Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/quGJ0RVPKuFqd3XbpmGVtz5q5WQ.roa
File: quGJ0RVPKuFqd3XbpmGVtz5q5WQ.roa (raw, json)
Hash identifier: dmGfgYTvqlr3B0APjuGPFSPv7QpA6t0i7VVFdNRWhZQ=
Subject key identifier: AA:E1:89:D1:15:4F:2A:E1:6A:77:75:DB:A6:61:95:B7:3E:6A:E5:64
Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial: 019299D6B058E2872B0700EBF437D5BFF784
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/quGJ0RVPKuFqd3XbpmGVtz5q5WQ.roa
Signing time: Thu 17 Oct 2024 09:37:16 +0000
ROA not before: Thu 17 Oct 2024 09:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35575
IP address blocks: 46.149.240.0/20 maxlen: 20
84.19.32.0/19 maxlen: 19
84.19.32.0/21 maxlen: 21
84.19.40.0/21 maxlen: 21
84.19.48.0/21 maxlen: 21
84.19.56.0/21 maxlen: 21
88.211.64.0/18 maxlen: 18
88.211.64.0/21 maxlen: 21
88.211.72.0/21 maxlen: 21
88.211.80.0/20 maxlen: 20
88.211.96.0/21 maxlen: 21
88.211.104.0/21 maxlen: 21
88.211.112.0/21 maxlen: 21
88.211.120.0/22 maxlen: 22
88.211.124.0/23 maxlen: 23
88.211.126.0/23 maxlen: 23
185.25.236.0/22 maxlen: 22
185.152.216.0/22 maxlen: 22
185.219.92.0/22 maxlen: 22
188.127.64.0/19 maxlen: 19
209.42.0.0/19 maxlen: 19
209.42.0.0/23 maxlen: 23
2a02:29d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 06 Nov 2024 13:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:d6:b0:58:e2:87:2b:07:00:eb:f4:37:d5:bf:f7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Validity
Not Before: Oct 17 09:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aae189d1154f2ae16a7775dba66195b73e6ae564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:b1:30:77:f6:21:68:b1:b5:e0:0c:fb:ad:
66:9b:58:6d:af:77:14:93:a1:0f:9f:e4:39:ba:ab:
0a:f2:c5:ea:c9:76:9c:a4:c7:f4:8e:6b:75:00:80:
93:4f:6b:cf:2e:11:d6:18:e9:45:eb:18:7e:d8:b9:
3a:17:f9:2a:b6:24:57:81:03:6f:ae:c7:6d:89:87:
ee:06:73:c9:92:3f:1d:b2:f0:5a:ec:2a:e8:83:d0:
66:02:07:a6:3a:9d:c9:32:b7:0f:09:b0:0b:71:1f:
9a:5c:e7:4a:d4:ef:a5:d2:bc:9c:5e:4f:a9:f7:04:
50:5b:23:b2:14:24:7c:97:15:e3:d0:54:1c:e1:aa:
78:20:85:24:83:d2:51:b2:d5:81:f8:47:20:60:d1:
19:49:2c:23:39:01:ba:c0:94:ac:6d:0d:fe:d5:ae:
6f:65:6e:52:cc:23:11:67:13:68:d3:c9:bd:53:dc:
7c:4c:4c:c8:bd:cf:6e:90:50:24:e0:b3:4a:2d:23:
34:19:3b:42:3f:56:47:70:48:58:78:09:37:4c:98:
ad:a8:50:51:c9:94:a5:90:98:06:83:8f:75:69:55:
9e:e8:2e:1f:08:4a:44:8d:42:0f:45:69:bb:36:90:
b6:9a:3a:c7:ac:c6:8d:a1:39:13:e5:8a:f8:c1:bf:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:89:D1:15:4F:2A:E1:6A:77:75:DB:A6:61:95:B7:3E:6A:E5:64
X509v3 Authority Key Identifier:
keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/quGJ0RVPKuFqd3XbpmGVtz5q5WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.240.0/20
84.19.32.0/19
88.211.64.0/18
185.25.236.0/22
185.152.216.0/22
185.219.92.0/22
188.127.64.0/19
209.42.0.0/19
IPv6:
2a02:29d0::/32
Signature Algorithm: sha256WithRSAEncryption
73:8f:45:b8:30:e7:ba:8c:3a:95:ab:46:20:56:56:31:08:99:
82:8b:3d:26:90:8f:eb:34:da:2f:ba:78:ee:f4:46:ab:69:62:
15:55:15:41:42:26:dc:f9:a4:9a:14:1a:5a:6f:19:4c:8f:e7:
3b:8f:f8:ca:4a:9d:31:a5:da:51:c3:ae:66:88:c1:de:44:5d:
36:fc:b3:82:f6:0a:50:35:79:d4:19:ce:26:7f:a2:79:76:27:
17:78:2a:36:72:cc:a0:ae:1e:00:be:81:04:0f:a0:dc:c6:e0:
4b:13:10:09:6c:15:d6:2b:29:bb:b1:a8:2a:7a:27:12:8c:33:
87:bb:98:40:a8:57:e2:e1:30:52:c7:d1:3d:6a:0b:e0:dd:f8:
28:2d:39:da:06:71:23:1f:57:21:72:85:5c:ca:ff:4c:49:75:
12:47:b1:2f:90:b0:41:d7:27:ad:3b:b6:a5:6a:f2:a0:95:23:
ae:d1:d8:b4:7c:59:dc:06:9b:31:24:16:0f:53:bb:6c:fc:ff:
74:4d:7a:b4:17:6d:ad:43:f5:cc:e0:86:8d:06:8d:1b:a1:69:
cb:c6:bf:e1:f8:b6:36:7e:c7:a8:9c:8e:e9:2e:2f:a8:35:40:
67:45:d3:8e:d9:77:46:f1:cc:69:a8:2c:51:80:aa:af:f5:54:
bf:dc:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org