxlen: 24
89.42.95.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:9a:7f:5a:c4:2a:44:27:41:ea:2b:09:52:b0:fd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 22 07:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9beca6f5dc8a18d63187e09b9049b5f8e291af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:8a:b2:93:6b:7f:52:37:33:3e:48:08:a0:
4f:22:78:33:86:68:27:6e:a4:c5:98:da:89:21:c0:
f9:2c:06:2d:a7:25:b5:76:ef:30:ce:d2:d8:be:ab:
9c:67:15:f3:4d:2b:4f:8d:5b:98:c5:cd:0e:a1:a6:
70:96:9a:1b:e6:35:84:c0:8f:10:c0:8c:8f:4e:b3:
a3:2e:b8:07:ac:cb:27:ba:ba:17:02:80:2e:7d:00:
83:cb:fc:65:5b:5c:e9:1a:06:72:fc:b2:ad:58:0c:
d7:60:62:91:30:16:89:bd:ee:bb:04:ec:83:47:34:
96:92:fd:d8:1f:78:c8:c3:dc:64:9b:a9:4b:d2:c5:
72:11:de:3d:48:88:ac:bf:89:02:af:c6:a4:fd:77:
08:8e:7b:e2:99:67:e2:63:80:08:03:8c:cd:a8:72:
70:82:90:78:fb:f5:9b:a4:8c:2f:db:b0:92:a5:20:
98:44:77:e2:05:ec:b6:83:a0:c3:dd:25:23:61:2c:
5e:6c:95:5e:d5:69:ad:5d:16:89:6d:6a:ad:42:05:
a9:22:1f:bf:63:18:5b:46:00:13:6f:b6:6c:77:8d:
c4:4b:28:65:41:90:2d:8a:1e:87:46:c8:24:bd:a1:
8b:98:b6:55:b0:1f:24:e2:2e:ca:9b:4e:16:1d:46:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EC:A6:F5:DC:8A:18:D6:31:87:E0:9B:90:49:B5:F8:E2:91:AF:89
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/m-ym9dyKGNYxh-CbkEm1-OKRr4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.90.0/23
89.42.93.0-89.42.95.255
89.43.140.0/22
89.45.164.0/24
89.46.3.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
0a:98:bb:90:6d:2b:a3:00:0f:12:5a:83:f2:e0:a3:2a:1f:54:
73:82:28:2a:85:12:8d:7b:39:55:f5:a0:8b:2e:d5:7a:41:63:
1d:36:3f:4e:b1:01:15:83:c1:64:d1:c2:65:93:f1:42:21:4e:
35:9f:24:c6:a1:ab:b9:04:e2:46:5e:b5:4a:c1:f4:10:c3:e9:
40:3c:25:b5:7d:99:46:a8:e7:ed:90:46:7f:db:04:e9:7c:1c:
d1:d8:e6:1b:74:08:56:71:6e:ff:36:ab:7e:18:59:de:4f:6e:
d1:19:31:cf:7e:e2:c1:e4:bf:de:56:00:8a:93:92:f2:08:0c:
34:9a:3c:66:79:87:85:ad:74:f0:d0:ab:45:a4:bd:16:05:86:
ab:0a:8a:94:7b:aa:f5:89:0a:35:b0:31:3c:d1:9f:5f:30:e2:
df:b9:43:72:23:e4:54:91:ee:ea:05:40:a3:84:a1:77:65:ec:
22:1e:88:3c:74:0b:4d:39:a0:57:39:e1:fd:6a:38:06:6e:f7:
12:ef:4e:9d:f1:29:b8:45:cd:4e:1c:ca:73:9f:94:61:91:cc:
0d:22:cc:ff:7e:75:a1:f8:cd:02:b5:20:1e:b3:b0:2b:9c:04:
74:5e:bc:72:1f:12:fb:f2:16:34:8d:da:1a:b8:60:a5:03:3f:
9e:0a:dd:d3
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 24 05:08:20 2023 by rpki-client on console-fra.rpki-client.org