Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zVYYMkqOq_3uA25OjVuus3EJZog.roa
File: zVYYMkqOq_3uA25OjVuus3EJZog.roa (raw, json)
Hash identifier: TBUCMmLV5hCx3drRpt2l9W2V5FXqUjEH4BVBGQE8cWQ=
Subject key identifier: CD:56:18:32:4A:8E:AB:FD:EE:03:6E:4E:8D:5B:AE:B3:71:09:66:88
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C0142B25411E367925CDD21AA542AF7C2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zVYYMkqOq_3uA25OjVuus3EJZog.roa
Signing time: Fri 24 Nov 2023 12:16:37 +0000
ROA not before: Fri 24 Nov 2023 12:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
89.47.121.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Nov 2023 17:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:42:b2:54:11:e3:67:92:5c:dd:21:aa:54:2a:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 24 12:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd5618324a8eabfdee036e4e8d5baeb371096688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:fa:ae:12:f4:6b:c1:45:92:ad:a5:3e:6b:
f0:63:a6:27:2c:e4:24:5e:b2:5c:3c:40:cb:77:30:
f9:07:2b:3f:be:b0:fe:a5:d7:cf:43:f9:03:d6:8e:
1d:d4:05:8f:c4:44:db:01:bd:c8:7c:c6:9e:55:88:
4f:4b:11:ed:6d:3d:47:87:51:a8:8f:ee:11:77:19:
3f:ed:b6:08:50:77:f9:66:92:68:83:bf:dd:a1:35:
4b:14:e0:47:1a:cb:06:a3:13:31:ca:25:cb:c1:69:
e6:9c:2e:88:d6:ca:2b:01:ea:c7:d3:01:c6:3e:c1:
aa:e9:b1:36:17:23:aa:08:a9:1d:41:e3:30:7d:e4:
fb:98:7c:db:67:10:72:2c:fd:f0:37:39:af:bd:37:
b1:b0:c7:51:ab:68:ce:87:c6:37:dd:c6:57:8d:df:
47:a2:c0:9d:1d:90:23:04:24:8f:3e:41:9b:92:e5:
e1:7f:8a:73:38:68:6d:7c:5c:a8:59:a0:dd:aa:e2:
6c:41:ba:a6:da:bc:b3:9d:7a:f3:cb:b3:35:c5:09:
aa:0c:c8:2f:b3:9d:6a:85:02:d6:a4:12:aa:35:ac:
7e:a7:31:a4:40:92:10:13:ef:1f:1b:e2:0b:b0:6d:
bf:11:4d:35:07:c0:4b:b5:4d:ba:52:2d:a8:e8:19:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:18:32:4A:8E:AB:FD:EE:03:6E:4E:8D:5B:AE:B3:71:09:66:88
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zVYYMkqOq_3uA25OjVuus3EJZog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0/20
89.47.114.0/23
89.47.118.0-89.47.122.255
89.47.125.0-89.47.127.255
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
20:23:3e:c6:e2:6b:7a:f7:6a:80:9b:c8:af:b4:54:4a:cd:d7:
ce:c3:e0:6e:c1:83:18:a5:64:04:41:89:19:e5:29:65:a5:41:
23:de:dd:9d:f9:e3:30:e0:e1:84:af:09:1d:0f:43:42:9a:f2:
a6:d6:4f:17:3c:92:e4:61:62:a1:73:b1:11:95:92:13:8f:f3:
f6:a5:a2:ea:2e:77:b8:28:06:6e:ae:62:dd:fb:9d:8f:1a:98:
24:b0:12:53:4a:6b:1e:a7:d2:5e:80:10:cd:37:9d:e8:7c:b6:
df:fb:5e:8a:4c:59:8b:b6:7e:e9:fb:7f:ec:42:e2:5c:51:25:
c7:58:8e:b1:64:a5:ba:13:c8:c3:30:7d:c8:d9:c9:7e:31:2a:
dc:61:91:8a:00:2c:bd:65:67:f1:dd:21:11:47:a4:95:1f:27:
bf:ec:4b:56:ec:e1:95:32:2e:f3:71:59:4f:ae:86:2f:8c:49:
b3:d3:ab:48:af:40:8b:b9:3b:a3:59:87:85:fb:c1:77:8b:48:
4f:9c:c5:33:b3:19:68:a7:bf:05:17:b6:52:ad:83:70:7e:cc:
40:7f:71:3d:64:bd:e6:22:a9:b8:88:68:75:df:88:70:5e:de:
bc:74:59:ef:7d:dd:3f:b7:25:a2:3e:28:34:e9:09:b1:e8:24:
a8:8c:03:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org