Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/dNf1eM6VeAxj9_oYAZbWzF-naxQ.roa
File: dNf1eM6VeAxj9_oYAZbWzF-naxQ.roa (raw, json)
Hash identifier: nmmksdiv4D4Y6HTt6qyy4QfsfKRZt6xBzLzTh3u26oc=
Subject key identifier: 74:D7:F5:78:CE:95:78:0C:63:F7:FA:18:01:96:D6:CC:5F:A7:6B:14
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 018981B05E805B3B7A4DD22F5F52395C837A
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/dNf1eM6VeAxj9_oYAZbWzF-naxQ.roa
Signing time: Sun 23 Jul 2023 07:39:26 +0000
ROA not before: Sun 23 Jul 2023 07:39:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39386
IP address blocks: 84.235.56.0/23 maxlen: 23
178.86.50.0/24 maxlen: 24
84.235.0.0/17 maxlen: 17
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
37.224.192.0/24 maxlen: 24
84.235.95.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.122.0/23 maxlen: 23
84.235.120.0/22 maxlen: 22
193.19.244.0/24 maxlen: 24
2001:16a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 23 Jul 2023 07:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:b0:5e:80:5b:3b:7a:4d:d2:2f:5f:52:39:5c:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jul 23 07:39:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d7f578ce95780c63f7fa180196d6cc5fa76b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:54:e6:c5:b6:fd:48:f7:4e:fc:40:bd:bc:
8c:5a:a7:07:8a:89:e1:29:f0:9b:2d:f9:e4:9f:38:
91:97:f9:59:0a:37:b7:c5:5c:f4:9c:a0:7f:7d:0e:
9b:9c:81:74:67:a3:be:8b:9c:07:96:36:45:1b:19:
00:91:64:34:b8:55:8a:bd:e3:70:cb:d0:8a:18:89:
31:17:9a:d6:df:d2:22:3b:b2:bd:c8:3e:15:8f:f2:
02:6e:49:d5:fc:79:61:1b:8d:5c:9e:74:65:52:b5:
a5:84:06:1c:a9:4c:26:89:d1:ef:75:c5:d3:41:dd:
ea:9c:d5:39:43:91:34:4e:15:51:25:e7:25:3e:76:
36:b1:60:dd:7e:ce:e7:8c:29:cd:b7:9b:dc:ee:e9:
95:68:59:c5:cc:74:a8:e0:e9:35:ae:4b:14:76:29:
0f:94:b2:26:1b:ff:f0:3f:1b:f4:94:9f:17:f6:b6:
e0:3a:89:70:17:94:9b:39:2e:3c:a6:ca:69:95:3b:
aa:f4:60:05:fa:6a:e4:a6:d7:0a:9a:ad:1c:2c:b7:
80:dd:0c:2c:d4:22:ec:93:6c:57:8c:37:27:79:34:
91:8e:40:f1:ed:5a:38:b8:84:af:d3:d3:80:6f:28:
5c:d8:32:60:13:e0:60:93:a1:71:6a:6d:e7:6b:8d:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:F5:78:CE:95:78:0C:63:F7:FA:18:01:96:D6:CC:5F:A7:6B:14
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/dNf1eM6VeAxj9_oYAZbWzF-naxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/17
178.86.50.0/24
193.19.244.0/24
IPv6:
2001:16a0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:6d:4b:ef:f4:9e:56:c1:66:c4:11:38:34:73:1a:d0:e4:fd:
2d:ee:3c:3f:89:f5:15:19:30:5a:82:6a:d2:68:83:73:77:e3:
aa:1d:f6:07:c3:b3:c5:22:7f:72:ad:d5:31:1d:85:8d:48:6e:
41:e5:43:1e:a2:28:ee:d7:f5:e9:66:0f:82:49:7f:ce:93:58:
99:03:a9:c2:a3:49:82:ea:d6:f9:b3:12:53:54:a9:5f:bf:a2:
6c:f2:94:5a:f9:4a:68:5e:89:8e:30:df:98:9d:03:cf:69:27:
4b:d0:93:21:ef:17:8a:e7:ac:94:85:ba:db:3b:98:69:4d:d9:
9e:c4:69:e4:c0:c6:15:da:29:3b:0c:83:74:6a:7a:03:81:43:
77:36:ad:7b:14:3a:bf:21:27:6e:6b:8f:0b:ac:19:d4:0b:82:
63:ef:a8:63:c8:94:33:6a:e5:76:c8:59:89:29:07:ba:5f:ee:
65:a9:7e:e4:04:ba:35:9a:dd:bb:ac:56:7b:aa:5b:64:f9:5e:
af:38:24:b4:f0:c8:37:9b:46:68:5e:3f:3f:d4:46:4e:b5:6b:
79:e6:d4:0e:db:d1:5e:ce:e5:71:e0:02:a1:c4:64:45:4b:58:
a8:b0:81:10:25:98:89:ac:82:07:ee:8b:80:c9:4d:d8:cd:34:
21:b3:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:05 2024 by rpki-client on console-ams.rpki-client.org