Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tHyCn71TQCJ0DM4h_oyvuHAY3s0.roa
File: tHyCn71TQCJ0DM4h_oyvuHAY3s0.roa (raw, json)
Hash identifier: qRJLL9XNRLQGZt1UhnZU8bV+lncGm/xRu5HQoJchEZc=
Subject key identifier: B4:7C:82:9F:BD:53:40:22:74:0C:CE:21:FE:8C:AF:B8:70:18:DE:CD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B3BF3AAE5E70513B19D33BE621F38A753
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tHyCn71TQCJ0DM4h_oyvuHAY3s0.roa
Signing time: Tue 17 Oct 2023 04:45:06 +0000
ROA not before: Tue 17 Oct 2023 04:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62390
IP address blocks: 89.33.13.0/24 maxlen: 24
89.47.232.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
89.37.116.0/24 maxlen: 24
89.37.117.0/24 maxlen: 24
89.45.12.0/24 maxlen: 24
89.45.12.0/23 maxlen: 23
89.45.13.0/24 maxlen: 24
188.240.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 05:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3b:f3:aa:e5:e7:05:13:b1:9d:33:be:62:1f:38:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 17 04:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b47c829fbd534022740cce21fe8cafb87018decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:d2:04:1f:c0:66:65:fb:3b:c6:4d:6e:20:
69:dd:f4:85:1c:d3:54:9a:84:0d:31:ad:00:d8:0f:
6d:af:7b:ce:3f:70:26:4f:c1:9c:52:fa:fd:7e:20:
27:c1:43:05:25:16:33:a8:f8:9f:c1:b2:b9:f3:fa:
a7:19:bb:c0:8c:93:df:44:ec:70:44:94:17:09:6d:
66:2e:14:70:71:0f:66:ae:0a:3e:a5:00:5b:0b:67:
78:b3:cd:47:94:f3:44:80:6b:24:41:5c:3e:a8:b4:
21:b0:da:4d:75:54:65:c6:3d:7a:83:f7:ce:98:a9:
3f:01:e6:8e:75:9f:aa:48:c8:71:e7:2e:e2:4d:0c:
e3:e7:d8:09:3c:c5:e2:22:3b:0e:0e:84:1c:92:61:
64:5c:a3:84:f2:e6:a4:15:3a:8d:d7:b9:2e:d6:e5:
fb:fd:da:4d:08:14:5e:74:33:71:de:a3:58:d0:fb:
d6:9b:a5:12:da:c9:59:a5:13:27:36:a1:e8:d3:41:
6c:af:f8:95:68:6b:06:9b:96:09:c0:16:43:18:a9:
ee:8d:8e:1f:15:76:fb:c8:17:c9:85:5a:ff:d3:40:
18:cc:a0:79:6b:09:83:b6:91:31:c3:87:1b:27:da:
37:cb:f4:f2:3f:a8:15:b2:c5:10:84:e7:e7:55:7c:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:82:9F:BD:53:40:22:74:0C:CE:21:FE:8C:AF:B8:70:18:DE:CD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tHyCn71TQCJ0DM4h_oyvuHAY3s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.37.116.0/23
89.45.12.0/23
89.47.232.0/24
188.240.210.0/24
188.240.221.0/24
Signature Algorithm: sha256WithRSAEncryption
64:34:01:9b:c0:59:9d:b3:9c:ea:d1:63:6d:73:d4:22:43:9f:
41:d5:54:47:7e:60:e0:23:19:86:53:99:eb:79:17:d5:23:f2:
29:a3:a6:e3:30:dd:a5:d4:d8:8f:9b:ff:a4:37:82:dd:ed:d2:
09:c5:3c:c7:c1:a6:36:61:c7:db:c8:23:28:1a:81:ea:ce:75:
ff:27:07:af:1a:44:5e:1e:61:3c:50:50:3b:ac:d6:45:48:53:
cb:5e:7e:b2:ff:fa:cd:b7:1c:cf:c1:7b:0a:c6:45:8f:a7:9e:
b0:5e:ae:b1:7a:f5:b5:f5:77:94:54:3a:48:d8:01:d4:90:66:
ad:af:11:fe:e9:e7:ab:75:8f:ec:30:92:0b:8e:67:71:aa:a7:
c7:65:04:1c:fe:f9:d1:bb:d6:a3:cd:57:0c:dc:f4:6b:5c:50:
ca:e6:12:da:79:de:aa:3b:fd:aa:56:5a:e8:63:d2:47:07:ad:
2b:b6:ba:6b:9f:41:88:df:83:4e:19:0a:ca:3d:bd:c3:01:7e:
ba:a6:bb:3d:2c:79:37:4e:33:77:7d:72:83:a4:68:57:d9:4d:
10:bc:2f:7a:77:5c:c8:cf:dc:dc:40:21:d9:97:93:c0:df:f6:
d4:15:59:a9:31:f3:a6:88:e8:9a:47:41:95:ae:3a:84:56:57:
d1:ba:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org