Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/qFq-6xYwXhjuVOMjHxnaHkZzTI0.roa
File: qFq-6xYwXhjuVOMjHxnaHkZzTI0.roa (raw, json)
Hash identifier: r7CvnnRmbl14JaGhbu5j7giM4UvGc1d7qEeaYJDiWCU=
Subject key identifier: A8:5A:BE:EB:16:30:5E:18:EE:54:E3:23:1F:19:DA:1E:46:73:4C:8D
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 01856CCADB8D36580E269EAD675760D23FE1
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/qFq-6xYwXhjuVOMjHxnaHkZzTI0.roa
Signing time: Sun 01 Jan 2023 10:05:11 +0000
ROA not before: Sun 01 Jan 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39537
IP address blocks: 185.49.236.0/22 maxlen: 24
109.69.80.0/21 maxlen: 24
185.71.24.0/22 maxlen: 24
45.145.180.0/22 maxlen: 24
185.33.184.0/22 maxlen: 24
94.199.184.0/21 maxlen: 24
195.94.112.0/20 maxlen: 24
185.11.240.0/22 maxlen: 24
151.236.208.0/21 maxlen: 24
94.190.240.0/21 maxlen: 24
185.68.0.0/22 maxlen: 24
93.95.8.0/21 maxlen: 24
185.122.216.0/22 maxlen: 24
31.210.128.0/21 maxlen: 24
37.35.88.0/21 maxlen: 24
185.31.252.0/22 maxlen: 24
87.237.64.0/21 maxlen: 24
2a04:5ac0::/29 maxlen: 36
2a03:25e0::/32 maxlen: 36
2a00:e620::/32 maxlen: 36
2a0a:fd80::/29 maxlen: 36
2a01:500::/29 maxlen: 32
2a01:b280::/29 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:db:8d:36:58:0e:26:9e:ad:67:57:60:d2:3f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 1 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85abeeb16305e18ee54e3231f19da1e46734c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:00:d6:72:8f:ba:bb:99:74:f6:96:77:ed:
95:99:9f:a7:09:eb:d4:ea:90:d5:e7:48:fb:7e:aa:
d2:49:c9:5e:21:e4:f8:f8:8c:78:b8:96:3c:67:c6:
5d:fa:f6:f5:31:97:25:07:ae:64:53:f9:6f:e0:dd:
ab:4a:95:f6:f6:4c:89:2f:5e:a2:38:48:34:23:78:
14:d9:a8:b9:54:40:ea:27:56:ec:07:2b:26:c9:e0:
99:55:c1:99:e9:85:3a:7b:d5:9f:ab:39:4b:c7:2c:
7b:92:dc:4b:b8:47:77:34:5a:4c:51:7d:89:06:24:
c9:04:9e:bc:dd:df:a3:ab:da:84:32:5f:5b:9e:ac:
64:cd:9b:a1:99:46:be:3c:ac:f4:84:95:ef:14:54:
be:96:24:58:78:32:a8:bf:44:41:37:c0:c2:fa:52:
d5:df:6b:f9:24:bd:bd:00:b8:81:e0:0d:c6:4f:a1:
39:5d:e0:d1:7c:37:6e:96:b2:4f:3d:7d:0f:71:cc:
21:31:04:49:1e:62:83:1d:a9:88:fc:33:56:81:d8:
a1:5f:d6:eb:ce:4d:fb:3c:47:9d:78:6b:b1:02:c8:
a2:8b:3b:71:6f:64:4b:99:4a:a7:9d:e6:c6:1f:21:
37:e9:c8:cf:1b:19:85:a0:c7:b4:6f:01:1f:e8:71:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:BE:EB:16:30:5E:18:EE:54:E3:23:1F:19:DA:1E:46:73:4C:8D
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/qFq-6xYwXhjuVOMjHxnaHkZzTI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.128.0/21
37.35.88.0/21
45.145.180.0/22
87.237.64.0/21
93.95.8.0/21
94.190.240.0/21
94.199.184.0/21
109.69.80.0/21
151.236.208.0/21
185.11.240.0/22
185.31.252.0/22
185.33.184.0/22
185.49.236.0/22
185.68.0.0/22
185.71.24.0/22
185.122.216.0/22
195.94.112.0/20
IPv6:
2a00:e620::/32
2a01:500::/29
2a01:b280::/29
2a03:25e0::/32
2a04:5ac0::/29
2a0a:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
8b:72:c2:56:1f:e2:4a:70:99:ab:6d:24:d3:8d:1c:45:ec:47:
be:3c:1c:db:0a:31:43:ee:0e:eb:8e:6c:e3:e8:3e:73:57:83:
fe:76:80:c1:db:e8:b9:70:40:98:da:a0:42:aa:f1:08:e8:10:
3f:ba:df:dd:46:57:c1:dd:0f:64:a1:55:fd:a3:4e:36:9c:a4:
5e:df:4e:3c:15:9e:47:2c:7a:64:f5:ba:d5:2a:08:ad:6b:1c:
4f:0e:07:c2:56:31:47:91:8e:b0:03:d5:3e:14:28:13:fe:dd:
14:ea:82:59:44:d5:45:a3:41:ff:d7:3e:f7:00:f9:02:fe:9f:
59:d6:08:29:8a:33:d5:aa:8c:6d:c7:b7:4f:b9:9c:af:53:07:
27:a7:26:f5:e4:b7:89:25:ab:2c:9e:58:ad:9e:82:24:c4:ab:
42:51:52:67:b7:53:9e:c8:bc:92:cd:d7:6f:7a:a9:20:21:ee:
21:6e:4d:e9:3e:dd:0f:13:50:c1:78:8a:b0:55:4b:db:40:1b:
14:65:20:f9:33:fe:24:f1:54:0a:7d:f9:93:93:ab:70:32:16:
6c:b2:47:8c:5a:f4:28:cc:38:92:a1:44:22:0d:d1:e6:44:5d:
df:23:2c:0e:29:65:6b:58:bb:27:b6:11:cc:04:15:00:be:20:
30:ad:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org