Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/7qqKw6KhpqihBOolzoZoxToHn2s.roa
File: 7qqKw6KhpqihBOolzoZoxToHn2s.roa (raw, json)
Hash identifier: PHug2EJxB8wsL9r/KoTy8kAH0TFbro6evi9nm2IChZU=
Subject key identifier: EE:AA:8A:C3:A2:A1:A6:A8:A1:04:EA:25:CE:86:68:C5:3A:07:9F:6B
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 018571A78A5105CD9A38A10EF132BB96B0FC
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/7qqKw6KhpqihBOolzoZoxToHn2s.roa
Signing time: Mon 02 Jan 2023 08:44:43 +0000
ROA not before: Mon 02 Jan 2023 08:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35612
IP address blocks: 49.236.0.0/18 maxlen: 21
128.116.128.0/17 maxlen: 17
77.32.0.0/17 maxlen: 21
212.124.160.0/19 maxlen: 19
78.134.0.0/17 maxlen: 17
185.11.20.0/22 maxlen: 22
146.241.0.0/16 maxlen: 21
84.33.128.0/18 maxlen: 21
5.157.96.0/19 maxlen: 19
216.247.128.0/18 maxlen: 18
84.33.64.0/18 maxlen: 21
88.149.128.0/17 maxlen: 17
147.53.128.0/17 maxlen: 17
88.147.0.0/17 maxlen: 21
81.174.0.0/18 maxlen: 18
2001:4c90::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:8a:51:05:cd:9a:38:a1:0e:f1:32:bb:96:b0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Jan 2 08:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeaa8ac3a2a1a6a8a104ea25ce8668c53a079f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:ad:db:7e:ff:1e:5f:29:4f:36:e1:d1:0a:
58:96:c3:71:0c:e8:fa:c1:ef:1b:bf:98:80:08:13:
32:aa:75:04:df:ea:fc:59:04:7b:64:32:7e:a4:e1:
c6:24:c4:25:94:23:af:17:40:f4:01:4c:0e:e5:c2:
ea:50:6c:ee:87:f1:25:08:a4:6d:b6:e9:2e:20:68:
4d:6b:ed:22:eb:81:95:c0:32:73:75:3c:ae:ad:92:
41:bd:82:7d:c4:95:a1:c0:1a:19:d2:6a:7d:70:d6:
00:15:64:12:32:99:ba:c4:c7:b5:ea:60:77:9b:d5:
b0:b9:09:7d:80:79:af:a0:50:ae:20:e0:a0:44:48:
cf:c3:fa:b8:93:21:2f:67:57:2b:7e:f7:0b:d1:35:
e9:85:d3:6b:d6:01:b2:42:47:82:e3:76:6d:f1:72:
97:6a:a4:63:70:cc:58:05:9d:3b:34:1d:2b:b0:75:
e4:55:32:bf:b3:02:dd:70:8b:41:6d:06:0e:7f:66:
c2:ea:aa:40:e5:8d:75:6b:2a:fb:c5:73:61:c0:76:
df:b5:06:20:ff:8d:3e:30:e2:86:a3:a6:da:94:da:
54:85:cf:df:a5:a5:61:c7:28:c2:8e:88:58:f0:8d:
34:31:5a:1c:d9:1c:01:e3:17:2a:08:2a:af:c1:45:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:8A:C3:A2:A1:A6:A8:A1:04:EA:25:CE:86:68:C5:3A:07:9F:6B
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/7qqKw6KhpqihBOolzoZoxToHn2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.96.0/19
49.236.0.0/18
77.32.0.0/17
78.134.0.0/17
81.174.0.0/18
84.33.64.0-84.33.191.255
88.147.0.0/17
88.149.128.0/17
128.116.128.0/17
146.241.0.0/16
147.53.128.0/17
185.11.20.0/22
212.124.160.0/19
216.247.128.0/18
IPv6:
2001:4c90::/29
Signature Algorithm: sha256WithRSAEncryption
5c:9e:2c:e2:36:56:92:6f:ad:1a:8c:aa:4a:fb:5b:de:ff:da:
bb:a4:83:32:8a:57:38:cd:a2:fc:d6:e9:38:08:8b:87:b8:7d:
5f:db:6b:39:d0:9c:bf:00:a9:69:e0:ea:17:48:bb:52:c8:10:
27:96:5f:b9:ec:05:cc:62:e4:ce:cb:0a:f0:08:ca:b1:ba:53:
a5:b1:0d:36:a4:ac:73:76:06:ed:b4:fe:f5:ed:80:ca:8f:1c:
a0:aa:96:d8:23:73:ef:e7:89:2a:1f:54:7d:ca:3e:f0:d7:f0:
89:fb:0e:a3:66:36:44:b6:11:6f:a2:59:d0:69:21:bb:27:84:
ae:62:16:e4:fe:b8:0e:d9:9d:48:71:26:a0:bc:e0:3e:9a:e6:
12:e3:b9:07:5e:01:b1:37:0e:ca:af:c8:b5:34:bf:77:71:6b:
f7:7f:de:6a:c7:b9:53:a0:25:4d:b5:51:7d:97:c3:17:8b:01:
97:86:85:b6:bd:20:84:0f:50:08:39:eb:eb:8f:a1:c4:49:b7:
06:1a:ed:5b:e1:8b:b0:e1:9d:96:2a:94:84:b5:33:f1:fc:b3:
d9:bc:c2:27:f9:ef:03:a4:45:3a:07:51:41:0e:6a:67:f6:9a:
85:fe:9c:f0:66:bd:df:36:1a:73:b3:4c:a1:c4:e1:e3:b4:a5:
68:f0:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org