Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/qiREg3O7P7evxdxT0r0vssxbNww.roa
File: qiREg3O7P7evxdxT0r0vssxbNww.roa (raw, json)
Hash identifier: ZpIr1cNVF8rRMDLwLNs3CNLZL//U8/Cz+xLxkT6qwUU=
Subject key identifier: AA:24:44:83:73:BB:3F:B7:AF:C5:DC:53:D2:BD:2F:B2:CC:5B:37:0C
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 018C62AE196FE0E5BA35068A7F861B7EBD1E
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/qiREg3O7P7evxdxT0r0vssxbNww.roa
Signing time: Wed 13 Dec 2023 10:17:06 +0000
ROA not before: Wed 13 Dec 2023 10:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199236
IP address blocks: 194.113.24.0/24 maxlen: 24
185.4.123.0/24 maxlen: 24
185.4.120.0/24 maxlen: 24
185.4.121.0/24 maxlen: 24
185.4.122.0/24 maxlen: 24
45.128.173.0/24 maxlen: 24
195.54.172.0/24 maxlen: 24
195.54.173.0/24 maxlen: 24
91.211.240.0/24 maxlen: 24
91.211.243.0/24 maxlen: 24
91.211.241.0/24 maxlen: 24
91.211.242.0/24 maxlen: 24
2a02:7040::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:ae:19:6f:e0:e5:ba:35:06:8a:7f:86:1b:7e:bd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Dec 13 10:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa24448373bb3fb7afc5dc53d2bd2fb2cc5b370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:2f:3b:0a:f4:ef:49:3a:f9:00:a6:24:51:
1a:f5:7a:f1:00:ec:38:b4:b2:83:c7:45:80:28:1d:
7b:16:81:64:f0:ae:1e:d2:f9:f1:de:4e:73:20:6c:
49:b9:e7:46:07:06:cf:aa:18:e3:ea:b5:db:59:6a:
42:ef:34:ff:fa:69:15:24:f0:91:32:c4:73:8d:aa:
63:e8:73:ed:92:b2:ac:5a:24:aa:8b:1a:15:da:aa:
72:96:eb:b3:52:ed:d2:61:0c:9b:de:58:a0:e3:f2:
da:33:b7:54:a6:98:d1:82:8f:e9:1c:41:9e:01:0d:
5f:53:a0:b2:1e:6d:13:b6:db:99:96:2a:5f:2a:11:
5d:c4:5a:7b:2c:d3:3e:33:1b:68:50:2a:e2:b4:9f:
44:8c:c7:3e:fd:de:e1:34:0b:77:10:6c:93:2b:74:
d9:f0:99:bc:9c:fe:64:92:43:be:7e:17:e1:5d:65:
4f:78:28:07:03:52:c0:f9:5c:1d:b2:4a:ce:c6:8c:
af:ba:90:8e:62:a7:cf:e1:f2:1c:31:91:27:cc:9f:
bd:5f:9c:ef:b6:f6:a9:eb:9b:ca:22:50:c4:11:56:
28:23:c3:37:b4:c9:98:a9:96:3e:47:c7:f6:0a:88:
45:de:f3:e8:54:a1:f8:2d:76:84:e6:79:3e:7d:16:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:24:44:83:73:BB:3F:B7:AF:C5:DC:53:D2:BD:2F:B2:CC:5B:37:0C
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/qiREg3O7P7evxdxT0r0vssxbNww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.173.0/24
91.211.240.0/22
185.4.120.0/22
194.113.24.0/24
195.54.172.0/23
IPv6:
2a02:7040::/32
Signature Algorithm: sha256WithRSAEncryption
4f:c5:77:8e:85:78:6d:1d:7a:98:f3:f7:6f:95:de:4e:a9:e2:
af:14:f0:32:d9:47:ee:9c:d7:31:14:72:6b:73:7e:2b:bd:d9:
64:e3:84:e1:6a:a7:e1:71:6f:7a:e5:50:88:2b:dc:41:21:09:
9b:02:2e:bc:1b:62:dd:9b:47:7d:a0:7f:54:a0:6a:b8:27:6b:
9f:5e:56:4b:bb:d9:29:65:d4:96:7f:61:cf:55:75:1c:4f:2f:
b9:8b:d5:4a:00:7d:2f:aa:0a:05:26:15:6c:6d:66:1b:7e:d4:
53:f7:45:17:f0:6e:8f:69:8a:c9:a8:6b:c9:b2:e2:fa:c2:2c:
1c:f4:87:85:32:08:3c:dc:94:77:3f:59:a8:f5:61:e8:a7:56:
e2:b8:e1:fe:89:23:f9:90:f1:6a:fe:35:7e:ba:c7:2f:bf:85:
8e:22:ae:58:0b:e7:ec:ed:f5:a0:e4:73:31:09:1f:e2:26:c2:
7c:7b:71:e1:17:62:f6:17:6a:94:8a:a8:e1:cd:ba:b4:4f:4c:
87:4a:41:8c:60:8a:f7:9d:cc:cd:c3:08:e0:0e:9e:9a:56:36:
c5:48:bd:86:18:9d:14:d6:b0:49:f2:ae:bb:07:41:50:2c:a8:
c5:27:d5:9e:2c:1a:24:7b:a6:e6:fd:90:52:f5:87:9a:82:6e:
1b:b8:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:51 2024 by rpki-client on console-fra.rpki-client.org