Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QWjtdv3XgWYpHvnFHDTxoDoUarI.roa
File: QWjtdv3XgWYpHvnFHDTxoDoUarI.roa (raw, json)
Hash identifier: 24gjtVQB/Mi11LDaL2MhWtitTiLiV2ZASAG0oMktmvw=
Subject key identifier: 41:68:ED:76:FD:D7:81:66:29:1E:F9:C5:1C:34:F1:A0:3A:14:6A:B2
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FA741D7ABEFBA8E6E4E8EB4537C43A115
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QWjtdv3XgWYpHvnFHDTxoDoUarI.roa
Signing time: Thu 23 May 2024 21:01:01 +0000
ROA not before: Thu 23 May 2024 21:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 17:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:41:d7:ab:ef:ba:8e:6e:4e:8e:b4:53:7c:43:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 23 21:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4168ed76fdd78166291ef9c51c34f1a03a146ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:59:d3:d0:79:d3:55:1b:90:7c:e1:16:ba:
c6:44:70:b2:97:e2:b5:d1:27:8e:0b:90:d9:e7:da:
a1:84:cf:4f:25:16:67:bb:a9:f6:1c:73:ad:a4:42:
cf:fa:cb:64:6e:c9:de:63:63:6b:53:1d:36:51:0f:
9e:47:2e:42:6a:b8:8a:d0:99:ff:b2:e2:19:f6:82:
c6:c5:d3:56:4d:0a:6b:85:d8:9f:e5:07:cc:04:95:
a3:ab:fc:58:93:a1:7c:12:9c:71:7c:39:05:6e:f0:
83:45:31:e2:38:e5:04:3b:24:71:e5:f3:35:69:45:
53:07:37:6d:60:9c:dd:28:11:3e:dc:c3:b8:9f:98:
c9:49:7d:78:f3:03:74:77:b1:30:df:c4:11:fb:2c:
35:2e:22:90:34:42:a4:f3:59:a3:98:07:e6:30:53:
18:30:bb:ca:48:40:3f:64:59:1e:dc:3f:4b:7e:95:
c0:9a:d0:7e:12:1f:b2:03:9c:96:a0:28:2c:55:6d:
00:9b:2c:d6:08:9f:6f:47:37:83:c5:c2:2b:80:00:
12:ea:4c:a0:9c:40:d3:d0:fa:e3:b4:6e:0d:61:85:
37:38:bc:91:36:e7:54:00:67:61:be:fa:c8:55:04:
ab:03:15:89:63:2f:64:db:e8:8d:bb:0f:a0:57:4d:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:68:ED:76:FD:D7:81:66:29:1E:F9:C5:1C:34:F1:A0:3A:14:6A:B2
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QWjtdv3XgWYpHvnFHDTxoDoUarI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
Signature Algorithm: sha256WithRSAEncryption
48:62:01:fc:19:45:4c:50:7a:17:c9:93:96:f1:be:13:62:f5:
02:0c:97:cc:1f:a6:02:b6:99:b6:9f:69:3a:2a:3f:23:4e:9c:
5c:43:ac:f0:6f:95:d0:43:ae:d1:ed:12:ed:a9:11:39:9e:7c:
be:e5:db:6b:ae:b8:62:7d:59:41:d1:93:8a:de:f6:5f:72:a9:
18:95:3a:fc:38:99:90:b7:8d:a6:d9:86:db:72:56:92:d4:62:
e7:7b:ae:5a:91:72:1b:9a:88:f6:4d:51:ed:b9:5c:3e:b1:ee:
9c:80:e9:9c:43:64:b4:17:96:66:f2:b3:73:c7:3f:71:f0:67:
0b:b5:33:9c:92:d0:09:33:5f:0b:64:91:28:95:b3:83:a5:1f:
79:62:bc:e5:29:f4:95:43:ba:55:95:d6:84:5b:33:4d:32:7d:
3b:d8:a8:c9:b6:de:21:ea:f1:1b:13:54:c9:ac:2c:9d:83:01:
92:a7:5f:15:5b:5a:b8:b0:8d:bd:97:a6:1e:d1:ec:99:09:ac:
a9:d0:d3:90:80:c5:f9:8c:47:c7:7f:d1:a4:d0:58:97:f5:84:
36:26:c8:15:ac:e3:38:a8:96:9d:e5:2f:20:fc:f1:c2:d6:21:
48:19:6b:c9:4e:68:b9:2e:81:dd:04:97:75:ce:50:f6:37:2d:
ef:48:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:11 2024 by rpki-client on console-fra.rpki-client.org