Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/PkFn9UK0ATQuYKNuqTYusqkQ5Xg.roa
File: PkFn9UK0ATQuYKNuqTYusqkQ5Xg.roa (raw, json)
Hash identifier: RX9+wqcNRDKpEbFh3OPe9GLZ00lfS+h0SoaXzamDPLg=
Subject key identifier: 3E:41:67:F5:42:B4:01:34:2E:60:A3:6E:A9:36:2E:B2:A9:10:E5:78
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 018B12E8620E71670E3D57F61D8794A29465
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/PkFn9UK0ATQuYKNuqTYusqkQ5Xg.roa
Signing time: Mon 09 Oct 2023 05:28:21 +0000
ROA not before: Mon 09 Oct 2023 05:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39386
IP address blocks: 84.235.56.0/23 maxlen: 23
178.86.50.0/24 maxlen: 24
84.235.0.0/17 maxlen: 17
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
37.224.192.0/24 maxlen: 24
84.235.95.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.122.0/23 maxlen: 23
84.235.120.0/22 maxlen: 22
193.19.244.0/24 maxlen: 24
2001:16a0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:e8:62:0e:71:67:0e:3d:57:f6:1d:87:94:a2:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Oct 9 05:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4167f542b401342e60a36ea9362eb2a910e578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:48:ed:7f:b9:fd:27:4d:26:cc:f9:e8:23:
7b:69:71:b2:d6:40:ec:4a:45:5e:18:a6:99:a9:d0:
5c:fc:74:68:b5:76:33:e0:c3:5b:98:ab:c2:1b:24:
31:61:f8:21:69:25:9c:e1:7d:d6:58:ec:d2:e8:db:
56:53:23:52:00:55:71:31:a6:a4:47:4e:ae:e4:09:
77:59:b0:23:3c:6d:0f:12:09:0d:a4:ef:ec:54:b3:
76:22:4b:01:4d:4a:f8:f9:6f:c4:e4:58:f6:42:57:
48:42:71:3f:4a:67:00:f0:f7:f1:62:99:66:14:de:
5a:54:6d:ba:fb:ea:d8:fc:ce:a9:a8:cc:44:5d:43:
ca:78:99:28:07:61:d4:68:0c:a3:13:65:74:49:6f:
d6:b8:4c:5a:2b:f0:91:97:98:da:d4:4c:b8:be:74:
a9:70:e3:c8:62:cc:dc:f6:f9:1f:c0:a5:0b:64:9d:
50:af:61:fd:0e:92:11:0f:3a:ee:e1:74:e4:02:b1:
0d:0a:e4:d7:d8:1c:5c:24:9e:f4:88:6e:11:ea:2a:
f7:46:ac:ca:f8:23:34:f4:21:d3:2c:0e:d6:f4:22:
27:aa:b6:88:3f:de:d1:27:55:d0:7f:75:38:f8:64:
9e:03:58:fa:1d:fb:14:db:75:a8:50:bc:ad:b4:4b:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:67:F5:42:B4:01:34:2E:60:A3:6E:A9:36:2E:B2:A9:10:E5:78
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/PkFn9UK0ATQuYKNuqTYusqkQ5Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/17
178.86.50.0/24
193.19.244.0/24
IPv6:
2001:16a0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:27:25:ff:f1:95:0f:a4:7a:e6:46:ea:bf:4e:b7:ec:bb:b4:
dd:3a:c1:d4:02:d1:a7:12:66:63:50:3b:0a:3d:15:76:3f:39:
4c:63:be:c9:64:fe:9e:15:5d:c7:f7:b9:65:59:74:bb:b7:9f:
4a:cf:f7:d9:73:78:94:53:ae:b3:b7:84:ae:f9:fe:df:1a:14:
86:d5:10:c3:0a:0d:b0:3f:88:2f:24:06:3d:b1:72:71:2d:eb:
c6:f0:3e:40:c4:3e:ad:8d:27:42:27:97:74:a2:3e:4d:1c:72:
3a:0d:3c:28:13:9e:5a:0e:e9:a7:75:e8:d7:fa:b2:96:ce:11:
76:09:52:4c:88:d4:fa:d7:5b:2d:3b:1b:3b:b7:73:47:39:18:
ed:68:b4:47:6e:52:85:fc:c7:ba:ff:bc:b2:ce:d4:f7:8c:0b:
2d:4d:ab:d0:ee:3d:2c:a4:00:cf:3c:a4:1d:c1:fc:c8:fb:d9:
ff:5b:e2:02:a9:a5:7d:1a:de:da:81:cf:54:3f:3a:63:88:c0:
8e:1b:00:0d:b4:40:f6:ae:54:3d:1b:e8:8c:88:8d:52:f8:df:
30:89:56:42:32:d7:af:1b:98:23:f8:88:db:e4:74:96:43:c1:
4d:91:00:9e:a5:61:19:e7:7c:73:ea:fa:7b:85:16:ba:ee:dc:
d9:89:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:04 2024 by rpki-client on console-ams.rpki-client.org