Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/Ql_-ljmC8zAbttHPRY_6ljyXr4Y.roa
File: Ql_-ljmC8zAbttHPRY_6ljyXr4Y.roa (raw, json)
Hash identifier: Yznp7kUQrS0X/vB3Y0V7vhomhnf4boFVPdj9oT7gYBY=
Subject key identifier: 42:5F:FE:96:39:82:F3:30:1B:B6:D1:CF:45:8F:FA:96:3C:97:AF:86
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 019307802FF82F337D1C04610FA430C810B2
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/Ql_-ljmC8zAbttHPRY_6ljyXr4Y.roa
Signing time: Thu 07 Nov 2024 16:41:01 +0000
ROA not before: Thu 07 Nov 2024 16:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47202
IP address blocks: 89.31.224.0/21 maxlen: 21
94.126.144.0/21 maxlen: 21
103.117.124.0/22 maxlen: 22
185.124.124.0/22 maxlen: 22
185.136.52.0/22 maxlen: 22
193.218.156.0/22 maxlen: 22
195.184.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:80:2f:f8:2f:33:7d:1c:04:61:0f:a4:30:c8:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Nov 7 16:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425ffe963982f3301bb6d1cf458ffa963c97af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:71:74:d3:a7:fd:92:7a:af:0f:6d:60:47:
28:28:d6:3e:14:9d:0a:76:be:25:37:d5:eb:bd:47:
20:67:b9:76:b4:5c:64:10:35:49:c4:03:95:9f:81:
e6:88:d0:0b:c4:4f:2d:96:84:96:2e:89:dd:66:d7:
51:c4:33:d6:a6:6d:62:e7:18:dd:6a:4f:d1:3d:68:
97:e3:18:73:b8:66:a1:21:6d:e1:b7:d0:90:d4:0c:
88:f6:7e:83:13:d7:5c:6a:b5:17:cf:b2:4f:05:e5:
15:e2:06:2c:1e:19:52:bc:20:3c:47:bf:0c:8b:de:
40:77:79:ee:f0:d8:b8:5c:b8:58:f9:ea:45:d3:3f:
59:f2:bd:b8:66:7f:22:e1:4c:01:95:17:b1:22:47:
1d:35:60:40:a4:aa:5f:73:a8:9b:2a:4c:fb:c9:60:
b6:c0:70:b5:5d:31:f5:46:aa:99:66:86:1b:63:71:
72:1a:6a:5e:df:1a:02:ad:d3:1a:56:ab:ce:8a:9c:
ca:2d:f3:e8:4e:2d:92:ec:e3:db:83:ec:3c:d2:26:
40:db:c6:28:5c:c6:49:64:39:0d:97:67:b6:55:25:
e8:c8:29:d0:1f:a4:53:85:f9:18:2e:b5:9b:96:6c:
86:29:f4:6a:f2:c9:08:a3:d0:93:41:5d:99:b6:bf:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:FE:96:39:82:F3:30:1B:B6:D1:CF:45:8F:FA:96:3C:97:AF:86
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/Ql_-ljmC8zAbttHPRY_6ljyXr4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.224.0/21
94.126.144.0/21
103.117.124.0/22
185.124.124.0/22
185.136.52.0/22
193.218.156.0/22
195.184.240.0/22
Signature Algorithm: sha256WithRSAEncryption
00:48:df:68:a0:3f:60:ca:98:c3:98:83:af:58:44:6a:6c:bc:
33:e9:0c:61:42:72:b9:4a:48:d6:cf:19:40:f8:a1:e2:77:1c:
be:55:db:e4:72:9a:4d:65:28:0b:e6:b8:18:ae:7f:4d:62:48:
07:68:08:d3:39:8a:9d:87:44:e3:c9:8b:94:a2:f5:2a:4d:99:
1a:9f:ea:7d:f7:f8:38:df:56:2b:8d:2c:1f:ab:8e:5e:27:6a:
f1:43:48:ae:df:9b:72:36:5f:16:54:8d:14:2e:96:cf:43:21:
58:29:b1:9c:ef:85:6e:fa:9f:b1:78:72:09:79:5e:5e:e4:eb:
b1:c7:e1:c8:31:21:66:22:0a:7a:90:6e:93:aa:df:ed:6a:86:
e9:20:d9:a8:7f:a7:ce:58:a8:c5:ab:ab:28:f0:d2:1a:48:46:
09:db:12:c4:c8:f6:fb:e4:1f:cf:e8:63:f8:c5:9b:39:2d:95:
e9:32:11:4f:91:21:64:74:43:32:e2:aa:ed:50:2d:08:93:a6:
dc:7f:7d:2b:0b:e7:69:74:0b:2c:26:5d:e9:21:b7:f0:55:b0:
d5:82:87:f6:da:0a:4d:92:34:e2:21:3f:1a:1a:e1:73:0d:61:
32:9b:26:e4:3a:91:32:6d:84:bf:26:99:52:75:e6:cb:c1:bc:
16:97:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:10 2025 by rpki-client