Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w38lHTis60gsFBCgF-py-tOtr-g.roa
File: w38lHTis60gsFBCgF-py-tOtr-g.roa (raw, json)
Hash identifier: C0lF6LMiW01IQNr0uw1b5phqQOd7W5xeIwAW2IDT7BU=
Subject key identifier: C3:7F:25:1D:38:AC:EB:48:2C:14:10:A0:17:EA:72:FA:D3:AD:AF:E8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018ACC31E787BFE73DFFBF14FEFCB7160E32
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w38lHTis60gsFBCgF-py-tOtr-g.roa
Signing time: Mon 25 Sep 2023 11:55:37 +0000
ROA not before: Mon 25 Sep 2023 11:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.177.0/24 maxlen: 24
93.113.176.0/24 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.178.0/24 maxlen: 24
93.113.179.0/24 maxlen: 24
93.113.180.0/24 maxlen: 24
93.113.182.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.141.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
89.34.228.0/24 maxlen: 24
89.34.230.0/23 maxlen: 23
89.34.230.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Sep 2023 21:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:31:e7:87:bf:e7:3d:ff:bf:14:fe:fc:b7:16:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 25 11:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c37f251d38aceb482c1410a017ea72fad3adafe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:9c:7d:70:50:d6:b2:39:76:b1:1d:af:91:
31:91:f9:8e:2d:84:a3:1e:87:42:5b:18:a1:1b:ea:
b7:64:b7:25:59:04:05:75:dd:5d:fc:ae:be:4d:72:
59:aa:6a:0e:40:83:40:c6:ca:6c:be:90:cd:0d:1d:
89:c6:e1:5f:f0:76:a7:55:1a:ce:a5:0e:dc:ae:93:
60:71:e7:0e:2e:93:28:8c:d3:ed:a3:71:e9:bc:d7:
ed:3d:0c:9e:62:02:d1:db:b4:24:cf:f9:f9:f3:68:
40:bf:83:6b:c8:f8:a6:0f:02:c7:7c:b2:74:ed:e6:
4d:81:0e:56:02:68:b3:88:f2:cc:3e:00:d6:ba:76:
b0:77:69:e1:78:0d:83:50:77:ae:96:1b:cb:75:46:
d9:1a:e4:0e:01:c9:49:c7:e0:cc:62:88:0d:03:7d:
ec:d8:23:3d:9b:82:ec:ce:35:06:34:33:c1:4d:b9:
11:f2:13:36:ed:b9:99:b2:ce:ff:de:4e:88:3b:07:
b7:9d:fa:04:a3:b7:86:df:48:16:17:20:8d:a6:f9:
3e:83:c1:0b:29:7d:ac:ac:8e:d9:d2:37:cf:2a:f8:
83:fb:56:33:89:88:fb:26:cd:2e:50:76:e6:3d:4c:
ce:80:50:fc:74:65:0f:62:5d:64:38:7b:87:f8:4a:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:25:1D:38:AC:EB:48:2C:14:10:A0:17:EA:72:FA:D3:AD:AF:E8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w38lHTis60gsFBCgF-py-tOtr-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.34.228.0/24
89.34.230.0/23
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.43.140.0/22
89.45.164.0/24
89.46.3.0/24
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
5d:4d:01:4c:ce:41:4e:e7:12:35:f5:55:23:42:98:61:2c:ca:
9c:c3:aa:f7:b0:b6:84:58:30:b6:d6:6b:85:07:2b:17:9d:c3:
20:8f:0e:88:88:19:1c:87:57:20:cb:6a:06:43:a5:38:09:32:
ed:c4:3f:6b:1e:14:a9:eb:97:73:ca:92:25:54:87:39:b0:12:
85:fc:88:25:70:da:d5:e3:e0:bf:4d:6c:b3:56:b7:07:9a:53:
fc:80:f6:5c:83:4f:73:7b:cf:69:82:ca:a3:3f:67:90:df:54:
99:99:1d:88:ab:cb:4d:e3:2c:b6:2f:c5:0b:6f:c6:1c:54:c8:
3f:a6:73:e0:cf:15:64:5c:f3:c5:33:01:90:67:d0:07:eb:59:
97:c3:c6:81:f6:2a:d1:e1:eb:9c:14:00:1a:d0:60:04:76:f5:
bf:c4:f1:49:8e:ff:1c:b3:04:65:91:4a:bb:3a:0a:ce:0b:5f:
e1:6b:3d:3d:c3:8e:a2:1f:ac:c0:8d:71:14:68:ba:d0:63:bc:
56:eb:04:d0:87:42:e9:69:b7:8c:4d:1b:58:ea:db:b8:4a:4f:
05:f0:60:58:6c:ba:1d:94:65:6d:f9:5e:65:89:76:b9:3b:ca:
a0:d3:ca:61:7b:4a:51:bf:64:90:44:54:f2:db:30:19:75:2d:
b4:26:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org