Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/qvHi8dfS-djyLxEbfuX3WEVTPM8.roa
File: qvHi8dfS-djyLxEbfuX3WEVTPM8.roa (raw, json)
Hash identifier: vKnFmqWZ2gFo4r+hbOSs1oQRR4Sb1azL1qyosA48VJM=
Subject key identifier: AA:F1:E2:F1:D7:D2:F9:D8:F2:2F:11:1B:7E:E5:F7:58:45:53:3C:CF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0192B9ACB782CBE6B4B6DD0A81B42ACDF071
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/qvHi8dfS-djyLxEbfuX3WEVTPM8.roa
Signing time: Wed 23 Oct 2024 13:59:16 +0000
ROA not before: Wed 23 Oct 2024 13:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 5.172.160.0/20 maxlen: 20
5.172.170.0/24 maxlen: 24
81.2.64.0/18 maxlen: 18
81.187.0.0/16 maxlen: 24
81.187.161.0/24 maxlen: 24
90.155.0.0/18 maxlen: 24
90.155.64.0/19 maxlen: 20
90.155.96.0/20 maxlen: 20
178.238.144.0/20 maxlen: 20
194.4.172.0/22 maxlen: 24
217.169.0.0/19 maxlen: 24
2001:8b0::/32 maxlen: 63
2001:8b0:a::666/128 maxlen: 128
2001:8b6::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Oct 2024 20:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:ac:b7:82:cb:e6:b4:b6:dd:0a:81:b4:2a:cd:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Oct 23 13:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaf1e2f1d7d2f9d8f22f111b7ee5f75845533ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:dd:28:a2:ee:34:50:d3:33:b0:82:55:24:
06:fe:0a:6b:f0:a0:e1:8b:41:64:76:a8:a5:a3:d7:
62:59:53:f0:45:83:1a:eb:2e:8e:b1:bb:f6:8a:5d:
56:4b:e6:37:05:8c:1a:4e:07:1c:3f:e2:69:97:d2:
0a:95:03:92:05:f2:f5:1d:90:d2:af:bc:bc:4a:fb:
79:08:2e:72:7c:e6:97:c2:9b:b3:63:b1:82:de:28:
7f:fa:86:0e:74:cd:4a:31:62:cf:ae:1e:25:8f:f6:
47:88:27:3d:4a:2a:2f:e4:c2:9d:5a:44:74:a4:81:
be:96:6b:7f:55:14:3a:27:5b:39:4b:34:fc:f8:5b:
1e:1b:17:52:3f:22:14:d1:51:29:24:90:4a:e2:36:
03:c7:5d:dd:1e:df:a9:fa:59:81:91:c9:fe:53:56:
b8:69:d1:e2:0b:dd:dc:ce:13:cf:4f:cb:eb:2d:6d:
8b:07:c1:00:ed:4a:55:7d:15:44:40:d7:75:64:2a:
29:b0:c3:cc:a9:a0:a4:97:5d:4f:93:a5:21:3b:10:
4c:6c:ee:6e:51:c4:df:c3:8a:f6:99:c8:06:be:76:
e0:bb:f6:f7:e6:01:98:14:fe:86:2e:6b:d1:4f:6a:
f9:3c:e1:dd:00:50:8a:e0:47:e8:ba:bd:e2:12:68:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:E2:F1:D7:D2:F9:D8:F2:2F:11:1B:7E:E5:F7:58:45:53:3C:CF
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/qvHi8dfS-djyLxEbfuX3WEVTPM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.160.0/20
81.2.64.0/18
81.187.0.0/16
90.155.0.0-90.155.111.255
178.238.144.0/20
194.4.172.0/22
217.169.0.0/19
IPv6:
2001:8b0::/32
2001:8b6::/32
Signature Algorithm: sha256WithRSAEncryption
85:11:45:fa:3a:c1:81:c1:73:f3:d8:ce:46:87:28:80:d9:17:
fa:83:84:ca:53:cb:b6:55:e3:f1:41:43:cb:66:ff:0c:29:8a:
98:5d:be:00:f0:af:1e:35:a0:32:ab:00:87:81:b6:c5:d6:c0:
24:5b:97:b0:bd:e3:83:27:6c:98:68:98:eb:23:f4:2b:ff:0c:
d5:67:dc:60:be:f1:ad:09:fc:d3:79:c9:29:2c:7b:56:69:07:
8a:24:bb:20:e0:47:d3:59:83:6e:7c:88:77:7e:e9:4c:b2:d6:
4f:ac:ec:7b:22:05:51:8d:6a:66:a3:0f:08:78:43:29:9a:db:
ca:12:45:af:12:43:67:2a:65:19:97:ed:c4:f2:6b:5f:0d:67:
44:19:f9:95:a5:5e:3a:27:74:c4:36:15:47:e7:8b:37:e2:15:
a0:35:c1:c3:09:50:6e:da:82:8e:a8:b9:19:1f:7a:45:e8:0c:
6c:f7:e6:b3:54:09:6d:9e:d9:a6:1d:86:d4:5c:f6:a7:bc:1f:
92:1c:0a:33:38:72:8b:15:f8:88:7f:a9:df:d8:03:0f:a8:a9:
ed:46:08:45:1c:3a:b7:44:d7:0a:74:6a:d2:f4:ac:3b:ae:d3:
10:a1:a8:c7:e2:54:4f:bc:c3:c2:fc:98:e1:cf:a4:38:56:da:
7f:91:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 00:20:30 2024 by rpki-client on console-ams.rpki-client.org