Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qgd3qpLO6dixUgMz5IwsJ0nWM9g.roa
File: qgd3qpLO6dixUgMz5IwsJ0nWM9g.roa (raw, json)
Hash identifier: azckAVJhsGkii93tTBx4n/k28ww3R0wxI7O+8DC7tZI=
Subject key identifier: AA:07:77:AA:92:CE:E9:D8:B1:52:03:33:E4:8C:2C:27:49:D6:33:D8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188E340360855E8B7F54C4EEC72EAF1FB32
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qgd3qpLO6dixUgMz5IwsJ0nWM9g.roa
Signing time: Thu 22 Jun 2023 13:16:56 +0000
ROA not before: Thu 22 Jun 2023 13:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.82.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 11:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:40:36:08:55:e8:b7:f5:4c:4e:ec:72:ea:f1:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 22 13:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa0777aa92cee9d8b1520333e48c2c2749d633d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c6:bf:91:34:9b:05:b5:4a:2e:fd:46:c6:70:
6a:7c:44:12:8a:a9:c7:c0:f6:86:98:77:06:0f:41:
fa:1f:b4:d1:b2:d4:78:ce:23:92:6f:41:ce:b5:80:
5f:52:f1:08:bb:1e:61:d3:9d:2b:05:b6:3a:7a:cd:
5e:00:63:37:7e:dc:f2:14:ae:f6:65:ab:77:bd:ae:
fb:98:fe:02:ee:5a:40:5c:de:dc:a6:ab:b9:a3:a6:
a5:50:22:ff:fa:13:87:ec:4f:85:e0:b1:73:6b:8e:
96:8d:50:0f:e0:06:43:20:42:7f:c7:e7:34:e4:85:
ea:7f:22:44:eb:2d:8c:cb:9d:a4:8c:29:99:a8:14:
d4:12:32:60:cf:69:21:56:5d:92:85:fb:04:61:e7:
1f:34:b2:ed:43:2b:4d:db:2b:67:75:3e:ec:1e:e1:
df:92:61:0e:a4:c8:c3:c7:73:30:f8:b9:c0:08:be:
f1:c1:61:18:17:21:61:4c:c5:b1:88:2a:3f:f8:20:
b1:69:b4:0f:21:ae:1f:38:7d:6f:dd:f8:cd:1f:1f:
28:d9:cc:5f:53:50:70:70:c5:e2:94:61:1b:15:8c:
b3:bf:e8:1f:b0:c1:44:e6:30:b7:8c:52:fa:4c:e9:
83:fd:60:06:24:93:97:b6:d6:96:e9:1c:03:e9:ae:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:77:AA:92:CE:E9:D8:B1:52:03:33:E4:8C:2C:27:49:D6:33:D8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qgd3qpLO6dixUgMz5IwsJ0nWM9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.45.0/24
194.58.58.0/24
194.87.44.0/24
194.87.165.0/24
195.133.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:50:b1:b0:48:ed:d8:3e:7d:e5:7a:49:a2:b1:b3:48:5a:79:
7c:ed:b9:e1:93:58:68:bb:a5:ba:5e:55:41:aa:59:54:a7:de:
19:81:f5:c2:33:52:a6:f4:c6:48:f9:63:af:2e:ab:98:cc:02:
02:07:c4:d5:10:83:92:e9:e2:df:75:2d:5b:26:31:dc:25:99:
12:57:90:57:eb:43:aa:77:c8:e4:ea:e6:39:d1:12:30:fa:24:
3b:3b:a9:95:a2:af:b7:f0:3e:56:03:9b:81:f8:49:75:db:af:
d5:dc:97:f6:c0:cb:5a:44:e1:b5:a0:81:93:79:1c:13:7c:8c:
94:a1:a4:04:63:68:55:35:8c:c7:37:c0:00:bc:b8:09:1a:ff:
cd:01:f6:04:71:29:ea:56:13:52:fe:61:ef:05:b8:02:de:39:
6e:6e:9a:8b:e8:04:4b:87:fb:26:bb:31:76:c6:21:1c:b6:52:
c9:d1:d0:45:dd:de:2a:ba:0f:9f:fe:95:b7:ae:cf:2c:f6:f3:
bf:81:f7:46:98:09:6b:43:16:3a:f6:06:7e:80:ff:cb:f8:37:
dc:13:aa:a9:61:8c:f6:70:d2:e2:6c:1e:21:2f:b0:cb:d1:dc:
d2:85:fa:47:cc:9a:d0:7e:55:a8:2c:4d:ea:50:0e:0e:53:e8:
66:30:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org