Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iRt4Sz_pK8Q29AHWhxXCY_eg1TU.roa
File: iRt4Sz_pK8Q29AHWhxXCY_eg1TU.roa (raw, json)
Hash identifier: MKdwETFEa1SXmoCTUk0J9AcyMo4w6X5tpiF9z4Ym8GE=
Subject key identifier: 89:1B:78:4B:3F:E9:2B:C4:36:F4:01:D6:87:15:C2:63:F7:A0:D5:35
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0186412152018831DDC7CD1C240229C91027
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iRt4Sz_pK8Q29AHWhxXCY_eg1TU.roa
Signing time: Sat 11 Feb 2023 15:39:08 +0000
ROA not before: Sat 11 Feb 2023 15:39:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31102
IP address blocks: 89.44.108.0/24 maxlen: 24
86.107.52.0/24 maxlen: 24
188.241.134.0/23 maxlen: 23
89.42.9.0/24 maxlen: 24
188.240.202.0/23 maxlen: 23
89.47.255.0/24 maxlen: 24
92.114.39.0/24 maxlen: 24
92.114.52.0/24 maxlen: 24
188.215.70.0/23 maxlen: 23
86.107.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Feb 2023 15:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:21:52:01:88:31:dd:c7:cd:1c:24:02:29:c9:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Feb 11 15:39:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=891b784b3fe92bc436f401d68715c263f7a0d535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:3f:ba:a3:9b:9f:03:6c:74:ce:d7:7f:a5:
c9:14:72:ad:d8:d9:81:be:1e:17:46:de:d5:4d:d6:
f3:e4:e8:f1:20:a3:70:2c:81:0c:19:b8:8c:db:31:
6c:e1:a3:f9:83:c3:44:52:97:f9:4e:5e:f6:56:76:
29:ae:a1:ea:d3:85:51:98:fb:33:7c:e6:9f:fb:76:
01:88:0b:9a:30:1e:15:be:36:87:2b:5b:12:ae:8f:
66:b9:30:fd:e7:3c:e5:5c:dd:fa:d6:7f:99:51:b7:
9e:e2:b4:29:17:8e:dc:69:28:92:1f:3b:58:15:c9:
13:66:c7:9a:c8:d6:51:58:e4:8f:43:c2:08:92:88:
8f:f1:32:50:f8:3a:df:b6:a4:f5:00:fb:d2:18:3e:
00:e3:3d:2a:5c:6c:f2:b6:93:47:55:be:c5:89:0f:
25:3f:28:aa:35:3d:9b:62:b8:18:11:a6:3d:1d:4b:
fd:4b:ba:e3:a7:ba:54:37:74:a9:05:ef:f7:d4:56:
8e:cd:13:f6:20:f3:6b:83:a0:19:7e:af:e0:db:fc:
74:5e:42:b8:ce:a2:c1:a6:65:a6:a2:5a:1c:b6:f2:
19:74:c5:c4:a9:91:a7:25:5b:6c:03:4e:32:17:d3:
8d:fb:9f:2a:f3:da:84:c3:24:52:40:fb:1c:64:71:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:78:4B:3F:E9:2B:C4:36:F4:01:D6:87:15:C2:63:F7:A0:D5:35
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iRt4Sz_pK8Q29AHWhxXCY_eg1TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.20.0/24
86.107.52.0/24
89.42.9.0/24
89.44.108.0/24
89.47.255.0/24
92.114.39.0/24
92.114.52.0/24
188.215.70.0/23
188.240.202.0/23
188.241.134.0/23
Signature Algorithm: sha256WithRSAEncryption
79:40:5d:5b:6e:27:f7:4e:84:a0:20:ce:8d:ea:47:19:c4:f2:
8f:aa:4b:cf:16:65:9d:5d:f7:68:85:44:a1:86:db:0d:10:be:
47:db:65:67:d2:14:d3:69:37:45:7c:5c:ae:f1:ab:88:a2:18:
df:f5:e1:64:11:4d:43:bf:29:7f:dd:73:ba:67:e9:b6:d2:66:
e0:8d:59:95:b5:44:99:2e:f0:bb:14:fa:09:03:16:e1:ea:ef:
98:fa:49:75:35:db:88:6b:21:07:a1:15:68:2e:3f:d1:dc:15:
41:68:50:6b:aa:0d:57:19:8b:d3:92:dd:0a:c0:2f:70:15:63:
ac:8e:cc:a0:f1:32:bf:f8:37:e2:fd:7d:83:b3:66:b7:f1:e8:
93:9e:50:f5:e7:d8:d3:8d:f3:eb:5f:b2:1b:a7:06:91:e3:e7:
5a:17:29:44:cd:9e:95:b8:20:86:c9:7a:a6:e8:ae:d1:bc:ef:
09:3e:58:6d:d5:c7:a5:45:c2:b7:73:5d:04:80:e8:5f:82:a0:
f6:0f:57:73:84:b7:d1:34:9f:fb:f3:4f:cf:9b:00:78:54:9a:
4c:1b:ad:bc:47:e4:81:f1:13:5c:31:fa:7c:21:a5:83:ae:08:
bb:00:b8:ff:04:5c:f6:9b:be:0d:ea:af:b2:63:d9:ec:c7:f4:
69:95:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org