Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q3NE8wpsvn9i87EDy-OW4TECFgM.roa
File: Q3NE8wpsvn9i87EDy-OW4TECFgM.roa (raw, json)
Hash identifier: 8sFshALa36yUpmJNialOn+hQ8dMMu11IHqPsYB5FzSU=
Subject key identifier: 43:73:44:F3:0A:6C:BE:7F:62:F3:B1:03:CB:E3:96:E1:31:02:16:03
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0193795762B3FDA8DC6EE56E15FB4C905270
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q3NE8wpsvn9i87EDy-OW4TECFgM.roa
Signing time: Fri 29 Nov 2024 19:13:10 +0000
ROA not before: Fri 29 Nov 2024 19:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 45.88.144.0/22 maxlen: 22
80.244.15.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 23:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:79:57:62:b3:fd:a8:dc:6e:e5:6e:15:fb:4c:90:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 29 19:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=437344f30a6cbe7f62f3b103cbe396e131021603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:37:7e:b3:48:a7:22:05:f3:c0:88:56:1c:
c4:71:cf:ce:f2:b0:e6:c3:47:04:af:a7:e5:c6:ad:
5d:00:66:59:55:b1:60:95:e9:15:b2:33:3e:7f:87:
ec:65:31:33:e8:90:fb:00:7e:bd:d4:7f:89:95:5b:
22:b7:00:a3:17:b0:1c:b0:4a:a0:25:e0:da:ad:38:
2d:87:66:a4:5d:19:fa:d0:76:f0:8b:7b:4e:87:41:
bf:ab:c5:16:8d:26:b4:74:80:26:38:9b:dd:64:9b:
19:b6:9b:04:43:10:f0:b4:b1:f8:39:3b:6c:94:8d:
77:9f:88:ca:8f:fe:1d:c6:5d:1a:0e:3f:9b:88:9e:
c4:e5:a3:e8:31:33:1c:a8:8a:62:d1:54:f7:ba:4b:
8a:84:10:1a:0c:09:14:b1:e1:e8:58:48:60:5e:70:
8d:19:48:3b:94:4e:dd:b4:e6:08:96:fc:06:1e:ff:
44:39:d1:4b:fc:db:38:0e:a1:34:1a:4c:3e:d4:95:
3e:07:ba:d2:f4:e1:02:3e:59:22:10:fd:29:40:4c:
0b:4a:a2:7d:52:d5:84:98:bf:72:84:e1:4b:38:4a:
0f:7f:fc:01:08:5d:e8:f1:2c:c1:b0:44:a1:5a:e9:
40:a0:af:47:ea:19:86:e4:f8:c8:ea:4d:5f:38:4b:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:73:44:F3:0A:6C:BE:7F:62:F3:B1:03:CB:E3:96:E1:31:02:16:03
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q3NE8wpsvn9i87EDy-OW4TECFgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
80.244.15.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
af:04:e7:4c:03:fc:d0:99:f4:4c:53:83:60:1c:27:1e:50:6c:
31:0f:18:66:8d:a7:7c:0b:e0:7a:0d:43:8d:75:37:a2:92:13:
bf:05:b1:79:69:96:cf:ed:2d:55:0b:d9:95:52:04:89:63:87:
98:73:f3:2e:32:39:e8:ce:ad:b4:c4:ef:d9:18:3f:9a:d7:7c:
96:0f:0c:fa:c1:2f:bc:06:64:ef:62:83:b5:69:74:e9:ff:69:
a3:ae:de:62:63:20:02:ec:96:6a:7e:cb:c6:34:b0:8d:7a:2a:
59:27:76:c9:6f:2b:f7:af:f7:85:f6:8f:b4:20:f4:e8:74:3a:
0c:b3:e1:9a:21:59:99:dc:be:b6:f4:3c:28:2a:24:28:7e:84:
ee:3b:b5:13:33:93:5f:49:56:4c:a3:de:48:88:62:0b:09:2b:
8b:a9:b8:41:c6:b5:2f:90:af:ca:6d:99:70:ca:44:69:24:c0:
dc:7b:74:a7:4d:0a:59:63:83:b9:43:c4:be:4c:c2:15:e6:93:
06:7f:00:74:03:1d:6e:a4:32:e4:1e:57:4d:f2:71:7f:29:bc:
02:3b:79:46:0d:28:b0:44:69:8b:8f:09:18:30:19:d8:e2:dd:
41:9e:01:41:66:9e:80:b4:ee:cb:6d:76:30:f9:70:76:08:94:
5b:56:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:46:56 2025 by rpki-client