Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wW0Z7pL6RkmxRriGKX3Po7mi-Mc.roa
File: wW0Z7pL6RkmxRriGKX3Po7mi-Mc.roa (raw, json)
Hash identifier: v6R18ic8x/zzw4+F2mQ7dyx0o3Qe+dsp9wTxRzFuTSE=
Subject key identifier: C1:6D:19:EE:92:FA:46:49:B1:46:B8:86:29:7D:CF:A3:B9:A2:F8:C7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D7DB6EA0891DA1D391308CFD832C1282E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wW0Z7pL6RkmxRriGKX3Po7mi-Mc.roa
Signing time: Tue 06 Feb 2024 09:19:15 +0000
ROA not before: Tue 06 Feb 2024 09:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 86.106.81.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
188.241.3.0/24 maxlen: 24
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 Feb 2024 10:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:b6:ea:08:91:da:1d:39:13:08:cf:d8:32:c1:28:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 6 09:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c16d19ee92fa4649b146b886297dcfa3b9a2f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:0c:70:83:bc:3c:7c:9b:42:04:cc:72:59:
dc:c8:ac:43:73:ec:c7:74:1e:75:b1:74:39:c5:22:
3c:24:d1:36:f1:02:93:39:2e:6f:d8:6d:b0:03:2a:
9f:22:53:9a:d4:ae:b0:36:8b:d4:4c:df:2a:f3:0b:
19:fc:f2:06:0e:ac:f6:88:00:2f:b6:c8:a7:0b:16:
df:2d:3f:58:b8:89:50:8e:65:6b:8c:bf:29:04:80:
92:1a:da:c3:c5:19:c2:64:cc:cd:87:f9:a4:f0:3f:
a1:fc:21:c1:fd:c4:26:bc:60:44:97:51:5c:07:47:
49:75:4e:2a:50:a8:7e:33:e5:6a:b1:bd:40:f3:18:
cd:9b:4b:3b:4b:85:ba:b8:1c:69:53:d8:c3:97:d9:
40:fe:44:4d:25:f4:f8:48:14:fb:10:c3:56:4c:66:
ab:5c:f4:86:46:18:ce:dc:39:c2:a4:d6:84:db:1e:
d4:b1:ef:8c:21:3b:c1:bf:a8:41:81:af:ab:63:52:
ff:ff:a0:5b:a8:d9:35:bb:cf:7a:f2:c7:2a:52:59:
24:62:0c:7c:bd:1f:fd:96:5e:e6:17:59:35:d5:05:
66:c5:f6:6e:e3:f9:8a:94:36:43:83:24:89:50:ed:
78:bd:3a:be:01:29:a6:4d:6c:cd:0d:82:01:12:ee:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:19:EE:92:FA:46:49:B1:46:B8:86:29:7D:CF:A3:B9:A2:F8:C7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wW0Z7pL6RkmxRriGKX3Po7mi-Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.34.27.0/24
89.35.158.0/24
89.38.228.0/23
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0-89.47.98.255
89.47.101.0-89.47.111.255
89.47.120.0/24
89.47.122.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
188.241.3.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
37:5f:17:3d:72:a4:50:72:d4:03:dd:5e:2a:b4:fc:a5:2d:f5:
8c:47:4b:ad:54:a6:d6:8c:ba:d9:23:ea:33:9c:6d:89:8d:43:
a1:b7:21:c9:7e:76:62:8f:58:61:ef:d0:bd:54:46:03:50:fd:
57:47:e1:36:e7:ba:dc:b7:fc:2f:bd:25:c2:74:62:7e:bd:bd:
a1:f7:f9:da:35:75:10:78:5f:8a:34:9d:c0:ca:70:bb:3f:4d:
48:fa:b1:a2:fb:01:bf:03:ae:17:71:e1:21:e7:de:8e:79:bb:
3f:f6:c9:9c:60:52:f2:70:44:00:e8:2b:2e:9f:5c:8b:c8:11:
a4:00:24:e2:50:79:1c:39:a6:6a:e2:3a:14:3a:d0:93:6f:d3:
96:f7:53:c1:c8:09:41:54:1f:31:e8:32:69:1b:bf:79:cf:85:
14:a2:9f:67:4b:0f:0a:c2:04:95:36:6f:6d:bd:07:90:49:1f:
3b:c4:ca:9e:3a:c9:54:a6:ef:4d:9f:51:ef:9f:b5:8d:72:f2:
63:75:c5:d7:64:7c:b3:8a:cc:f0:02:76:be:d0:f8:59:9f:f3:
b1:a0:55:78:b7:a1:54:8f:fd:1e:7d:2b:8b:0e:e5:37:39:a6:
81:a8:db:6f:06:a0:74:33:ac:73:40:e7:69:23:06:ff:44:19:
87:95:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org