Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/69-qgIn3jRod2eNTEKhk2GSGCj0.roa
File: 69-qgIn3jRod2eNTEKhk2GSGCj0.roa (raw, json)
Hash identifier: MMD8r3SZqCs19YXdj8aMCqQo+b04j5mUuVR/XmLSWos=
Subject key identifier: EB:DF:AA:80:89:F7:8D:1A:1D:D9:E3:53:10:A8:64:D8:64:86:0A:3D
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018C7C278413A16A138FB109E82AC5611233
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/69-qgIn3jRod2eNTEKhk2GSGCj0.roa
Signing time: Mon 18 Dec 2023 09:00:13 +0000
ROA not before: Mon 18 Dec 2023 09:00:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.55.4.0/22 maxlen: 23
176.96.88.0/22 maxlen: 22
176.103.240.0/21 maxlen: 22
176.116.232.0/22 maxlen: 22
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
64.43.112.0/22 maxlen: 22
178.212.184.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
64.43.124.0/22 maxlen: 22
178.212.188.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Dec 2023 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:27:84:13:a1:6a:13:8f:b1:09:e8:2a:c5:61:12:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Dec 18 09:00:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebdfaa8089f78d1a1dd9e35310a864d864860a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:aa:c2:eb:ef:5c:ce:92:85:2d:5a:0a:46:
b2:76:06:2f:c8:d5:33:c1:1d:e2:8d:af:4c:49:ae:
06:38:39:2f:92:00:df:59:c3:0f:c1:a6:ac:d8:8a:
ce:fb:5c:f2:de:56:3b:aa:83:11:ad:16:ac:11:92:
e2:c0:cb:ff:55:99:cf:03:1c:92:4d:b0:62:72:b6:
11:0c:20:cc:a0:96:ea:cf:24:16:f2:a5:92:0c:74:
9f:b9:ca:a9:bc:aa:39:8e:f7:43:65:70:90:ad:03:
63:c4:c5:e4:f5:c3:0e:80:04:ca:f9:9d:39:cb:61:
b9:d9:fd:10:39:0f:8d:f6:5e:83:c0:4b:51:76:eb:
fc:e3:42:d4:58:83:46:43:8b:53:e0:86:8a:33:16:
2c:ce:43:ac:e5:84:69:fc:21:f0:12:e9:f3:f7:ca:
ff:5e:71:6a:54:8e:c8:e8:9c:13:5f:b2:26:b3:da:
ba:35:b8:20:1e:17:92:e2:51:60:a4:84:84:19:56:
75:fc:60:24:46:72:b9:d1:ad:99:23:c4:07:58:ae:
69:2a:1d:15:53:cc:fc:e4:bf:09:3a:59:4b:fd:a6:
50:01:4d:c1:80:66:ab:1a:5f:fd:b8:1e:0b:39:dd:
22:86:03:de:47:f7:36:7b:3b:e4:74:5d:78:18:29:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:AA:80:89:F7:8D:1A:1D:D9:E3:53:10:A8:64:D8:64:86:0A:3D
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/69-qgIn3jRod2eNTEKhk2GSGCj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.112.0/22
64.43.124.0/22
91.233.0.0/23
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
55:bf:0d:82:e9:ca:27:f7:b5:7e:9b:ef:3c:41:ea:c8:00:54:
05:4a:fe:47:7e:f1:9f:b7:2f:b0:3a:62:96:80:c1:c3:2b:cb:
b7:71:c0:49:fe:1a:ef:7b:dd:ae:c7:5f:93:e3:80:25:6f:ba:
79:63:b8:59:9c:61:75:d3:d2:6b:73:82:fc:23:ca:83:3c:ad:
53:fd:83:15:d0:8d:09:c5:4a:4f:86:fb:94:da:41:f2:6f:d3:
05:c3:c2:45:5a:f6:f9:e7:e2:e3:00:d9:60:5a:0c:83:78:01:
31:76:5a:c8:e9:44:01:29:78:ae:78:2a:cd:3d:72:ec:5c:f9:
b5:c8:9e:99:49:f9:97:38:d9:59:ff:18:46:93:01:34:33:e3:
0d:3e:d4:49:9d:4e:d2:80:d0:c0:37:82:11:63:fd:b9:1a:c6:
78:99:d2:05:4e:b9:6b:58:5e:d2:d1:e8:43:a3:d3:87:69:0e:
08:03:80:d0:66:72:71:e4:2e:6a:f0:6a:55:3a:7c:d3:57:3e:
66:34:0d:4f:f7:25:8b:ae:3b:8f:da:de:f3:a0:ac:7e:21:a8:
97:5a:c3:57:5f:d9:bb:21:d4:62:22:75:64:80:67:cc:7a:61:
d8:c6:eb:44:00:0e:9a:5d:56:02:77:3b:fd:63:3e:53:c6:87:
26:b1:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org