Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vVbfvo_y-tM6IZd5OVOe8WBBo3c.roa
File: vVbfvo_y-tM6IZd5OVOe8WBBo3c.roa (raw, json)
Hash identifier: rFpvhXsMLmgOCfjaIiYsuCpV+yGD7Nvu0N0Z9oG/tJI=
Subject key identifier: BD:56:DF:BE:8F:F2:FA:D3:3A:21:97:79:39:53:9E:F1:60:41:A3:77
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A3B3ABBBF5FBE5F0FE5C7027393EA6261
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vVbfvo_y-tM6IZd5OVOe8WBBo3c.roa
Signing time: Mon 28 Aug 2023 08:20:19 +0000
ROA not before: Mon 28 Aug 2023 08:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.13.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Aug 2023 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:3a:bb:bf:5f:be:5f:0f:e5:c7:02:73:93:ea:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 28 08:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd56dfbe8ff2fad33a21977939539ef16041a377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:d7:41:59:6b:19:d9:a5:70:17:a0:69:59:
29:0f:e3:df:09:f7:3f:dd:83:bb:62:7c:cf:c6:04:
61:2a:34:53:b8:47:99:8a:a9:a2:ad:7c:4f:4b:11:
86:80:87:2d:40:a2:77:7b:5c:15:ba:0d:d4:d4:77:
fd:50:f8:2a:d4:14:b3:4c:8d:4b:35:61:9c:a6:a7:
64:a4:1f:65:b1:f1:a9:2d:2d:d5:3e:89:41:37:ef:
ff:f1:c3:1f:26:03:de:ce:5b:d9:3c:75:eb:3f:a0:
30:8d:dc:56:2b:49:30:ee:64:c2:ff:0f:d4:f1:89:
a1:0f:1e:51:0f:b2:fb:91:fc:1c:db:72:a1:79:0f:
7f:13:fd:98:31:fb:a3:c0:39:1d:67:b3:ca:d3:62:
e3:f9:47:5b:cd:5d:4c:c8:17:6b:f3:9c:4d:20:15:
83:65:7c:f0:8b:e8:05:e8:35:e3:07:6a:50:29:96:
35:18:5f:e1:14:2f:19:55:2f:e5:6c:0a:80:11:c2:
48:98:0e:17:26:cc:4d:21:c7:d9:2d:1d:5d:46:4b:
3f:60:51:c7:5a:21:fe:5d:3b:70:3d:af:8d:31:7e:
6b:74:0c:de:d4:aa:2d:54:7b:e9:63:22:a0:ed:1d:
2d:53:25:8d:9d:cd:e0:8c:ee:5e:b8:32:02:ad:de:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:56:DF:BE:8F:F2:FA:D3:3A:21:97:79:39:53:9E:F1:60:41:A3:77
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vVbfvo_y-tM6IZd5OVOe8WBBo3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
59:f2:35:d3:b9:6f:3a:5c:6d:42:9f:ad:dc:8d:81:8b:8b:f0:
ca:12:ab:77:08:7b:3d:ec:37:03:02:ee:dc:61:92:a8:9d:9d:
cf:f8:ea:a2:5c:94:16:56:b9:ac:74:d3:d3:0e:d9:ac:b8:7a:
fc:28:c7:b3:47:2c:e8:e5:9a:12:53:1a:1b:6a:93:87:b4:fe:
7f:1c:7e:3a:cb:f6:fc:ba:b0:59:9a:6a:b4:bc:61:36:b3:dd:
a9:c9:76:19:71:50:24:20:82:d1:2f:cd:c2:87:b9:b1:1b:df:
bc:d4:7e:5b:c6:b0:75:d3:25:07:52:d1:8b:21:b5:68:de:aa:
b6:e9:9b:21:15:50:8d:2f:d6:4d:0d:9b:32:19:85:db:78:f4:
98:dd:e7:dc:d9:cd:18:aa:54:a1:4e:e0:fe:de:6c:e1:5e:d6:
bb:bb:e6:4b:65:aa:f2:74:e0:d8:65:e5:70:df:d2:41:97:2b:
c7:1e:a1:90:75:1c:4a:31:57:43:ba:86:8d:95:c2:ac:5a:b5:
77:70:49:7d:19:12:69:72:61:44:3f:8e:b6:1a:3d:8b:c3:d3:
92:27:47:aa:c2:9b:51:c7:e2:18:e7:d8:cf:39:13:9d:99:d6:
cc:0f:5f:ee:9c:7a:81:26:54:d9:f5:8c:47:37:a0:50:15:27:
83:5a:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org