Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/p8ZkLB-nmiw67mDHE_2JtgcFOc4.roa
File: p8ZkLB-nmiw67mDHE_2JtgcFOc4.roa (raw, json)
Hash identifier: MX7ZRVglbbIep8zK24afriqbCmAAYgsQ7gewaPzlypk=
Subject key identifier: A7:C6:64:2C:1F:A7:9A:2C:3A:EE:60:C7:13:FD:89:B6:07:05:39:CE
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01905B6AB7BC22C67EA3099887AA73CED18B
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/p8ZkLB-nmiw67mDHE_2JtgcFOc4.roa
Signing time: Thu 27 Jun 2024 20:37:18 +0000
ROA not before: Thu 27 Jun 2024 20:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jul 2024 23:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5b:6a:b7:bc:22:c6:7e:a3:09:98:87:aa:73:ce:d1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jun 27 20:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7c6642c1fa79a2c3aee60c713fd89b6070539ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:6d:64:56:8d:48:b4:28:d2:10:82:9b:c5:
1d:6f:be:82:94:87:40:95:4d:48:41:01:56:f1:e0:
c7:11:78:6a:d1:79:45:4d:1c:2e:69:c1:79:5d:6d:
2b:f3:ac:8a:4c:42:6a:df:b6:94:b8:d9:f5:db:a2:
b7:05:3a:b0:c6:08:ac:08:27:7b:be:09:3e:2a:41:
13:da:8c:bd:a5:65:04:cb:13:99:fe:bb:d6:18:ad:
09:6e:db:bb:29:a7:1e:3e:cd:cc:ea:f0:a9:79:2b:
5c:86:15:49:24:cd:b7:c2:f7:8d:29:16:59:ce:4c:
18:48:21:c1:73:12:cf:18:e2:c3:47:84:28:68:35:
5e:17:c9:d9:da:f4:15:00:51:a2:0b:da:1b:9a:ed:
8a:f2:e0:c0:82:a4:0c:7c:37:14:80:68:92:75:09:
3b:57:60:25:e4:db:cf:0b:ea:86:05:52:ff:06:60:
0b:ec:cd:5b:f3:4e:1a:d7:a2:9f:45:f3:72:db:69:
6b:8a:59:99:77:09:e6:91:75:59:6e:8d:44:dd:4a:
04:c1:fa:b4:ec:15:80:d8:e0:64:f2:12:03:74:5a:
b7:20:ae:4c:14:6e:87:d1:b2:c6:0d:b3:c1:1f:ae:
6c:4a:76:14:28:56:37:c4:af:ab:46:86:aa:aa:4d:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:64:2C:1F:A7:9A:2C:3A:EE:60:C7:13:FD:89:B6:07:05:39:CE
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/p8ZkLB-nmiw67mDHE_2JtgcFOc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/24
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.238.0/23
185.213.23.0/24
IPv6:
2a11:840:6::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:22:ffff:ffff:ffff:ffff:ffff
2a11:840:24::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:60::/45
Signature Algorithm: sha256WithRSAEncryption
82:95:5e:08:1f:9e:e5:8a:fb:ff:51:cc:74:f7:43:a2:08:2e:
7f:1c:ab:11:23:3b:f4:3a:ec:2e:d0:5e:f1:51:f7:f2:7e:e0:
ec:4f:5a:d7:ca:1f:5f:b1:58:8d:13:a5:82:d7:8a:a9:6f:53:
e9:d3:14:0d:73:e9:76:5f:ab:6f:c8:60:b5:66:ef:64:ef:e8:
86:1c:ae:cc:72:4e:01:12:e3:6e:45:c4:44:a4:02:41:2c:fe:
51:96:1b:97:38:85:6e:3e:ee:2a:ef:ef:34:28:41:c5:b7:f2:
93:22:02:13:6f:2d:a8:63:e1:d6:da:1c:a2:6f:19:49:53:9f:
65:f0:86:4d:26:c1:c2:6b:72:7b:73:1c:0f:cf:b6:52:63:2f:
08:71:b9:3d:72:60:44:3a:70:b3:6d:5b:34:34:56:84:ce:6a:
06:02:5c:89:17:87:81:80:eb:f0:77:19:b8:44:92:ec:13:87:
b1:db:c4:25:be:12:82:46:c7:13:4f:b2:e4:bf:4e:c0:28:ef:
fb:7f:0e:59:67:1e:fd:8e:87:21:5e:1d:58:4c:47:0f:b4:e4:
93:ea:f2:2e:d7:28:64:00:74:68:09:38:86:7b:af:de:9b:72:
82:1a:e1:a6:2d:1e:5f:90:a0:8f:ca:54:64:f6:b3:7c:cd:2d:
24:7d:71:b0
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 9 00:55:43 2024 by rpki-client on console-fra.rpki-client.org