Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/qjCGBJbpX6hkOl8Q9Pk906TP-3o.roa
File: qjCGBJbpX6hkOl8Q9Pk906TP-3o.roa (raw, json)
Hash identifier: CcYglasIgblT7nSlS0LhqjmGvnh8Fi+wIwdrgLYGhzA=
Subject key identifier: AA:30:86:04:96:E9:5F:A8:64:3A:5F:10:F4:F9:3D:D3:A4:CF:FB:7A
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 018DAD23D1D29E20E634F096CF5866BE8B58
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/qjCGBJbpX6hkOl8Q9Pk906TP-3o.roa
Signing time: Thu 15 Feb 2024 14:20:22 +0000
ROA not before: Thu 15 Feb 2024 14:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216188
IP address blocks: 88.218.227.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
2a13:fd40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 23 Feb 2024 14:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:23:d1:d2:9e:20:e6:34:f0:96:cf:58:66:be:8b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Feb 15 14:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa30860496e95fa8643a5f10f4f93dd3a4cffb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:b4:d9:18:39:17:78:98:6f:b2:ae:fd:e3:
ec:74:a5:48:18:e9:ef:6a:9f:8e:db:5b:39:92:54:
43:86:fb:77:af:ad:e9:25:3e:3e:6d:e1:09:b3:5a:
f5:41:eb:36:3b:c5:75:26:be:45:02:ae:b5:a4:52:
49:1c:d5:32:7e:be:65:1c:f5:d8:2b:ca:83:36:52:
44:79:56:44:d1:b3:28:dd:84:9e:e9:70:74:18:fe:
fa:4e:dc:3e:4f:83:20:fc:aa:1f:40:16:8d:46:e9:
8a:27:cd:1d:95:9d:a2:8c:84:a7:35:c7:b9:11:18:
ce:50:d0:f4:36:dc:0e:79:39:2a:ea:55:a2:7d:1c:
ba:95:ed:3f:8a:24:55:a0:df:b2:d2:a6:8e:99:98:
2c:f4:0d:c4:e7:59:01:94:48:81:6f:63:9c:8d:07:
7d:5e:c7:0a:6a:6b:55:74:04:a7:8a:2c:a1:e1:ca:
d6:b7:d1:b1:3c:93:a8:3a:78:49:a8:fb:62:44:b7:
26:03:1b:a3:07:e6:46:eb:db:5e:4d:53:90:a4:02:
43:4b:c6:1a:90:98:b0:7e:81:ea:3d:49:0b:1b:17:
d0:b4:f1:78:5a:9f:be:89:32:8d:e6:97:5f:21:d5:
00:42:43:e5:26:f4:9f:c0:27:5b:57:82:53:31:56:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:30:86:04:96:E9:5F:A8:64:3A:5F:10:F4:F9:3D:D3:A4:CF:FB:7A
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/qjCGBJbpX6hkOl8Q9Pk906TP-3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.227.0/24
91.210.224.0/24
185.245.96.0/24
185.248.140.0/24
IPv6:
2a13:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:e2:3e:ca:94:7b:20:db:c8:c3:f4:ac:ac:0e:fe:20:02:a6:
00:0d:87:4e:75:0e:c6:32:9c:b8:db:24:24:40:01:9d:67:b7:
5f:d6:9b:08:1c:e0:87:1e:8a:c0:77:6e:31:7b:78:9f:30:7e:
55:9d:68:1a:45:ca:1a:a5:82:36:fd:19:65:1b:65:98:f2:d8:
cd:ae:88:80:b1:d3:b4:c8:0b:ac:ef:0e:70:6b:f2:cf:67:97:
95:5b:1c:14:47:30:fa:ec:50:88:5a:04:b5:93:73:3a:30:ee:
fd:66:77:d8:68:e8:cc:86:b6:9e:86:eb:6e:fc:16:af:3f:02:
0d:37:66:fb:89:ce:eb:78:1b:da:3c:2b:ce:08:f3:1c:9f:ff:
54:be:a7:62:ea:06:f5:0c:18:4f:a7:3e:aa:f3:8e:1d:1a:3e:
39:4d:f0:46:98:e2:34:a2:3a:bd:27:c2:9e:52:64:bb:84:4e:
9e:9a:3c:ff:cc:d5:6a:4e:ef:e8:2d:09:a8:99:6b:24:45:33:
92:76:06:62:e1:82:fc:38:7a:3e:fc:e7:43:73:94:8b:ef:42:
d9:67:3a:75:6a:83:65:bf:92:d9:e5:db:b5:7e:0c:a4:62:6a:
4e:1e:93:dd:21:02:ea:86:1c:b2:8a:53:39:7b:55:99:ad:ff:
89:9a:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:22 2024 by rpki-client on console-fra.rpki-client.org