Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/q8BebRGs6N5xfMRWJXogOqYgfas.roa
File: q8BebRGs6N5xfMRWJXogOqYgfas.roa (raw, json)
Hash identifier: g6Sm4qAqL3mJCgELZDNOQY/1yurJ3JT7aT3qsynutQA=
Subject key identifier: AB:C0:5E:6D:11:AC:E8:DE:71:7C:C4:56:25:7A:20:3A:A6:20:7D:AB
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 0186DED73F741B6A6FD812E49E58E2C2ACBC
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/q8BebRGs6N5xfMRWJXogOqYgfas.roa
Signing time: Tue 14 Mar 2023 06:38:13 +0000
ROA not before: Tue 14 Mar 2023 06:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9145
IP address blocks: 92.252.0.0/17 maxlen: 24
212.95.96.0/19 maxlen: 24
212.6.64.0/18 maxlen: 24
85.16.0.0/16 maxlen: 24
95.33.0.0/16 maxlen: 24
85.8.64.0/18 maxlen: 24
213.252.128.0/18 maxlen: 24
37.138.0.0/16 maxlen: 24
82.149.160.0/19 maxlen: 24
90.153.0.0/17 maxlen: 24
89.166.128.0/17 maxlen: 24
213.168.192.0/19 maxlen: 24
80.66.0.0/19 maxlen: 24
62.89.160.0/19 maxlen: 24
213.183.160.0/19 maxlen: 24
91.96.0.0/15 maxlen: 24
31.150.0.0/16 maxlen: 24
80.228.0.0/16 maxlen: 24
87.245.0.0/18 maxlen: 24
89.233.64.0/19 maxlen: 24
31.184.0.0/18 maxlen: 24
213.182.96.0/19 maxlen: 24
91.248.0.0/15 maxlen: 24
31.187.112.0/20 maxlen: 24
213.170.160.0/19 maxlen: 24
178.142.0.0/16 maxlen: 24
188.118.128.0/18 maxlen: 24
2a02:8200::/27 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 Mar 2023 08:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:d7:3f:74:1b:6a:6f:d8:12:e4:9e:58:e2:c2:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Mar 14 06:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abc05e6d11ace8de717cc456257a203aa6207dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:b3:53:a8:28:80:12:22:1b:df:c1:92:96:
3c:3d:6d:e5:70:81:f4:f4:0a:69:62:b7:79:9b:4b:
ab:df:4e:27:b8:8d:4d:2a:74:11:37:0f:22:ca:a6:
bd:a8:f4:a4:28:02:8d:4d:9e:c1:6b:20:77:88:ce:
80:f2:05:69:04:a5:50:99:63:d1:6d:ac:d9:e4:08:
3e:53:51:bb:f9:69:09:a4:a3:32:ed:4c:d8:7b:de:
bc:7b:70:b9:54:bc:a7:8a:ed:b8:ef:b0:88:c9:ef:
d6:f1:45:45:02:19:1d:c0:60:f9:cf:7d:b0:a5:8d:
60:98:12:88:60:9d:c7:88:3d:86:28:a4:87:f8:22:
70:86:d2:d7:c1:b1:80:98:40:6e:02:fe:09:1d:b9:
7b:fa:f6:0d:a9:35:7f:05:4e:8f:44:f6:79:dd:90:
61:01:61:e3:f6:76:13:d2:c7:ff:a4:03:45:af:49:
66:2d:07:04:e9:8a:4c:1d:c0:46:d8:38:b7:07:99:
d8:71:49:9c:a0:cf:ee:fd:61:ea:50:c4:ed:57:e3:
5c:cc:67:09:c5:52:50:7d:59:e6:5d:0f:38:f3:80:
7d:f9:f8:5b:08:8d:fa:1a:4b:6f:b2:b9:fc:84:a6:
ac:ee:2d:12:fa:14:97:64:c6:7a:2e:d8:7f:3d:1a:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:5E:6D:11:AC:E8:DE:71:7C:C4:56:25:7A:20:3A:A6:20:7D:AB
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/q8BebRGs6N5xfMRWJXogOqYgfas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.0.0/18
31.187.112.0/20
37.138.0.0/16
62.89.160.0/19
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
188.118.128.0/18
212.6.64.0/18
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
213.252.128.0/18
IPv6:
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
41:09:ce:b8:8b:ae:0e:e4:17:d9:fb:50:a4:80:9a:15:68:ee:
d3:87:31:3d:a8:c2:24:c5:b9:51:5c:d9:0a:24:fe:28:d4:4e:
5c:22:71:a5:84:0c:a9:30:c3:9a:71:1c:ad:08:95:bd:db:12:
1a:74:9a:68:54:be:9b:ad:e6:6a:7f:8f:5b:7d:1d:7c:3e:ea:
55:c2:e4:16:87:f4:cd:3f:a1:1a:63:6b:e7:44:30:0b:08:4a:
f3:cc:35:29:f4:c8:f1:80:94:9f:77:28:75:a3:49:7d:3e:49:
3d:62:83:fc:2c:0c:71:77:01:e7:91:0a:60:bb:40:5f:39:f5:
8f:0e:2e:a6:97:84:c7:a0:9e:b1:83:e2:b5:64:be:10:a6:37:
2f:4d:bf:43:bc:4e:ca:6f:2f:48:99:6b:02:07:eb:3d:7e:80:
49:ec:62:40:c9:ba:de:d0:d9:df:23:80:d5:72:61:fb:e0:22:
13:10:a3:ad:21:17:a0:2a:29:3e:d0:9e:44:1a:88:fa:67:52:
ad:ff:0f:ea:85:a7:03:46:1b:97:fd:d5:21:60:17:93:ca:36:
36:9d:49:84:8d:24:49:6a:3d:8b:99:03:fd:05:4d:12:15:f7:
5a:de:cd:4c:ef:78:b3:f3:7c:84:0e:89:b0:af:27:ca:64:96:
b6:39:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org