Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/cQ_NDnlhCL686NsZz7r6qg6BYNs.roa
File: cQ_NDnlhCL686NsZz7r6qg6BYNs.roa (raw, json)
Hash identifier: 1v+O9vKmMQOuTYhuNd8PM0cT6LfKn3HMFnYIRoUaopk=
Subject key identifier: 71:0F:CD:0E:79:61:08:BE:BC:E8:DB:19:CF:BA:FA:AA:0E:81:60:DB
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 018CC94D5E4CB6A001B3E37C9E90D7A2F460
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/cQ_NDnlhCL686NsZz7r6qg6BYNs.roa
Signing time: Tue 02 Jan 2024 08:32:19 +0000
ROA not before: Tue 02 Jan 2024 08:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49813
IP address blocks: 109.105.128.0/20 maxlen: 20
109.105.137.0/24 maxlen: 24
109.105.139.0/24 maxlen: 24
109.105.138.0/24 maxlen: 24
109.105.133.0/24 maxlen: 24
109.105.135.0/24 maxlen: 24
109.105.144.0/24 maxlen: 24
109.105.144.0/23 maxlen: 24
109.105.144.0/21 maxlen: 24
109.105.146.0/24 maxlen: 24
109.105.147.0/24 maxlen: 24
5.63.132.0/24 maxlen: 24
5.63.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 11 Jan 2024 10:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5e:4c:b6:a0:01:b3:e3:7c:9e:90:d7:a2:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 2 08:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=710fcd0e796108bebce8db19cfbafaaa0e8160db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:21:d6:1f:78:4a:75:0d:5f:dd:c2:38:00:
bf:0e:10:42:71:a4:af:35:2e:15:10:dd:60:63:a5:
62:dd:d0:3b:b3:67:21:35:5f:12:8c:f3:b0:fc:af:
d1:5d:9a:ca:aa:59:0d:d3:5d:0f:a1:0f:43:63:48:
53:45:29:cd:b1:39:5b:1d:cc:51:65:25:21:fe:f3:
a4:7f:00:54:f8:51:05:9b:31:42:f4:64:d3:7c:a1:
92:e0:b2:30:85:ba:82:ff:d6:9d:ab:eb:61:7e:cd:
88:08:54:9a:6b:74:b4:fa:73:ea:a8:e1:40:71:9c:
0c:58:ef:3c:4f:43:ea:00:79:53:d1:78:f3:d8:f5:
d7:93:00:f3:2a:75:36:49:a0:ef:77:14:f3:11:6d:
6f:bb:74:44:06:4d:cd:1b:a1:59:b1:1b:b2:b0:5e:
79:0b:b1:1d:30:7a:7d:6d:c5:f6:10:c4:41:7d:9a:
2d:2a:fa:c4:e8:16:16:c9:19:38:a6:45:82:e3:89:
8d:70:c8:69:e1:dd:0c:fd:57:5b:56:13:da:ef:8a:
db:09:c2:56:e5:c5:23:bc:aa:58:c2:1c:fa:8b:83:
8f:2f:0a:bd:35:98:b8:f9:bc:30:d1:7c:af:77:b5:
b8:8b:49:51:ba:ef:08:09:b4:4e:15:ee:31:84:5e:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:CD:0E:79:61:08:BE:BC:E8:DB:19:CF:BA:FA:AA:0E:81:60:DB
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/cQ_NDnlhCL686NsZz7r6qg6BYNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.128.0/21
109.105.128.0-109.105.151.255
Signature Algorithm: sha256WithRSAEncryption
18:7a:89:d3:76:35:02:30:cd:34:63:da:cb:82:d2:4e:51:7c:
1c:fa:88:76:e7:5b:5c:18:d7:96:b5:c3:c0:eb:16:f0:bb:e2:
9f:40:cd:62:a9:b9:62:c3:42:1f:6a:02:ee:fb:fe:75:cb:51:
5f:ba:af:fe:d5:d8:23:12:dc:d8:c0:3a:57:59:73:90:4a:ec:
d4:78:a0:1b:66:fd:30:9f:57:33:4e:64:40:46:13:a2:19:6d:
3e:8c:96:6c:d7:98:bc:af:56:bc:d2:2d:01:3a:19:c2:d8:bc:
5c:5a:46:e7:b2:b5:f5:19:5f:c6:14:15:1d:f0:a1:18:59:d2:
a2:36:21:a6:d3:ab:58:12:7e:fa:63:98:42:7e:e6:c3:55:28:
2f:c7:cc:aa:01:0f:b7:1e:86:41:3f:fc:a6:96:9d:fa:85:68:
1b:60:1d:34:d1:45:00:4e:07:cb:17:69:64:c6:b7:5f:66:32:
9a:f8:f5:4f:eb:68:e5:4c:ae:9a:40:71:b4:81:aa:5e:3c:34:
e4:d4:52:c9:54:e9:0b:c9:e4:bd:09:be:84:1a:b7:e6:58:fc:
17:87:b1:79:08:77:72:94:67:c2:58:f6:00:da:38:44:46:7b:
d8:29:ef:48:0d:f5:cb:85:00:e8:22:31:f5:f1:b0:9f:9e:3e:
6c:1d:f8:7c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzJTV5MtqABs+N8npDXovRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZWIyM2UyYzVkOWYyYzczNDQ4ODkwNDUwNTgzNWVmMjgw
OWZiM2IwHhcNMjQwMTAyMDgzMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTBmY2QwZTc5NjEwOGJlYmNlOGRiMTljZmJhZmFhYTBlODE2MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJsh1h94SnUNX93COAC/DhBCcaSv
NS4VEN1gY6Vi3dA7s2chNV8SjPOw/K/RXZrKqlkN010PoQ9DY0hTRSnNsTlbHcxR
ZSUh/vOkfwBU+FEFmzFC9GTTfKGS4LIwhbqC/9adq+thfs2ICFSaa3S0+nPqqOFA
cZwMWO88T0PqAHlT0Xjz2PXXkwDzKnU2SaDvdxTzEW1vu3REBk3NG6FZsRuysF55
C7EdMHp9bcX2EMRBfZotKvrE6BYWyRk4pkWC44mNcMhp4d0M/VdbVhPa74rbCcJW
5cUjvKpYwhz6i4OPLwq9NZi4+bww0Xyvd7W4i0lRuu8ICbROFe4xhF6MaQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHEPzQ55YQi+vOjbGc+6+qoOgWDbMB8GA1UdIwQY
MBaAFIzrI+LF2fLHNEiJBFBYNe8oCfs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODIt
ODMzNGUzNjIyMzZkLzEvY1FfTkRubGhDTDY4Nk5zWno3cjZxZzZCWU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODItODMzNGUzNjIyMzZk
LzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDBT+AMAwD
BAdtaYADBANtaZAwDQYJKoZIhvcNAQELBQADggEBABh6idN2NQIwzTRj2suC0k5R
fBz6iHbnW1wY15a1w8DrFvC74p9AzWKpuWLDQh9qAu77/nXLUV+6r/7V2CMS3NjA
OldZc5BK7NR4oBtm/TCfVzNOZEBGE6IZbT6MlmzXmLyvVrzSLQE6GcLYvFxaRuey
tfUZX8YUFR3woRhZ0qI2IabTq1gSfvpjmEJ+5sNVKC/HzKoBD7cehkE//KaWnfqF
aBtgHTTRRQBOB8sXaWTGt19mMpr49U/raOVMrppAcbSBql48NOTUUslU6QvJ5L0J
voQat+ZY/BeHsXkId3KUZ8JY9gDaOERGe9gp70gN9cuFAOgiMfXxsJ+ePmwd+Hw=
-----END CERTIFICATE-----
Generated at Thu Jan 11 15:19:10 2024 by rpki-client on console-ams.rpki-client.org