Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/qJ6HwBsdxCgqB9YR8jfBNTyDmfM.roa
File: qJ6HwBsdxCgqB9YR8jfBNTyDmfM.roa (raw, json)
Hash identifier: MqAeUyuTQfaMFkRWHGWi9R3/wgcmlEOXOr5bzRWr/Mc=
Subject key identifier: A8:9E:87:C0:1B:1D:C4:28:2A:07:D6:11:F2:37:C1:35:3C:83:99:F3
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 018DC760B408455C57DF87AC62BD6F054BE9
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/qJ6HwBsdxCgqB9YR8jfBNTyDmfM.roa
Signing time: Tue 20 Feb 2024 16:36:59 +0000
ROA not before: Tue 20 Feb 2024 16:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29180
IP address blocks: 82.132.128.0/22 maxlen: 24
82.132.132.0/22 maxlen: 24
82.132.136.0/23 maxlen: 24
82.132.140.0/23 maxlen: 24
82.132.142.0/23 maxlen: 24
82.132.144.0/21 maxlen: 24
82.132.152.0/21 maxlen: 24
82.132.178.0/23 maxlen: 24
82.132.188.0/23 maxlen: 24
82.132.190.0/23 maxlen: 24
82.132.192.0/23 maxlen: 24
82.132.194.0/23 maxlen: 24
82.132.196.0/23 maxlen: 24
185.238.16.0/23 maxlen: 24
185.238.18.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:60:b4:08:45:5c:57:df:87:ac:62:bd:6f:05:4b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Feb 20 16:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a89e87c01b1dc4282a07d611f237c1353c8399f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:be:e1:9d:81:f7:44:15:65:40:e2:2d:00:
e8:14:82:25:88:94:b5:77:b4:45:cb:7a:b6:ac:98:
9a:5f:ca:59:3e:1a:91:76:f5:1e:c4:3e:fc:9c:40:
7e:ec:96:84:23:78:e1:a6:0a:47:23:ba:1d:4b:61:
b7:f9:8d:b0:0a:9d:33:d8:af:55:bc:87:1d:fb:fc:
6f:c6:73:b4:b0:5f:71:89:96:2e:9d:b6:9b:bd:82:
16:cf:a0:74:a3:6f:3b:58:50:8a:20:09:33:98:04:
36:64:7f:b7:8a:e5:7b:a1:1f:f2:e8:60:cb:cc:93:
74:4d:e2:b5:4a:e9:f3:dd:6e:1a:0c:6f:99:e0:ec:
6c:78:a8:22:66:dc:09:d3:99:db:cb:a9:6f:82:06:
c4:b9:f7:37:cd:84:d4:23:bb:72:63:31:b8:8e:f6:
02:23:27:f7:05:3e:d0:c7:38:e3:02:a0:f5:69:1a:
68:c6:ed:d7:bf:39:60:c0:fd:25:98:d1:27:ed:e3:
30:d5:2f:8f:ea:e5:09:40:30:ff:5f:ef:ae:e7:06:
5f:bc:55:ad:36:5b:d2:3c:a6:7d:98:e4:0a:06:05:
af:e5:cb:b6:13:72:5f:ce:12:5f:6e:a1:bc:0d:31:
8a:2d:65:18:d8:ca:44:7c:23:c8:3b:4b:27:5c:68:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:87:C0:1B:1D:C4:28:2A:07:D6:11:F2:37:C1:35:3C:83:99:F3
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/qJ6HwBsdxCgqB9YR8jfBNTyDmfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.132.128.0-82.132.137.255
82.132.140.0-82.132.159.255
82.132.178.0/23
82.132.188.0-82.132.197.255
185.238.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:92:f4:90:08:ee:2d:8a:18:d4:84:f8:22:3c:b0:2d:0e:38:
06:78:21:0f:8f:e4:d9:06:a3:7a:e0:36:93:de:83:1e:0b:90:
d8:0b:3d:fd:a4:ff:76:6c:d6:98:a2:64:aa:0f:b6:a1:df:b4:
b9:a7:1b:26:74:0c:3b:69:bd:bc:64:ef:3d:90:f9:71:29:d7:
1a:70:2a:70:7a:a7:ae:d1:c1:18:66:26:f1:73:5a:31:e1:25:
7d:c3:48:04:3b:1c:08:a3:a6:8c:42:a6:e3:93:52:6d:73:1a:
bc:cf:66:b9:48:a6:b6:33:6e:f4:35:0e:f3:5b:31:73:4a:16:
71:d9:c8:b5:ea:63:45:07:98:df:07:c6:87:47:89:68:eb:32:
f3:b8:b7:10:02:89:fb:23:d2:b3:8b:3c:79:fd:b7:8b:1b:d0:
03:15:18:48:b7:bd:a3:67:5e:ca:a3:e2:fb:fc:9b:cf:8a:20:
fb:10:5f:1a:e7:0c:b3:fc:1c:83:17:eb:fe:e0:bd:06:e2:bc:
88:91:af:20:eb:3c:f9:65:65:e6:d3:0f:77:35:eb:da:e8:ac:
31:37:7b:3b:e8:23:2a:26:52:c5:72:74:0d:1d:67:4a:5e:84:
3d:35:eb:39:82:d6:b9:7f:df:1b:4b:59:25:6c:77:6f:e9:cc:
52:3e:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:40:46 2024 by rpki-client on console-fra.rpki-client.org