Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/0Qjv9JDwk_zbRDpakDV4E9E6WdU.roa
File: 0Qjv9JDwk_zbRDpakDV4E9E6WdU.roa (raw, json)
Hash identifier: ZjUh9tJBqKFwnENX8s6iGW+rY+vXgqD8WwWmsTZPpso=
Subject key identifier: D1:08:EF:F4:90:F0:93:FC:DB:44:3A:5A:90:35:78:13:D1:3A:59:D5
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 019156644DC77BE3FDDE9E7A2A07DF14B7D5
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/0Qjv9JDwk_zbRDpakDV4E9E6WdU.roa
Signing time: Thu 15 Aug 2024 14:14:59 +0000
ROA not before: Thu 15 Aug 2024 14:14:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44314
IP address blocks: 79.170.176.0/21 maxlen: 21
79.170.176.0/22 maxlen: 22
79.170.176.0/23 maxlen: 23
79.170.176.0/24 maxlen: 24
79.170.177.0/24 maxlen: 24
79.170.178.0/23 maxlen: 23
79.170.178.0/24 maxlen: 24
79.170.179.0/24 maxlen: 24
79.170.180.0/22 maxlen: 22
79.170.180.0/23 maxlen: 23
79.170.180.0/24 maxlen: 24
79.170.181.0/24 maxlen: 24
79.170.182.0/23 maxlen: 23
79.170.182.0/24 maxlen: 24
79.170.183.0/24 maxlen: 24
185.83.52.0/22 maxlen: 22
185.83.52.0/23 maxlen: 23
185.83.52.0/24 maxlen: 24
185.83.53.0/24 maxlen: 24
185.83.54.0/23 maxlen: 23
185.83.54.0/24 maxlen: 24
185.83.55.0/24 maxlen: 24
2a01:4e8::/32 maxlen: 32
2a01:4e8::/33 maxlen: 33
2a01:4e8::/34 maxlen: 34
2a01:4e8:127::/48 maxlen: 48
2a01:4e8:182::/48 maxlen: 48
2a01:4e8:f1d::/48 maxlen: 48
2a01:4e8:3a4d::/48 maxlen: 48
2a01:4e8:4000::/34 maxlen: 34
2a01:4e8:8000::/33 maxlen: 33
2a01:4e8:8000::/34 maxlen: 34
2a01:4e8:bce0::/48 maxlen: 48
2a01:4e8:c000::/34 maxlen: 34
2a01:4e8:c0c0::/48 maxlen: 48
2a01:4e8:c22c::/48 maxlen: 48
2a01:4e8:cafe::/48 maxlen: 48
2a01:4e8:cccc::/48 maxlen: 48
2a01:4e8:cda8::/48 maxlen: 48
2a01:4e8:feed::/48 maxlen: 48
2a01:4e8:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:64:4d:c7:7b:e3:fd:de:9e:7a:2a:07:df:14:b7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Aug 15 14:14:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d108eff490f093fcdb443a5a90357813d13a59d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:aa:93:a5:52:42:5d:0e:76:5e:43:90:51:
d6:05:20:33:b9:d3:47:31:25:33:f9:ec:9e:b0:10:
d4:ff:35:1e:5b:71:98:56:12:cd:cc:42:c1:8f:fa:
0b:b9:14:48:ee:8e:dd:f5:73:8d:73:b2:ee:14:26:
3f:c9:45:5c:4e:a6:52:53:eb:1b:0c:04:08:c0:ed:
72:36:83:88:91:9f:68:a3:e6:9c:d7:5f:5c:39:94:
e1:70:4e:1b:49:d3:e0:10:a7:2e:dc:f6:63:5d:30:
3e:04:e5:11:f0:68:65:af:fc:d9:77:b3:32:7c:6f:
cc:af:aa:af:41:d5:96:b8:44:b6:51:6a:3e:cc:be:
fb:b2:ee:4b:86:0a:a0:e2:86:2d:db:57:6d:57:d4:
44:fc:5c:3b:e6:8b:10:0b:04:3b:0c:cc:28:b4:13:
07:36:09:af:a4:a5:59:5f:93:c4:9d:8f:67:ec:6b:
58:04:75:84:53:03:03:1e:9e:a2:27:29:b9:a7:cf:
93:52:6e:c5:bb:b8:6c:c2:02:e7:c5:ad:f3:80:62:
20:d8:4b:9a:8c:8f:a4:f9:6a:29:ae:46:47:98:f2:
af:8b:7e:40:b9:22:2c:62:ff:1f:c0:a5:3d:19:d4:
91:47:73:db:7e:2d:a9:6f:04:23:3f:c4:99:96:aa:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:EF:F4:90:F0:93:FC:DB:44:3A:5A:90:35:78:13:D1:3A:59:D5
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/0Qjv9JDwk_zbRDpakDV4E9E6WdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.176.0/21
185.83.52.0/22
IPv6:
2a01:4e8::/32
Signature Algorithm: sha256WithRSAEncryption
48:57:f9:bc:7d:90:fb:42:47:05:a5:f3:d7:2a:b7:ef:3e:85:
d6:be:68:96:51:fc:42:ae:60:b3:39:e7:d3:f5:98:f9:3d:e4:
d8:00:9f:46:c5:bc:9a:a1:dc:fe:9f:6b:25:5f:ab:52:e9:b3:
b5:b3:65:69:17:b4:cd:43:99:92:98:46:3c:00:50:35:6a:bf:
b4:73:3f:b4:7e:0f:3d:15:5e:a2:32:c5:e0:10:ab:00:e7:2d:
bc:0d:59:70:54:24:76:fd:32:1d:f5:13:fe:31:4a:0b:74:3d:
83:94:ad:37:d3:12:b3:6f:8c:f6:3a:9d:21:2c:65:b2:d7:9a:
c6:9c:fa:bf:08:26:69:23:53:12:b4:85:7b:c5:b8:ee:07:5f:
3b:e3:c4:16:b2:ec:db:8b:dc:70:e7:8d:7f:d5:22:58:90:33:
b7:73:2f:42:fc:db:01:16:d2:57:9c:41:f0:84:9a:d8:bf:98:
10:c1:58:b0:45:da:98:99:65:35:77:b6:33:60:6e:5c:71:b7:
06:25:ba:d9:71:45:cf:53:c5:05:51:25:a0:3f:c2:6d:ea:ad:
0d:dd:ce:e6:a4:61:7a:65:6c:f9:e9:e8:4f:d5:23:92:4b:a0:
47:be:98:1c:dc:04:0d:37:5f:89:77:9c:01:e0:11:6f:d1:d2:
78:d3:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:49:41 2025 by rpki-client