Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/q1-jUFw1BhG4G8ED1iVP6fCqy0M.roa
File: q1-jUFw1BhG4G8ED1iVP6fCqy0M.roa (raw, json)
Hash identifier: LWgWXJKykS/dQN0/OccpprgdAqRe/biAVgRTnv7VGdU=
Subject key identifier: AB:5F:A3:50:5C:35:06:11:B8:1B:C1:03:D6:25:4F:E9:F0:AA:CB:43
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 018F9D1363CBC76572BB1DDCEFEF29B107DF
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/q1-jUFw1BhG4G8ED1iVP6fCqy0M.roa
Signing time: Tue 21 May 2024 21:34:04 +0000
ROA not before: Tue 21 May 2024 21:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 62.171.192.0/18 maxlen: 24
185.192.228.0/22 maxlen: 24
194.154.0.0/19 maxlen: 24
194.238.32.0/19 maxlen: 24
194.238.64.0/19 maxlen: 24
213.18.192.0/18 maxlen: 24
217.177.0.0/18 maxlen: 24
217.177.64.0/19 maxlen: 24
217.179.0.0/17 maxlen: 24
217.179.192.0/18 maxlen: 24
217.180.0.0/19 maxlen: 24
217.180.32.0/20 maxlen: 24
217.180.48.0/21 maxlen: 24
217.181.0.0/18 maxlen: 24
217.181.64.0/19 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Jun 2024 21:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9d:13:63:cb:c7:65:72:bb:1d:dc:ef:ef:29:b1:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: May 21 21:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab5fa3505c350611b81bc103d6254fe9f0aacb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:bd:b3:59:8c:81:37:56:06:fd:6a:07:0f:
f8:05:46:6a:88:ed:e3:bb:0a:56:e4:1a:cd:25:46:
d2:47:70:36:d8:1e:08:86:7d:26:6a:e4:20:8d:a0:
47:b4:51:4d:38:3a:d0:12:f3:67:67:e9:8d:69:65:
23:bf:f4:9f:4f:3c:83:6e:d4:a4:40:41:0a:d2:00:
ba:5a:de:73:f4:43:76:c1:ec:17:66:15:b8:1e:69:
5f:89:75:c0:de:eb:3b:7a:75:4a:96:61:fe:85:d8:
57:eb:57:48:57:54:92:80:38:45:0c:9a:50:ab:58:
a4:7a:e7:0b:22:f1:bb:e0:73:5c:c4:b4:bd:6b:b0:
fe:9a:ed:e3:9b:9b:a5:48:57:6c:06:37:3f:4d:ff:
b6:f7:97:af:ee:57:12:8e:19:e9:a3:e7:6f:ca:8e:
34:2e:69:33:fa:df:5f:a1:f6:12:37:0f:ab:77:28:
d0:47:41:31:8e:35:06:fc:6a:e4:de:a9:f8:3c:e4:
45:a5:c5:c9:2c:4b:51:67:bc:c9:82:2a:05:1f:4f:
57:f4:4e:77:1f:06:d7:8a:ac:f2:0e:64:49:34:df:
a3:01:ec:04:a2:27:19:37:e3:0f:71:55:62:85:80:
0c:65:59:1f:08:0b:6b:5b:75:1d:53:cc:a5:80:d7:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:A3:50:5C:35:06:11:B8:1B:C1:03:D6:25:4F:E9:F0:AA:CB:43
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/q1-jUFw1BhG4G8ED1iVP6fCqy0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0/18
185.192.228.0/22
194.154.0.0/19
194.238.32.0-194.238.95.255
213.18.192.0/18
217.177.0.0-217.177.95.255
217.179.0.0/17
217.179.192.0-217.180.55.255
217.181.0.0-217.181.95.255
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
af:5b:1a:4a:06:bc:52:04:f9:2e:1d:9b:ac:96:ab:b8:8e:f6:
16:58:d4:83:ff:39:49:f1:e4:e7:47:37:9b:37:ed:9c:2b:b0:
5c:13:47:03:52:b2:8f:f1:46:83:30:5b:46:a1:f8:be:92:4e:
5e:68:79:4b:f8:e2:78:fa:7c:ca:80:05:b2:75:5a:f2:40:fa:
26:ac:59:a0:ad:ca:f1:8b:56:f9:47:f5:99:87:e9:84:10:d4:
81:31:73:f6:eb:03:c6:80:48:d6:9e:48:f3:67:fd:72:42:32:
4a:7e:80:cf:23:73:25:fd:85:92:9f:f5:99:bd:ec:11:0e:c4:
c5:97:3b:e4:4b:ca:56:f2:7c:38:f1:84:bd:1a:b1:8a:c6:dd:
72:c6:7b:c8:c1:32:42:1f:eb:e5:27:dd:7d:08:1b:74:33:16:
bc:ab:a5:75:e4:74:32:d9:9a:ea:49:34:53:2c:67:8a:2b:77:
e6:95:6f:01:36:fe:91:1d:c0:e9:11:ee:d9:27:86:3c:aa:3d:
9d:ea:95:30:00:f3:85:dd:c2:bc:8d:94:3b:dd:ed:c1:3e:72:
cc:6e:08:94:66:f7:ff:58:8a:a2:43:19:c9:53:93:4b:a3:68:
b2:a9:40:ee:8f:b3:bc:7e:0b:29:ae:5b:93:2d:c0:12:92:54:
85:76:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 03:16:34 2024 by rpki-client on console-ams.rpki-client.org