Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/QMgZ-aWoH5BiPDlV5fS1lzH7ElE.roa
File: QMgZ-aWoH5BiPDlV5fS1lzH7ElE.roa (raw, json)
Hash identifier: fJC4F9eTYRW1nMdgfkpS+1zShAiv3mHLum96ydgCFKA=
Subject key identifier: 40:C8:19:F9:A5:A8:1F:90:62:3C:39:55:E5:F4:B5:97:31:FB:12:51
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 018CC5DC5B63FBC47783D198E9C7D4176098
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/QMgZ-aWoH5BiPDlV5fS1lzH7ElE.roa
Signing time: Mon 01 Jan 2024 16:30:01 +0000
ROA not before: Mon 01 Jan 2024 16:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48737
IP address blocks: 93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5b:63:fb:c4:77:83:d1:98:e9:c7:d4:17:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 16:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40c819f9a5a81f90623c3955e5f4b59731fb1251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:f4:e9:be:03:a8:e3:df:44:52:a7:28:20:
14:03:36:6c:42:49:50:f6:a1:a6:ac:13:ab:f4:ee:
5d:24:bb:10:44:e7:cb:fa:1a:ca:64:41:ee:6c:af:
cf:e6:15:c2:de:7d:f1:24:04:a8:fe:22:51:cd:84:
aa:84:56:84:12:c0:9f:2e:75:1e:9a:ee:2f:ea:a0:
24:34:97:26:13:7f:dd:cc:cf:6f:d9:7f:33:9b:8f:
3b:71:8c:11:32:0a:5c:ec:8b:a2:00:1f:92:f7:61:
fe:19:86:b2:a4:92:4f:c0:3f:be:95:61:37:ca:af:
80:94:e6:3a:0c:3f:1e:d8:13:77:20:6b:00:0d:82:
72:ed:98:37:b2:c9:21:bb:ef:9e:82:17:9e:04:3d:
0f:a1:42:7d:ca:d6:ea:b6:49:23:53:ab:8c:c0:a5:
df:14:0b:5d:4d:51:35:3c:49:61:31:4a:af:46:9e:
76:2d:10:91:90:07:c8:f6:c2:49:ca:b6:42:1e:95:
ad:f4:db:e8:f4:cb:5c:08:1a:2f:10:3a:36:49:69:
e5:1e:26:15:d9:80:a1:2e:01:a0:c3:81:c8:87:8f:
a6:c0:b2:2b:7b:3c:e1:92:a1:c2:9c:fb:15:4f:f0:
5d:36:3c:01:4d:b8:b9:cd:96:99:50:4b:39:87:fa:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C8:19:F9:A5:A8:1F:90:62:3C:39:55:E5:F4:B5:97:31:FB:12:51
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/QMgZ-aWoH5BiPDlV5fS1lzH7ElE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.132.0/24
93.188.135.0/24
163.171.215.0-163.171.216.255
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ca:ae:1d:6b:8d:03:71:a5:74:1f:d7:a1:38:b8:81:48:d9:
0f:0d:19:e7:bf:12:7c:b7:4f:2d:ce:45:5c:cf:c7:a0:51:2f:
0a:e7:b0:76:3e:91:84:fd:3b:62:9e:c5:59:fc:fd:44:43:1e:
6e:f1:44:58:7e:58:ad:2b:92:41:9f:52:86:0f:48:22:4d:46:
b7:33:22:2d:7f:41:9e:53:39:7c:a8:4b:bd:3b:00:fe:62:ef:
47:5d:11:33:d1:c7:15:a8:93:1f:93:5b:93:61:d4:1a:3c:a1:
6e:b7:84:f6:f7:bc:52:94:97:7c:44:f4:2a:54:59:eb:ec:ec:
06:54:77:0b:08:43:ad:30:78:b3:08:37:43:94:a1:c8:29:de:
61:75:2c:5f:ff:21:5f:9f:47:2b:b6:c3:9a:ed:0a:99:36:05:
81:f8:e9:1e:ab:41:b0:1f:1e:22:b6:4e:74:3e:12:36:99:1e:
e3:79:57:a2:6e:f1:e2:08:b6:09:f5:97:1a:75:eb:b8:2c:86:
33:d9:75:ec:09:e1:29:37:9f:2d:63:75:45:ec:23:f4:75:c0:
b9:47:7e:ca:30:69:67:f8:25:31:b6:a3:a4:97:b4:ac:3f:3d:
27:12:c7:05:ab:67:da:f9:c9:81:58:7f:0c:4e:14:af:90:27:
67:51:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:19 2025 by rpki-client