Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qAQ8Lv1fWd9ZsWRFitLnZ8aLNbk.roa
File: qAQ8Lv1fWd9ZsWRFitLnZ8aLNbk.roa (raw, json)
Hash identifier: ayky9t/u6ZL5Dc6VpUZHhij9ZKq0nSCFnfZN5Gga94M=
Subject key identifier: A8:04:3C:2E:FD:5F:59:DF:59:B1:64:45:8A:D2:E7:67:C6:8B:35:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E1E6AF7048B7D7D5DDEBC1F44DF700AF3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qAQ8Lv1fWd9ZsWRFitLnZ8aLNbk.roa
Signing time: Fri 08 Mar 2024 14:15:10 +0000
ROA not before: Fri 08 Mar 2024 14:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 94.156.125.0/24 maxlen: 24
94.156.127.0/24 maxlen: 24
164.40.188.0/24 maxlen: 24
164.40.189.0/24 maxlen: 24
164.40.190.0/24 maxlen: 24
164.40.191.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:6a:f7:04:8b:7d:7d:5d:de:bc:1f:44:df:70:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 14:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8043c2efd5f59df59b164458ad2e767c68b35b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:6d:06:d3:d0:d6:86:07:a9:3c:9d:5d:f6:
fc:54:ef:48:d6:da:86:0b:70:4e:b3:80:a2:10:21:
99:91:f6:6e:44:19:b8:4e:10:da:e2:35:00:93:8b:
c4:6e:18:90:f8:03:32:16:86:4b:77:0e:7e:3e:2e:
3a:c7:42:c5:64:c6:42:aa:1d:91:21:dd:ce:7b:d6:
72:03:bd:41:79:46:22:27:d0:9a:b3:a0:93:00:7d:
cc:db:b9:e8:31:e7:13:b5:b3:be:d4:bb:e4:83:5e:
86:86:d6:f1:02:fb:90:8e:4f:14:23:85:e0:0e:a2:
ef:d3:2b:9a:34:51:af:e2:eb:58:7d:9b:5d:bc:0a:
a0:6a:46:44:f3:37:1d:20:9f:f8:f4:cb:b4:80:ea:
27:fd:e9:7d:29:ee:34:38:36:53:92:bf:5c:81:78:
86:2a:4c:60:0d:67:87:d0:b2:6f:c4:df:1c:bd:90:
f2:78:be:5f:5d:66:ae:5d:3d:c9:06:17:61:59:a8:
cb:fb:d4:35:dc:ee:7e:94:53:d7:9e:61:fe:9b:65:
41:70:6c:cc:1c:9c:6b:6a:e1:96:e3:96:6a:63:7d:
a4:ad:ef:e4:1d:02:41:a7:4b:ed:69:b5:46:3a:0e:
63:1a:38:64:e2:c5:7b:ea:b4:00:f5:d7:59:bf:91:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:3C:2E:FD:5F:59:DF:59:B1:64:45:8A:D2:E7:67:C6:8B:35:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qAQ8Lv1fWd9ZsWRFitLnZ8aLNbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.125.0/24
94.156.127.0/24
164.40.188.0/22
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
23:82:23:0f:bd:75:9d:f2:36:60:dc:a0:27:82:c7:26:24:b3:
61:b4:b3:1b:d0:8a:16:cd:3d:71:1f:99:dc:04:35:14:4d:1e:
f7:ad:67:9e:d6:26:09:6c:c8:10:d0:ef:38:c0:12:d0:a7:5e:
d5:9f:dd:20:8e:99:78:d0:9f:e1:b8:0b:ac:e1:f4:a5:0f:d5:
c3:5a:8e:d1:a5:aa:c0:c4:c2:36:47:d1:b1:67:df:6a:90:b5:
e4:eb:60:da:6c:4c:c0:d9:8b:40:e2:42:db:26:85:af:db:4b:
f9:07:59:e5:3a:75:f8:47:12:4c:2f:65:fa:4e:58:88:a1:ab:
5c:fe:ac:55:68:6e:53:25:3f:88:d5:e4:60:8a:50:04:d6:0f:
7e:ff:a6:86:d7:61:f3:6d:d2:aa:0f:e5:94:10:6e:dc:e5:c8:
3d:c5:a4:9f:66:fa:0b:cc:19:82:42:e0:7c:4d:68:de:fa:e7:
26:af:cd:15:ba:c3:fe:dd:1a:67:e8:38:d0:d8:89:a7:7e:59:
fd:3e:ae:cb:e8:d4:36:02:e0:05:b0:90:cc:03:9e:d7:1e:41:
cb:45:19:39:80:2b:4d:99:e2:6f:0d:64:5b:c9:b0:a2:4e:99:
62:72:36:c6:af:6c:63:18:2e:c2:3e:b0:c7:0f:c1:73:0b:db:
9a:af:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:17:04 2024 by rpki-client on console-ams.rpki-client.org