Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/qB74uk5zs5CMmo1EmCWbsUKxmq0.roa
File: qB74uk5zs5CMmo1EmCWbsUKxmq0.roa (raw, json)
Hash identifier: R4Q5s5C7tG8EagHiM/FA1BikaG+liCbrVTtdqKqi580=
Subject key identifier: A8:1E:F8:BA:4E:73:B3:90:8C:9A:8D:44:98:25:9B:B1:42:B1:9A:AD
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01938CE0E8B0958B4C169B1C83CF3F0AC388
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/qB74uk5zs5CMmo1EmCWbsUKxmq0.roa
Signing time: Tue 03 Dec 2024 14:16:10 +0000
ROA not before: Tue 03 Dec 2024 14:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42065
IP address blocks: 91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.95.0/24 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.125.0/24 maxlen: 24
95.161.127.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
95.161.248.0/21 maxlen: 21
185.51.60.0/22 maxlen: 24
2a00:11d8::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:e0:e8:b0:95:8b:4c:16:9b:1c:83:cf:3f:0a:c3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Dec 3 14:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a81ef8ba4e73b3908c9a8d4498259bb142b19aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:82:79:92:c4:8d:31:0f:e2:18:40:36:de:
a9:e0:d6:61:d6:f7:7a:37:be:1e:14:ec:46:4b:b9:
66:96:e7:64:f8:a6:e9:fc:f1:b3:0c:e3:5e:39:f9:
60:a4:a4:cb:3b:33:6d:0c:3a:b0:37:a2:59:44:04:
60:6d:02:8f:cc:db:d9:63:84:a1:5f:fe:bf:6e:67:
25:5e:17:92:3e:5f:25:4c:0b:58:22:fe:d8:91:3e:
a0:7d:d1:e7:23:3a:31:e3:46:a6:21:e4:24:1e:d0:
a2:02:e5:42:29:a2:42:2c:32:77:0e:27:24:af:f0:
5e:8a:b6:b3:0c:79:17:65:c9:92:80:66:dc:f1:ac:
94:b2:b6:d5:54:a6:c9:df:f9:1f:d8:0e:3a:cd:b2:
b6:35:54:e1:9f:93:5d:65:d7:ea:7f:a2:55:be:84:
68:66:b8:b8:00:ee:52:b7:34:c7:3d:e6:fa:67:7c:
c5:73:d7:90:df:81:da:da:e4:28:5d:0c:37:1b:09:
77:b9:0f:cc:fc:8b:b7:80:41:40:a6:78:80:ce:ad:
52:19:49:1e:23:86:a0:f5:dd:21:96:02:de:03:33:
f6:f8:4c:32:f4:50:b3:ab:79:f2:14:55:4d:b7:65:
ab:be:27:3b:c5:79:18:8b:3f:ef:d0:a4:6a:3f:80:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1E:F8:BA:4E:73:B3:90:8C:9A:8D:44:98:25:9B:B1:42:B1:9A:AD
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/qB74uk5zs5CMmo1EmCWbsUKxmq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
94.124.176.0/22
95.140.92.0/24
95.140.94.0/24
95.161.0.0/18
95.161.88.0/22
95.161.95.0-95.161.97.255
95.161.102.0-95.161.105.255
95.161.124.0/23
95.161.127.0/24
95.161.240.0/20
185.51.60.0/22
IPv6:
2a00:11d8::/32
Signature Algorithm: sha256WithRSAEncryption
6d:f5:e9:40:d5:6b:db:04:e2:34:8a:c3:35:5e:da:ec:0d:0f:
0a:16:fb:90:e6:8d:42:7e:2d:4b:c0:81:43:2f:e3:d6:9b:e5:
c4:ae:23:52:4c:c8:81:0d:79:d2:8b:08:be:4a:b7:6f:ce:33:
09:59:2c:d6:2d:88:f5:9d:2c:a5:fe:b7:44:8f:b2:39:33:5a:
b3:d2:b2:ec:73:d9:1b:6b:d6:6e:06:2f:14:7b:93:1e:31:7f:
77:0f:6f:e1:0e:40:85:86:5d:2e:42:1e:4f:a1:a7:8d:58:b1:
92:dc:be:63:d9:50:b8:aa:e7:7b:47:43:97:a7:25:84:51:29:
81:00:65:9f:28:e9:0a:8e:0e:3c:ca:ae:0b:f9:8e:cd:35:1f:
04:68:e2:1b:d0:fc:7d:1c:ed:9d:dc:7b:db:00:a6:bd:b3:77:
ca:64:03:60:36:da:ed:8a:12:28:28:20:30:9b:fa:f7:46:54:
47:28:de:5e:69:d0:5b:05:ec:93:d9:d6:9e:dc:47:ee:97:60:
9b:73:a1:99:3a:57:b7:4c:7f:e7:f3:24:94:93:04:e9:8a:2d:
2a:14:df:52:da:17:3a:ae:93:98:f5:51:a2:6c:8e:a9:f2:83:
2b:da:73:59:8d:89:c2:5d:72:3c:b0:35:b3:ce:c6:a2:22:fb:
1a:7e:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:08 2025 by rpki-client