Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/m8lPiIm786UaedCQhyQrbG_vmAQ.roa
File: m8lPiIm786UaedCQhyQrbG_vmAQ.roa (raw, json)
Hash identifier: 1gAiA4+fpgQsM/bzz/QgYb93PVuKdZZUxOJC0K2Rj9M=
Subject key identifier: 9B:C9:4F:88:89:BB:F3:A5:1A:79:D0:90:87:24:2B:6C:6F:EF:98:04
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 018CC6B91CE6AB262C3EC5F1C9EFB4CF71A2
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/m8lPiIm786UaedCQhyQrbG_vmAQ.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62442
IP address blocks: 89.221.84.0/22 maxlen: 22
89.221.88.0/21 maxlen: 21
78.157.37.0/24 maxlen: 24
78.157.35.0/24 maxlen: 24
78.157.36.0/24 maxlen: 24
78.157.34.0/24 maxlen: 24
78.157.32.0/19 maxlen: 19
78.157.32.0/24 maxlen: 24
78.157.38.0/24 maxlen: 24
78.157.44.0/24 maxlen: 24
78.157.42.0/24 maxlen: 24
78.157.43.0/24 maxlen: 24
78.157.40.0/24 maxlen: 24
78.157.41.0/24 maxlen: 24
78.157.39.0/24 maxlen: 24
78.157.51.0/24 maxlen: 24
78.157.49.0/24 maxlen: 24
78.157.50.0/24 maxlen: 24
78.157.47.0/24 maxlen: 24
78.157.48.0/24 maxlen: 24
78.157.48.0/21 maxlen: 21
78.157.45.0/24 maxlen: 24
78.157.46.0/24 maxlen: 24
78.157.58.0/24 maxlen: 24
78.157.56.0/21 maxlen: 21
78.157.56.0/24 maxlen: 24
78.157.57.0/24 maxlen: 24
78.157.54.0/24 maxlen: 24
78.157.55.0/24 maxlen: 24
78.157.52.0/24 maxlen: 24
78.157.53.0/24 maxlen: 24
78.157.63.0/24 maxlen: 24
78.157.61.0/24 maxlen: 24
78.157.62.0/24 maxlen: 24
78.157.59.0/24 maxlen: 24
78.157.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 10:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1c:e6:ab:26:2c:3e:c5:f1:c9:ef:b4:cf:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bc94f8889bbf3a51a79d09087242b6c6fef9804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:6f:9f:99:73:f1:31:89:dc:d8:aa:39:24:
12:82:e7:70:00:e8:1d:66:54:04:4d:9b:8a:f9:52:
49:11:06:06:30:35:76:f1:4f:ac:5a:ea:1f:57:3a:
e9:85:e9:7a:e4:32:bf:0a:fc:7a:ef:bd:27:3b:af:
50:35:f5:9e:77:14:79:70:6c:e8:b5:64:6a:85:49:
67:ae:9c:7c:66:d4:f1:f3:03:05:c3:a5:23:d4:6b:
8f:4d:49:ee:6b:66:c0:5e:24:f4:ce:61:da:42:1d:
82:7e:f6:70:86:d3:78:95:a4:50:fb:57:f3:56:0b:
3b:84:49:d8:dc:38:0a:1e:02:6c:85:ab:bb:25:76:
f1:1f:7b:0b:ab:ef:ea:fb:62:3f:3e:60:c6:76:20:
98:e9:18:ca:20:db:3e:e6:70:70:9a:19:83:6e:ba:
f0:46:30:fb:b9:77:f1:49:60:b5:4c:c2:93:dc:86:
a0:17:1c:ee:cc:64:87:a6:6c:53:b9:4f:a3:42:fa:
7e:f9:f8:07:fa:e7:68:2e:b0:fa:ee:df:d6:d5:c8:
9a:9c:f3:9b:36:e4:2a:02:00:1a:46:0a:35:e5:55:
13:66:00:db:5b:cc:61:90:27:bc:91:9b:e7:df:89:
ce:81:12:49:24:5c:8b:92:22:c7:de:77:dd:19:c5:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:4F:88:89:BB:F3:A5:1A:79:D0:90:87:24:2B:6C:6F:EF:98:04
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/m8lPiIm786UaedCQhyQrbG_vmAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.32.0/19
89.221.84.0-89.221.95.255
Signature Algorithm: sha256WithRSAEncryption
00:1e:3f:06:5b:1d:30:b8:b4:f0:f6:28:49:e5:90:49:0e:5b:
36:51:8f:c6:e9:b5:72:d8:e3:21:27:5d:ff:6f:1b:f2:ec:4b:
c7:5f:f2:3d:96:d6:70:d3:eb:e7:04:24:93:ad:ae:92:53:b9:
a0:9b:24:e2:16:43:34:02:a5:79:e6:03:50:dd:98:e9:74:2c:
a9:47:47:89:76:90:b6:f1:30:a6:2d:42:b0:87:54:43:93:58:
06:e1:92:4c:06:47:e2:bf:32:e8:73:6e:37:8b:01:05:bf:84:
c5:05:9d:c9:6b:c6:09:f8:5c:97:1d:3c:29:9a:62:d7:92:ca:
b5:db:91:72:1d:4c:8e:80:b5:2f:dc:7c:98:d1:20:e9:b4:18:
f1:4e:db:06:0e:2f:d6:e9:5e:bf:c4:52:b8:79:34:74:61:08:
1b:ec:62:bb:ba:b1:ad:d3:54:48:be:1a:8c:65:b8:8f:b5:b2:
2b:ee:6f:9a:75:e8:0e:4a:6d:83:f9:8d:db:eb:56:98:7d:ce:
71:28:b6:dc:27:40:a3:8f:ae:b9:f8:3e:48:5a:22:c2:c2:76:
2b:33:1d:30:3c:81:3e:96:97:7b:a2:62:d6:ae:eb:86:a6:06:
62:4c:db:56:1a:11:a0:55:22:fb:42:74:47:42:9a:be:71:e4:
0c:cd:3c:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org