Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SQ-V0_7xo8coAtFusDeyG2IsJb8.roa
File: SQ-V0_7xo8coAtFusDeyG2IsJb8.roa (raw, json)
Hash identifier: bdjifMhcBWIvTSKkhWH1Pvsp8ZV76VH1zUJF2B3IZD4=
Subject key identifier: 49:0F:95:D3:FE:F1:A3:C7:28:02:D1:6E:B0:37:B2:1B:62:2C:25:BF
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0191B2A9421BC87F754875A05967A19A159B
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SQ-V0_7xo8coAtFusDeyG2IsJb8.roa
Signing time: Mon 02 Sep 2024 12:15:22 +0000
ROA not before: Mon 02 Sep 2024 12:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208258
IP address blocks: 45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Oct 2024 10:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:a9:42:1b:c8:7f:75:48:75:a0:59:67:a1:9a:15:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 2 12:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=490f95d3fef1a3c72802d16eb037b21b622c25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:f4:2f:98:85:37:5c:88:18:69:bf:2f:67:
83:44:4b:b1:42:37:3d:8e:7e:d2:76:fb:16:76:75:
04:79:93:d8:bf:52:a7:f5:ad:b6:2d:29:f4:24:93:
21:3e:0c:10:74:64:ac:36:94:b7:e9:b2:4d:53:6a:
3f:3b:16:b3:cd:12:dd:fc:7b:30:c8:16:ba:ff:99:
42:6c:78:10:bd:34:69:37:cc:00:8c:a7:30:27:9c:
06:0b:9a:fe:52:ce:91:18:32:ff:d6:ff:c5:a4:18:
da:30:e4:d4:14:c3:53:f1:cf:24:ae:1c:dd:8e:42:
3a:b8:aa:d0:41:40:43:4b:33:51:c0:85:8f:c8:ce:
8b:92:96:7f:2e:55:de:3e:60:e6:51:00:57:0f:e7:
52:4d:f3:19:8f:0f:6d:82:ae:69:bf:34:78:7e:6e:
96:d8:ab:8e:ee:70:6a:ba:fe:6e:00:30:a4:36:2f:
a0:97:9e:b9:17:ba:af:c5:94:4a:3f:14:22:58:2f:
24:98:ed:8d:ba:e2:bb:15:d2:23:e2:7b:12:2d:36:
a3:79:47:52:31:3c:38:7f:5e:d7:8b:77:ed:c1:ec:
d9:44:bb:da:a6:e7:d9:97:64:e7:7b:d3:67:d7:91:
5e:ce:e2:7c:30:67:fe:ac:ce:94:a7:1f:30:b1:bb:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:95:D3:FE:F1:A3:C7:28:02:D1:6E:B0:37:B2:1B:62:2C:25:BF
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SQ-V0_7xo8coAtFusDeyG2IsJb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.244.0-45.144.246.255
45.151.156.0-45.151.158.255
185.208.208.0/22
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
0e:34:7f:11:3a:63:3f:e9:27:57:a5:9d:33:cf:d0:ee:31:89:
0f:c3:57:ce:8b:6c:ce:8d:b5:18:3a:d7:c6:46:26:db:b8:d9:
fb:d5:93:e0:c1:3a:6b:e6:1f:7e:e9:b3:86:61:c0:54:d2:19:
c4:8a:ff:32:7a:fa:d3:ae:a1:06:10:6b:8d:86:99:ea:3d:d4:
f7:65:00:ef:11:23:19:d0:c1:71:43:d4:4a:3d:ab:49:70:2b:
7b:1f:c0:3a:c3:22:19:96:63:2d:95:99:ea:f1:ea:4a:36:b7:
19:77:a5:eb:d2:36:8a:d6:4c:4b:e4:53:73:f2:db:e9:4d:14:
d9:bd:b8:ec:21:8a:85:8e:6f:e8:c9:49:c1:46:14:67:64:33:
85:66:a8:10:ef:ae:4d:12:80:50:9f:f1:53:47:eb:e5:3b:71:
ed:03:c1:6c:e0:4b:c8:fd:38:62:92:e1:a2:89:b4:06:c9:f1:
e8:54:3b:31:07:2a:06:53:3d:10:d7:f0:0b:3c:9c:75:0f:09:
8c:c2:9c:75:eb:01:0c:02:18:ed:42:5d:08:f7:b7:95:98:7b:
10:57:8a:24:38:74:15:27:e3:f5:76:60:f7:d7:a0:7d:85:1f:
77:1d:f1:44:ea:04:56:e0:e8:24:61:4c:77:37:aa:6b:ce:f8:
c9:04:04:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZGyqUIbyH91SHWgWWehmhWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjQwOTAyMTIxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTBmOTVkM2ZlZjFhM2M3MjgwMmQxNmViMDM3YjIxYjYyMmMyNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBb0L5iFN1yIGGm/L2eDREuxQjc9
jn7SdvsWdnUEeZPYv1Kn9a22LSn0JJMhPgwQdGSsNpS36bJNU2o/OxazzRLd/Hsw
yBa6/5lCbHgQvTRpN8wAjKcwJ5wGC5r+Us6RGDL/1v/FpBjaMOTUFMNT8c8krhzd
jkI6uKrQQUBDSzNRwIWPyM6LkpZ/LlXePmDmUQBXD+dSTfMZjw9tgq5pvzR4fm6W
2KuO7nBquv5uADCkNi+gl565F7qvxZRKPxQiWC8kmO2NuuK7FdIj4nsSLTajeUdS
MTw4f17Xi3ftwezZRLvapufZl2Tne9Nn15FezuJ8MGf+rM6Upx8wsbuUcQIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFEkPldP+8aPHKALRbrA3shtiLCW/MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvU1EtVjBfN3hvOGNvQXRGdXNEZXlHMklzSmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDBGBAIAATBAMAwDBAIt
kPQDBAAtkPYwDAMEAi2XnAMEAC2XngMEArnQ0AMEALnjUgMEALnkUwMEAbnzcAME
AMKSMAMEAcMaBjCBgQQCAAIwewMHACoLPEAAAQMHACoLPEAACTASAwcAKgs8QAAR
AwcAKgs8QAASMBIDBwAqCzxAABUDBwMqCzxAABADBwEqCzxAACADBwAqCzxAACUD
BwAqCzxA/KYDBwAqDlVAAAAwEgMHBCoOVUAAEAMHACoOVUAAEgMHACoOVUABADAN
BgkqhkiG9w0BAQsFAAOCAQEADjR/ETpjP+knV6WdM8/Q7jGJD8NXzotszo21GDrX
xkYm27jZ+9WT4ME6a+YffumzhmHAVNIZxIr/Mnr6066hBhBrjYaZ6j3U92UA7xEj
GdDBcUPUSj2rSXArex/AOsMiGZZjLZWZ6vHqSja3GXel69I2itZMS+RTc/Lb6U0U
2b247CGKhY5v6MlJwUYUZ2QzhWaoEO+uTRKAUJ/xU0fr5Ttx7QPBbOBLyP04YpLh
oom0Bsnx6FQ7MQcqBlM9ENfwCzycdQ8JjMKcdesBDAIY7UJdCPe3lZh7EFeKJDh0
FSfj9XZg99egfYUfdx3xROoEVuDoJGFMdzeqa874yQQErw==
-----END CERTIFICATE-----
Generated at Tue Oct 1 14:39:06 2024 by rpki-client on console-ams.rpki-client.org