Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/m73dmCSrzbC2Z4uxLpKj3o2iXIk.roa
File: m73dmCSrzbC2Z4uxLpKj3o2iXIk.roa (raw, json)
Hash identifier: UBCAt6QuTvAEOs8hjv/K68cs/UAO8ohewkI89WpXJQU=
Subject key identifier: 9B:BD:DD:98:24:AB:CD:B0:B6:67:8B:B1:2E:92:A3:DE:8D:A2:5C:89
Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial: 018CC3B6CFDB56980CFFA9628F910F226EA5
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/m73dmCSrzbC2Z4uxLpKj3o2iXIk.roa
Signing time: Mon 01 Jan 2024 06:29:47 +0000
ROA not before: Mon 01 Jan 2024 06:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39923
IP address blocks: 185.58.96.0/22 maxlen: 22
185.35.164.0/22 maxlen: 22
195.189.202.0/23 maxlen: 23
194.146.23.0/24 maxlen: 24
185.111.204.0/22 maxlen: 22
185.111.204.0/24 maxlen: 24
185.111.205.0/24 maxlen: 24
185.111.206.0/24 maxlen: 24
194.145.127.0/24 maxlen: 24
109.68.160.0/21 maxlen: 21
109.68.164.0/24 maxlen: 24
91.238.219.0/24 maxlen: 24
2a02:2a08::/32 maxlen: 32
2a04:6480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 22 Jan 2024 08:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:cf:db:56:98:0c:ff:a9:62:8f:91:0f:22:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Validity
Not Before: Jan 1 06:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bbddd9824abcdb0b6678bb12e92a3de8da25c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:48:9f:4a:fe:32:40:a1:3c:d3:37:3f:98:
a5:7d:d3:0f:f2:e4:cc:28:ce:23:65:f1:89:fe:89:
cc:c6:3a:97:f5:b8:25:c7:ce:a3:d5:9e:fd:90:1c:
91:97:c9:bc:42:af:92:42:22:cd:8b:7e:8b:c2:2b:
96:d3:cc:eb:e7:dc:db:11:92:6a:5a:2c:89:94:37:
c4:48:cb:f6:77:45:38:de:88:f8:7e:b2:6a:51:5c:
40:10:f3:49:16:39:67:18:fe:75:7d:10:b2:06:c1:
e5:e0:b7:eb:97:9c:9d:f5:f5:dc:a3:1d:04:c4:48:
ce:df:8b:61:4c:f7:a5:e5:8d:9f:3f:79:eb:97:94:
aa:96:7c:04:ad:39:71:b3:0a:ab:15:21:e2:f8:69:
3c:4f:2e:62:72:78:fc:ba:3a:ad:2d:25:71:7b:74:
8b:5f:98:48:00:58:4c:62:f1:b2:a2:bf:50:67:7e:
29:15:d2:32:a7:db:a0:a6:00:97:d5:bd:eb:5f:67:
aa:af:1c:a0:ef:5e:d7:f4:e6:d4:4d:d5:43:79:0d:
32:cf:cd:f6:90:18:5e:6f:ec:2e:8a:76:16:00:ff:
57:21:21:33:6a:5b:0f:d7:65:62:aa:bf:b9:a0:a7:
7b:7f:09:51:aa:52:82:10:e5:f5:36:28:c3:3d:5a:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BD:DD:98:24:AB:CD:B0:B6:67:8B:B1:2E:92:A3:DE:8D:A2:5C:89
X509v3 Authority Key Identifier:
keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/m73dmCSrzbC2Z4uxLpKj3o2iXIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.219.0/24
109.68.160.0/21
185.35.164.0/22
185.58.96.0/22
185.111.204.0/22
194.145.127.0/24
194.146.23.0/24
195.189.202.0/23
IPv6:
2a02:2a08::/32
2a04:6480::/29
Signature Algorithm: sha256WithRSAEncryption
03:bb:3d:c2:95:d2:df:63:84:a8:c4:d6:12:54:ac:2a:85:0d:
f9:23:56:ce:05:5c:6c:0d:64:0e:1b:a8:98:dc:65:b8:b2:ce:
26:b2:51:72:0a:45:7f:00:82:f8:01:c4:fb:f0:85:76:31:f9:
98:9f:ca:da:e5:69:53:8b:5b:a1:6b:90:4a:8d:32:36:cf:32:
b9:81:f8:5f:63:4f:ce:e2:78:ea:3f:64:fd:f6:4f:a0:fd:1e:
65:b0:ed:e9:78:a5:38:bc:36:23:f2:93:be:60:ce:12:ab:c2:
71:f9:8d:b6:c6:36:31:7e:28:60:ae:db:be:57:ec:5e:73:97:
26:5c:5c:d3:bf:c2:9b:ed:c3:02:5e:14:f0:8c:30:ef:1c:af:
4d:4c:e2:9d:da:98:d1:d9:b7:b4:38:15:ce:94:1e:b9:1d:6c:
25:02:7c:f5:ad:32:12:69:7d:2e:ec:fc:e1:63:38:6a:72:f6:
b3:3b:47:39:9d:93:18:16:e2:e7:6f:fd:38:e3:d8:fb:e1:cb:
d9:c5:4a:76:ce:92:ca:2d:c6:b8:92:b0:28:e3:ce:a5:fd:b9:
75:47:ef:c9:c7:29:1c:62:ae:15:ea:0f:8e:90:d4:b4:2c:cd:
1f:83:72:0b:6d:f6:bf:73:e8:8f:8c:ea:2e:ec:7f:a3:bc:e0:
55:92:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 12:18:58 2024 by rpki-client on console-fra.rpki-client.org