Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/q3SDLAiwry4ihT3u9KkDSzDPp2o.roa
File: q3SDLAiwry4ihT3u9KkDSzDPp2o.roa (raw, json)
Hash identifier: i1iY55bBi9nohsSfw9zo1e3j02ul0e8ZJSwLNRdTV9A=
Subject key identifier: AB:74:83:2C:08:B0:AF:2E:22:85:3D:EE:F4:A9:03:4B:30:CF:A7:6A
Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial: 018CB2B1128380D8FA8243B78B2990D1CEBC
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/q3SDLAiwry4ihT3u9KkDSzDPp2o.roa
Signing time: Thu 28 Dec 2023 23:09:58 +0000
ROA not before: Thu 28 Dec 2023 23:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44489
IP address blocks: 109.164.108.0/22 maxlen: 22
109.164.117.0/24 maxlen: 24
109.164.118.0/24 maxlen: 24
109.164.116.0/24 maxlen: 24
178.217.144.0/21 maxlen: 21
45.92.236.0/22 maxlen: 22
185.15.144.0/22 maxlen: 22
91.235.200.0/23 maxlen: 23
89.31.40.0/21 maxlen: 21
109.164.0.0/17 maxlen: 17
185.131.60.0/22 maxlen: 22
178.255.172.0/22 maxlen: 22
185.173.248.0/22 maxlen: 22
178.255.168.0/22 maxlen: 22
178.255.168.0/21 maxlen: 21
92.62.224.0/20 maxlen: 20
2a0b:7f00::/29 maxlen: 29
2a03:3a00::/29 maxlen: 29
2a02:768::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:b1:12:83:80:d8:fa:82:43:b7:8b:29:90:d1:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Validity
Not Before: Dec 28 23:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab74832c08b0af2e22853deef4a9034b30cfa76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:22:c6:6f:08:28:d8:9b:39:58:c4:d6:e9:
fe:15:a0:c7:4a:8f:60:8f:4d:01:a3:6b:24:de:34:
ca:87:4a:e5:87:58:8c:40:45:1f:48:9b:19:22:f3:
12:11:b4:e8:8a:40:aa:83:7a:8a:b1:cf:9c:54:c5:
06:a2:00:40:e5:44:c9:b0:2d:e3:6e:5e:ef:18:cb:
4c:ec:52:8a:eb:15:83:68:2a:22:83:94:14:4e:07:
cf:ab:54:e9:a7:cd:1e:a1:3a:43:a6:cf:e0:1e:e3:
c5:13:9d:cc:4e:f0:04:10:ae:74:bf:33:cc:c7:d0:
9e:0c:0d:31:53:33:2c:e9:47:c8:a9:ca:8f:5d:d6:
80:ee:c2:b3:c8:0f:77:88:74:df:0a:62:45:c4:b5:
65:05:bf:e5:a6:44:a7:c6:23:40:ee:63:b7:1a:be:
30:fa:9a:87:b4:16:28:0b:d2:9b:cf:f3:6b:2f:66:
ae:45:fb:39:7c:3b:7f:3a:14:c6:4c:94:b4:31:63:
5b:e7:cb:99:37:62:ea:81:a3:6a:75:f4:cf:8a:d7:
f1:cb:85:c7:b1:61:33:df:47:dd:36:14:22:bc:10:
fb:db:e5:f6:39:f6:5a:00:80:a9:cc:f0:b3:03:a2:
9b:1d:19:14:96:26:f1:ee:b2:06:25:6a:3c:7a:9b:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:83:2C:08:B0:AF:2E:22:85:3D:EE:F4:A9:03:4B:30:CF:A7:6A
X509v3 Authority Key Identifier:
keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/q3SDLAiwry4ihT3u9KkDSzDPp2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.236.0/22
89.31.40.0/21
91.235.200.0/23
92.62.224.0/20
109.164.0.0/17
178.217.144.0/21
178.255.168.0/21
185.15.144.0/22
185.131.60.0/22
185.173.248.0/22
IPv6:
2a02:768::/32
2a03:3a00::/29
2a0b:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
02:8f:8b:2a:61:ea:68:37:d1:cb:1b:c7:eb:98:a7:a1:56:9c:
84:63:d6:ff:f5:82:c6:36:88:93:f2:8c:3f:0c:01:07:4d:5b:
54:ee:01:ab:d5:13:a0:07:f7:37:1d:9c:f3:0f:03:a1:57:23:
f0:62:2b:da:25:19:76:dc:63:ed:28:57:1c:4a:a3:d3:1b:65:
c3:f4:d4:27:92:13:16:be:a8:f3:a2:c6:ee:26:78:73:b7:bf:
d8:37:cf:da:bb:80:a6:0d:83:b8:63:a5:67:de:5f:cb:10:cd:
d2:01:c7:7c:8c:3f:74:87:f9:32:16:d9:46:19:d6:91:b3:cc:
f3:c6:70:cb:91:e4:a8:21:4b:06:43:5a:77:4a:bf:b1:20:e4:
01:e1:4f:e7:5b:73:2e:cd:1c:91:c1:81:92:a8:e0:bd:6f:69:
73:74:27:5e:3c:9a:62:40:81:85:90:0e:a0:0c:c7:e2:5c:26:
e6:6e:f2:a9:a2:ec:13:e2:a3:54:ba:00:d0:e8:ae:ad:98:7d:
35:0b:36:b2:7d:6f:cd:90:f8:33:6d:8a:d7:76:c1:8e:26:47:
05:05:de:8b:61:4f:8c:c6:de:b2:ef:8d:98:2e:dd:33:f0:07:
39:7d:0b:d3:64:9f:c7:38:9f:27:f9:8e:1f:ca:79:c0:dd:3c:
32:e2:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:26 2024 by rpki-client on console-ams.rpki-client.org