Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rVzHwt984v410fOCXrpfnSOfWJw.roa
File: rVzHwt984v410fOCXrpfnSOfWJw.roa (raw, json)
Hash identifier: JOJzbEyAtkdktDw6KkqsqKTI/VRQAlZiHxjpOB9cIx4=
Subject key identifier: AD:5C:C7:C2:DF:7C:E2:FE:35:D1:F3:82:5E:BA:5F:9D:23:9F:58:9C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190F406CCCEC0514FE3AA1062DA84D0FAF0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rVzHwt984v410fOCXrpfnSOfWJw.roa
Signing time: Sat 27 Jul 2024 11:50:04 +0000
ROA not before: Sat 27 Jul 2024 11:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 86.106.81.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
188.241.3.0/24 maxlen: 24
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 14 Sep 2024 21:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:06:cc:ce:c0:51:4f:e3:aa:10:62:da:84:d0:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 27 11:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5cc7c2df7ce2fe35d1f3825eba5f9d239f589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:f1:0d:9d:19:d3:98:15:ab:5e:e9:2f:d9:
64:c1:d1:e8:f4:9f:eb:47:3c:0b:3a:eb:86:5a:f3:
a8:45:61:66:d1:de:a2:c9:9a:7a:8b:dc:f2:a3:68:
24:7d:f2:32:41:94:fa:90:63:a8:2d:fa:03:ba:e2:
de:52:df:f5:aa:f6:84:cf:af:2a:0c:3b:ce:2c:c1:
f2:66:51:55:56:ab:11:bf:86:02:36:27:4b:1d:7c:
5d:d0:20:cb:81:4d:f7:c3:da:91:bf:b5:97:3f:6c:
c9:02:40:2e:4e:e3:38:12:59:ac:88:f4:72:ca:2e:
79:85:f0:fd:c3:29:89:eb:98:84:8d:f5:47:d1:32:
ca:b1:36:1b:6c:39:70:07:7e:07:8f:f7:7d:bd:f8:
d5:8f:a2:ee:cd:52:ec:3c:9c:99:e2:2f:3e:9f:16:
e7:d0:f5:07:0e:07:7d:55:a2:ad:05:23:32:c0:70:
bf:98:94:12:2b:1e:25:07:12:a0:90:5b:68:89:d0:
a1:fc:5b:1f:2c:57:48:f8:16:7e:9f:8b:5c:e4:66:
72:06:ab:38:93:fd:d4:7a:89:cb:73:ab:a3:1b:73:
45:0e:23:d9:e2:eb:c1:ad:ed:62:74:ff:a7:4f:85:
e5:82:9c:92:9b:f5:9e:a1:d8:74:90:ad:0f:28:f6:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5C:C7:C2:DF:7C:E2:FE:35:D1:F3:82:5E:BA:5F:9D:23:9F:58:9C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rVzHwt984v410fOCXrpfnSOfWJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.34.27.0/24
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0-89.47.98.255
89.47.101.0-89.47.111.255
89.47.120.0/24
89.47.122.0/24
93.113.204.0/24
93.114.194.0/24
188.241.3.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
38:e1:fe:df:66:e9:d2:9d:0c:2d:05:7b:f5:1e:b1:90:fc:c6:
66:1d:32:56:a1:30:62:60:53:2b:f6:40:a1:dd:b9:32:74:20:
0b:58:3a:e9:03:4f:2d:e0:4b:f1:b9:27:e6:21:fd:f5:e8:05:
a8:c4:54:1c:2d:59:81:0f:74:25:59:69:58:6b:e6:f2:8e:89:
60:a4:29:3f:f5:80:d0:39:d7:93:17:92:05:a8:75:95:83:ee:
de:e0:e0:30:e6:34:4b:cd:d0:34:54:02:c8:b4:3d:99:59:8a:
d4:02:75:25:00:be:32:66:a2:af:f8:a2:05:f1:5b:4f:14:ad:
e1:05:bb:55:23:b6:15:83:0c:00:60:3e:70:ed:0e:c1:53:0a:
75:0f:01:bc:82:e7:43:ba:8e:2c:4f:9d:9f:86:12:65:fc:44:
d9:c5:66:96:9b:5e:46:8d:35:23:fa:cf:dd:a3:54:d3:5a:eb:
6e:1f:f2:05:60:6b:ca:83:97:ab:3c:ef:a8:5a:6f:5c:77:b9:
44:6a:69:6f:57:0b:d9:89:55:8a:c0:09:82:25:5e:f4:ea:a6:
c1:7f:8e:cc:0a:31:83:37:54:db:71:0a:f8:44:86:c6:97:cc:
b3:34:06:72:86:09:4c:46:ce:d8:15:ba:fc:6f:01:e7:6a:64:
12:a2:b0:53
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 14 23:59:13 2024 by rpki-client on console-ams.rpki-client.org