Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qdgeSZYPfgJUBHXw3vOmgxDh-fI.roa
File: qdgeSZYPfgJUBHXw3vOmgxDh-fI.roa (raw, json)
Hash identifier: KdR9EukgDRK6jmEUdyM1cEcg5wCQGzk4RsNeMWozccs=
Subject key identifier: A9:D8:1E:49:96:0F:7E:02:54:04:75:F0:DE:F3:A6:83:10:E1:F9:F2
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF93BE119501BB9F8AE6561AFAA7DFB
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qdgeSZYPfgJUBHXw3vOmgxDh-fI.roa
Signing time: Mon 02 Jan 2023 00:54:42 +0000
ROA not before: Mon 02 Jan 2023 00:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 185.219.208.0/22 maxlen: 22
78.31.64.0/21 maxlen: 21
93.186.192.0/20 maxlen: 20
83.136.80.0/21 maxlen: 21
46.20.32.0/20 maxlen: 20
85.114.128.0/19 maxlen: 19
5.104.104.0/21 maxlen: 21
85.14.192.0/18 maxlen: 18
62.141.32.0/20 maxlen: 20
37.157.248.0/21 maxlen: 21
46.228.192.0/20 maxlen: 20
194.107.129.0/24 maxlen: 24
81.30.144.0/20 maxlen: 20
80.82.208.0/20 maxlen: 20
91.212.159.0/24 maxlen: 24
91.212.153.0/24 maxlen: 24
89.163.128.0/17 maxlen: 17
146.0.32.0/20 maxlen: 20
91.194.84.0/24 maxlen: 24
213.202.192.0/18 maxlen: 18
5.199.128.0/20 maxlen: 20
185.15.244.0/22 maxlen: 22
217.79.176.0/20 maxlen: 20
193.111.198.0/23 maxlen: 23
2a01:480::/32 maxlen: 32
2001:4ba1::/32 maxlen: 32
2001:4ba0::/32 maxlen: 32
2001:4ba3::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 Mar 2023 14:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3b:e1:19:50:1b:b9:f8:ae:65:61:af:aa:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9d81e49960f7e02540475f0def3a68310e1f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:8f:b9:ad:c7:39:14:cd:52:eb:b1:15:b6:
c1:df:1a:20:dc:a3:e5:7a:47:c1:fb:53:7f:bf:d7:
b7:fe:a2:db:39:1a:72:02:bd:c1:8e:35:6d:2a:43:
b9:9c:a5:3c:fc:42:33:44:f3:91:6d:9f:bb:52:70:
f3:03:c0:c8:c7:1f:bb:c5:d8:26:37:81:80:5c:74:
14:82:cc:48:4b:ac:5a:73:96:4a:d9:92:80:0a:99:
0d:cc:64:8b:46:6e:ed:62:8d:39:b7:8d:4d:ac:4a:
b4:4c:50:e1:77:ef:1b:b2:78:b4:9d:d0:d8:57:5f:
68:14:b6:64:92:23:e2:00:20:11:0e:78:51:45:cd:
54:dc:bf:26:8f:02:b3:f0:e5:0a:30:38:50:ef:66:
0c:0b:9b:e6:47:0f:f6:c4:9e:59:a6:f7:c7:ef:db:
1e:c5:37:96:f1:14:45:3c:48:ae:cd:4a:42:62:9f:
4b:04:34:d4:d4:4c:4f:51:40:ef:d6:e7:ee:8b:10:
88:61:46:26:bf:f9:63:6d:c7:9d:88:d1:5d:d1:7f:
7b:27:d2:ed:16:f8:88:6a:61:f8:71:8e:6b:a3:3d:
9e:0b:a5:fc:52:b7:30:0d:c2:ad:5f:d9:b7:c1:6b:
b3:b9:c0:22:fa:a5:87:46:e5:28:19:9f:c4:11:48:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:1E:49:96:0F:7E:02:54:04:75:F0:DE:F3:A6:83:10:E1:F9:F2
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qdgeSZYPfgJUBHXw3vOmgxDh-fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.104.0/21
5.199.128.0/20
37.157.248.0/21
46.20.32.0/20
46.228.192.0/20
62.141.32.0/20
78.31.64.0/21
80.82.208.0/20
81.30.144.0/20
83.136.80.0/21
85.14.192.0/18
85.114.128.0/19
89.163.128.0/17
91.194.84.0/24
91.212.153.0/24
91.212.159.0/24
93.186.192.0/20
146.0.32.0/20
185.15.244.0/22
185.219.208.0/22
193.111.198.0/23
194.107.129.0/24
213.202.192.0/18
217.79.176.0/20
IPv6:
2001:4ba0::/31
2001:4ba3::/32
2a01:480::/32
Signature Algorithm: sha256WithRSAEncryption
0c:0b:c6:7b:eb:7d:4f:78:76:45:5b:d1:e2:43:5e:fa:ea:dc:
4d:ff:b2:c1:93:64:c0:46:05:80:fe:97:29:3f:0a:8a:41:29:
f6:b6:77:57:26:07:91:50:49:7d:6a:f5:cc:e5:e0:55:24:78:
45:1a:6f:9b:c2:09:5c:46:f0:2e:bb:40:24:c1:09:17:cf:b3:
a2:50:d5:70:9b:0a:76:a3:0c:d0:14:5e:b5:a2:ac:96:7a:3d:
a7:26:63:2f:59:9d:42:22:cf:67:3f:30:85:08:80:5d:04:d8:
26:1a:8c:1e:95:2c:eb:81:17:74:c4:1d:17:0a:5b:5f:1c:1d:
03:9f:b0:a4:66:1c:5d:c5:e8:a6:7c:55:cd:02:02:a0:f9:58:
ce:af:0f:1c:a0:58:66:f3:90:7b:76:d4:06:50:5c:bd:ff:24:
68:8e:7e:7e:68:38:0c:90:1c:38:93:39:31:a5:58:f8:33:02:
03:56:3d:68:a7:e4:7c:4b:9a:18:2f:a2:64:b3:a4:5c:03:14:
ea:45:73:60:a4:9c:25:e1:a4:3e:60:4b:96:2f:db:b4:26:cb:
d8:91:75:66:64:f8:48:62:f7:ab:84:db:17:39:07:1d:91:3a:
71:ab:08:bb:d8:ad:73:fe:fa:5c:50:dd:d3:8f:fb:07:2b:50:
6e:7d:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org