Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/qCENFKjpcZ8XrIAY0I-qmuO2aKc.roa
File: qCENFKjpcZ8XrIAY0I-qmuO2aKc.roa (raw, json)
Hash identifier: BQKAuTn95+F3HylpG7ZuuwenX7GAE+5sC8YRl1mGpMY=
Subject key identifier: A8:21:0D:14:A8:E9:71:9F:17:AC:80:18:D0:8F:AA:9A:E3:B6:68:A7
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0187A976B355AFAA66F0494C1E675EB3D768
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/qCENFKjpcZ8XrIAY0I-qmuO2aKc.roa
Signing time: Sat 22 Apr 2023 14:55:41 +0000
ROA not before: Sat 22 Apr 2023 14:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6134
IP address blocks: 45.131.179.0/24 maxlen: 24
91.217.160.0/24 maxlen: 24
193.227.103.0/24 maxlen: 24
193.227.109.0/24 maxlen: 24
193.227.114.0/24 maxlen: 24
193.200.149.0/24 maxlen: 24
193.200.152.0/24 maxlen: 24
45.132.238.0/24 maxlen: 24
45.132.239.0/24 maxlen: 24
91.238.207.0/24 maxlen: 24
45.128.146.0/24 maxlen: 24
45.128.147.0/24 maxlen: 24
45.137.11.0/24 maxlen: 24
45.137.10.0/24 maxlen: 24
2a12:a380::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a9:76:b3:55:af:aa:66:f0:49:4c:1e:67:5e:b3:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Apr 22 14:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8210d14a8e9719f17ac8018d08faa9ae3b668a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:fd:7e:f7:30:20:44:e0:5a:2c:69:fd:26:
8b:54:d9:cd:7a:6f:f2:c8:6b:11:e1:89:37:d3:5f:
2b:81:86:ca:6f:36:7e:a6:51:88:cf:26:d5:cd:a4:
11:da:5c:a5:a8:93:0a:c9:84:90:c9:d5:d2:1a:de:
37:8f:00:7c:e8:6d:d2:d2:ec:99:8c:0b:4f:1a:e4:
f3:28:1f:33:01:e1:93:90:4b:04:11:05:f7:b8:1c:
77:77:2c:d2:17:c7:c5:87:4e:9c:bb:a0:6f:56:15:
f6:7b:3e:3b:32:37:99:e5:a2:5c:48:b9:de:78:76:
7e:8a:77:a6:ae:fe:fe:7f:f6:49:8e:c7:d2:4b:82:
82:c0:ea:e6:49:ac:e5:42:d0:59:ad:25:c5:b0:8b:
82:75:4c:6b:4e:38:8a:31:94:d3:58:54:9e:0b:38:
79:b7:9a:ae:fc:d6:af:5d:c0:77:5e:df:72:a6:cf:
af:cc:5f:e9:25:b1:2f:f1:82:64:78:da:b4:6c:e2:
ed:ff:11:20:cc:5f:60:b6:08:5e:6e:c9:35:e3:f3:
b9:35:71:f8:1c:6a:30:67:25:da:18:ee:4d:f4:e1:
0b:07:9f:14:30:7b:55:71:43:1a:2c:98:10:e0:9e:
a9:07:79:a2:71:64:5d:96:c3:46:0d:18:71:4c:e8:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:0D:14:A8:E9:71:9F:17:AC:80:18:D0:8F:AA:9A:E3:B6:68:A7
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/qCENFKjpcZ8XrIAY0I-qmuO2aKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.146.0/23
45.131.179.0/24
45.132.238.0/23
45.137.10.0/23
91.217.160.0/24
91.238.207.0/24
193.200.149.0/24
193.200.152.0/24
193.227.103.0/24
193.227.109.0/24
193.227.114.0/24
IPv6:
2a12:a380::/29
Signature Algorithm: sha256WithRSAEncryption
d2:81:1a:1d:e5:7e:58:73:f4:00:b8:a8:d8:ca:50:8e:04:7f:
a9:f4:1d:d8:14:b1:b0:fc:ca:b4:fa:a3:59:5f:1a:30:02:5c:
3a:4c:12:52:cd:58:b4:ed:58:d7:58:d5:8e:8e:ac:a8:70:81:
7e:d3:64:b2:89:78:3b:2e:8a:36:21:b0:b1:e9:7b:e1:23:17:
80:bf:b0:a9:be:17:f0:74:b9:50:22:be:c5:a6:1f:74:50:2b:
07:f6:3f:26:f5:be:ed:0d:0b:50:b1:31:98:64:3a:5c:04:39:
f0:ea:56:ac:13:7b:60:c5:9f:c2:ba:f5:dc:e1:2f:80:92:75:
08:ae:25:5b:5d:48:94:26:0d:f7:09:e3:d0:fe:fa:4b:8d:c6:
a2:53:7a:b7:c3:b0:b7:5d:aa:f0:2b:7e:de:8f:2d:53:e7:aa:
0b:70:7e:81:a0:4e:96:96:be:91:18:cd:8f:05:a3:c4:97:b7:
b6:dc:24:b2:18:a3:42:e6:2f:ef:f3:51:3b:f5:d5:5b:ec:91:
b5:06:7c:b6:6a:89:1f:59:73:9e:79:ee:fe:a4:42:a4:fd:f2:
a3:99:2c:6d:9c:6c:35:eb:43:99:1c:72:f0:29:f9:a6:5f:e6:
1e:aa:33:0f:98:32:fb:0c:15:94:ae:8f:c6:60:e5:59:cd:80:
74:14:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:13 2024 by rpki-client on console-fra.rpki-client.org