Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rRDIcHm6XsCkF1tIJxCJ0U-to98.roa
File: rRDIcHm6XsCkF1tIJxCJ0U-to98.roa (raw, json)
Hash identifier: jHwmxLlzOF9bUk6NTMREQbMZuxt5LerBGU7gqPSdRAc=
Subject key identifier: AD:10:C8:70:79:BA:5E:C0:A4:17:5B:48:27:10:89:D1:4F:AD:A3:DF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A3CCBBCDB51EA4C7AD4FB7DF500508E68
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rRDIcHm6XsCkF1tIJxCJ0U-to98.roa
Signing time: Mon 28 Aug 2023 15:38:19 +0000
ROA not before: Mon 28 Aug 2023 15:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.225.0/24 maxlen: 24
89.34.224.0/21 maxlen: 21
89.34.224.0/24 maxlen: 24
89.34.224.0/22 maxlen: 22
89.34.226.0/24 maxlen: 24
89.34.228.0/23 maxlen: 23
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:cb:bc:db:51:ea:4c:7a:d4:fb:7d:f5:00:50:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 28 15:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad10c87079ba5ec0a4175b48271089d14fada3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:c5:aa:2a:a3:c0:df:2b:96:76:ca:e9:2a:
d6:50:11:d5:f4:6d:d1:59:42:70:2c:0e:fe:f5:a4:
2e:52:d2:ae:f1:e0:eb:cc:97:ea:a6:1f:1d:af:ff:
30:c2:e1:6b:d8:94:6a:67:ca:9a:05:98:5d:20:e2:
76:a3:66:19:17:de:4c:8c:30:ea:b2:c9:2a:eb:3e:
81:31:13:40:3b:8f:77:d2:5c:e4:7f:e9:51:48:5d:
22:da:9f:c6:c0:36:a0:bb:ca:35:1a:d7:ba:4a:4e:
9e:ae:78:88:82:8c:46:c4:06:f1:bd:2c:59:55:05:
42:4c:a3:f5:0c:e3:ff:96:be:56:8e:e9:e1:2b:7b:
ca:78:c1:74:d7:08:b0:a6:6b:53:2b:65:40:65:72:
7a:ea:ab:9c:4a:b0:ab:bf:49:7a:0a:ce:4c:dd:00:
b9:35:3f:a6:79:a5:e1:b4:25:13:79:fd:83:9c:93:
03:59:ca:c3:3d:55:0e:d7:7a:a9:a2:dd:05:0d:7a:
8f:0c:80:a6:6c:be:b1:30:57:79:8e:06:ed:a5:25:
ae:d4:d6:8b:b5:db:0a:7b:2c:75:5f:b7:77:e3:63:
29:4c:0d:d3:4b:b5:86:71:b9:fa:8f:07:4f:48:69:
32:7a:24:f9:c4:9a:d4:50:3d:1f:60:6d:88:94:2d:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:C8:70:79:BA:5E:C0:A4:17:5B:48:27:10:89:D1:4F:AD:A3:DF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rRDIcHm6XsCkF1tIJxCJ0U-to98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
79:af:16:0a:91:dc:12:b6:69:b8:62:ba:8a:b3:12:3f:ec:bd:
16:60:71:de:7b:aa:2d:1a:4d:a7:fb:5b:ce:4f:91:e6:ea:de:
7b:2e:69:36:08:30:f1:b7:c1:ab:53:70:24:ec:59:f6:b4:d8:
4a:95:7f:43:f9:54:14:fc:51:bd:c4:0f:0d:5c:a4:d9:6b:cb:
5b:2f:b2:c2:ab:d6:16:e8:33:0b:54:94:7c:a9:ca:28:c9:9c:
7c:69:cf:4c:21:7a:5f:36:80:d8:de:8a:27:21:44:ff:4b:bc:
0b:0e:c8:15:64:72:3c:51:6f:ad:57:e4:42:21:37:c0:9e:38:
e0:2e:29:c8:12:7d:86:04:e7:5a:cf:47:a9:83:c9:a9:95:b9:
38:9e:ca:1e:03:f9:94:9f:2b:00:0b:05:7a:9a:31:39:30:1c:
dc:4e:a9:72:ad:57:33:e5:9c:52:6e:7e:9f:fe:12:01:33:bb:
34:a5:f1:a2:ca:73:5f:26:a2:dc:e8:49:54:b0:38:83:93:76:
ce:ea:6d:6d:ef:2a:0b:1b:70:d5:f8:c8:d5:39:23:c4:c5:39:
10:58:e0:b0:90:3f:ef:b8:f0:7d:1f:98:44:37:4c:f8:e6:5e:
63:da:8d:5b:49:ce:07:5f:e3:ac:21:b1:5e:62:c2:4f:ac:93:
f2:f8:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 18:48:21 2023 by rpki-client on console-ams.rpki-client.org