Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/n1buC-NBLnpiII_F6LrdpdWZCw8.roa
File: n1buC-NBLnpiII_F6LrdpdWZCw8.roa (raw, json)
Hash identifier: aT972ZW7rhV9UU1G7buFliD/+OevUwpFZjgRL07M7Qo=
Subject key identifier: 9F:56:EE:0B:E3:41:2E:7A:62:20:8F:C5:E8:BA:DD:A5:D5:99:0B:0F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A3D60F90AAA2657532790561D4544357B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/n1buC-NBLnpiII_F6LrdpdWZCw8.roa
Signing time: Mon 28 Aug 2023 18:21:19 +0000
ROA not before: Mon 28 Aug 2023 18:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.225.0/24 maxlen: 24
89.34.224.0/24 maxlen: 24
89.34.224.0/22 maxlen: 22
89.34.226.0/24 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Aug 2023 17:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:60:f9:0a:aa:26:57:53:27:90:56:1d:45:44:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 28 18:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f56ee0be3412e7a62208fc5e8badda5d5990b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:8e:c6:6e:44:9f:29:aa:8f:df:95:bb:6f:
88:ef:61:bd:06:7d:9d:5d:ad:cc:85:f4:9b:0e:61:
6c:22:0f:58:be:c1:a4:42:68:c2:95:ca:15:c2:27:
16:eb:6f:f2:03:78:55:1d:ca:9f:5c:97:87:a6:ff:
ec:3a:ed:d5:db:1f:07:03:a3:e8:6a:bb:7b:2f:bc:
9f:9f:9d:08:df:2d:84:b1:fd:54:7e:d0:06:21:9a:
28:ee:b3:40:7a:17:06:d3:91:5e:bc:1e:b9:80:01:
6b:0b:82:5b:e4:65:d4:d3:b0:15:d0:1f:1f:61:80:
56:22:5c:c3:eb:6e:39:87:d3:a5:db:fc:b1:55:c6:
e2:f6:e1:e2:4e:5a:a4:86:ac:68:f3:38:b6:e5:54:
a7:41:8c:4b:b4:d5:5b:35:d5:60:26:ef:fd:5c:b6:
74:83:47:ea:22:13:e6:8e:9f:52:d6:c3:07:53:5e:
84:3f:0a:c3:5a:d6:09:41:4e:44:39:c3:29:1a:20:
ec:93:d9:e2:c9:35:89:ce:ca:4d:29:47:70:d2:41:
81:04:d0:65:03:9e:55:2e:4d:07:91:fd:6a:0e:38:
0c:55:5e:a7:48:04:37:83:2a:38:b6:9a:d7:07:a1:
ac:af:d0:b7:37:26:4e:9f:46:6a:f2:9e:17:2d:78:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:EE:0B:E3:41:2E:7A:62:20:8F:C5:E8:BA:DD:A5:D5:99:0B:0F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/n1buC-NBLnpiII_F6LrdpdWZCw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.34.27.0/24
89.34.224.0-89.34.228.255
89.34.230.0/23
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
5a:69:91:ed:2e:da:41:94:d8:3a:24:a1:70:a3:e2:9b:a2:5d:
8c:44:24:14:08:ce:64:ff:7d:5c:bb:da:dd:5d:d9:4d:2b:60:
8f:aa:be:1f:ae:d5:cb:fc:a4:02:69:69:22:96:0f:a2:60:6d:
ab:70:e6:85:a6:df:9c:e4:3f:e6:2a:56:c6:7d:84:b0:11:5b:
dc:a3:39:d2:c3:71:01:73:d5:26:26:df:af:1d:53:e1:8a:bc:
f3:d9:9d:bb:d8:c9:ff:be:35:fd:52:0d:ff:0f:b8:fe:7c:73:
f3:59:b1:6f:f1:7c:57:ca:72:30:82:15:ca:74:f5:ab:5d:7b:
1f:e4:ce:b2:13:00:4c:3f:13:b5:39:f1:23:4b:67:50:11:e9:
a0:b4:59:65:50:15:63:5c:38:fd:ab:33:b3:54:7b:c7:4b:57:
ad:3c:bc:ca:61:23:df:28:5e:7b:01:7d:55:ed:ba:7b:3e:11:
d7:75:e8:73:3a:80:06:70:b6:3d:dc:24:a8:ba:eb:61:4b:69:
80:23:ca:71:82:d8:dd:4b:b6:88:1d:1f:f5:f4:39:df:59:82:
5a:d8:91:1b:2a:21:ca:b9:d8:5a:c7:0a:55:55:32:b2:7a:b6:
28:c5:eb:51:1d:ac:65:b8:02:aa:1c:d8:84:21:f7:b3:bf:32:
5d:26:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org