Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Qj2eOYiYICh76x2EdjTth59n5cw.roa
File: Qj2eOYiYICh76x2EdjTth59n5cw.roa (raw, json)
Hash identifier: L1z5g/h1W0WkZFYsaUQuTorGXBvOm7roKx5WpvmZsNg=
Subject key identifier: 42:3D:9E:39:88:98:20:28:7B:EB:1D:84:76:34:ED:87:9F:67:E5:CC
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01921F6F6BD5EB14150E4088BC81784ED5C5
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Qj2eOYiYICh76x2EdjTth59n5cw.roa
Signing time: Mon 23 Sep 2024 15:10:48 +0000
ROA not before: Mon 23 Sep 2024 15:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:6f:6b:d5:eb:14:15:0e:40:88:bc:81:78:4e:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Sep 23 15:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=423d9e39889820287beb1d847634ed879f67e5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:86:05:68:11:c3:10:bf:a3:5a:36:90:e8:
f7:37:04:41:f3:89:9c:f5:49:78:0c:a9:c0:e9:90:
f6:fc:9e:c3:84:7b:35:a8:3a:a8:bd:0f:dd:87:ba:
a8:73:0b:83:ee:00:2c:c1:65:0d:40:a3:c1:9a:58:
91:45:c5:26:86:76:a7:0b:ce:63:4f:7a:2c:92:14:
a3:85:db:9a:1f:94:97:55:4b:2a:f9:df:11:13:1a:
ad:b4:8d:90:54:11:f0:51:0b:08:69:0d:0a:62:31:
ec:a2:14:40:20:fa:80:ea:c1:58:bb:6d:33:b4:d3:
b1:05:9d:72:4a:7e:5e:cc:1f:f7:70:8f:8e:34:f1:
d3:27:f3:a7:01:a9:4f:ce:22:d1:e1:b2:b6:07:48:
0b:83:1a:e1:7c:6e:52:9f:63:9f:61:31:1f:a5:0e:
b1:66:f1:d5:57:1a:d9:3c:41:d9:bf:43:e4:46:4f:
f4:7a:2d:b4:ab:c2:b5:65:b9:8d:13:eb:91:45:df:
4c:7b:42:55:fe:19:7f:a8:90:7c:a2:a2:27:e7:45:
96:11:ae:4d:1e:bc:f1:4e:75:fa:a7:db:66:1e:32:
e5:1f:7a:3b:e3:d0:45:e5:b2:06:be:0e:de:a0:67:
e0:29:b0:36:1c:57:22:bf:f4:e6:56:b1:51:c5:c1:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3D:9E:39:88:98:20:28:7B:EB:1D:84:76:34:ED:87:9F:67:E5:CC
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Qj2eOYiYICh76x2EdjTth59n5cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.43.45.0-89.43.46.255
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.215.95.0/24
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
b9:61:e0:d8:99:50:0e:ea:9f:9e:cb:b2:5e:98:7e:9c:55:4d:
86:d2:ad:65:80:b7:fc:d9:ee:fe:93:e7:d4:36:ca:74:bf:07:
6d:26:74:37:78:77:06:c5:33:0d:33:f5:39:f3:50:40:90:9b:
06:33:c0:09:37:b2:96:f6:79:0c:a9:7c:32:d3:06:84:88:f9:
ba:ee:ee:95:e1:4c:1a:e9:22:14:56:02:42:3e:e1:06:50:e8:
eb:40:59:84:f9:35:0a:2a:d2:0b:03:3a:21:15:43:d1:81:05:
b1:de:41:44:1e:cd:50:87:40:c1:f7:39:8d:b4:f4:18:d1:3e:
72:28:2f:3f:56:b5:c2:e9:ac:4f:c2:38:cb:7e:d1:1c:34:d1:
1f:8a:05:6e:db:b2:79:59:62:cb:15:31:f7:7b:f4:41:7e:1e:
88:6e:03:01:63:24:54:5d:61:af:c7:e3:d5:96:73:44:b4:4c:
fb:36:40:a9:de:fd:6b:f7:32:ee:39:90:0d:3d:1e:96:9a:bd:
1b:bc:81:34:6f:c0:61:c8:26:21:ff:34:90:f6:7a:c5:45:81:
e3:00:15:4e:d0:23:79:03:8f:48:7d:06:20:ad:98:c6:2f:06:
fa:1c:4f:94:ce:41:23:66:23:bb:45:50:05:35:d8:2c:f3:75:
27:d6:c9:ba
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgISAZIfb2vV6xQVDkCIvIF4TtXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjQwOTIzMTUxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjNkOWUzOTg4OTgyMDI4N2JlYjFkODQ3NjM0ZWQ4NzlmNjdlNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxmGBWgRwxC/o1o2kOj3NwRB84mc
9Ul4DKnA6ZD2/J7DhHs1qDqovQ/dh7qocwuD7gAswWUNQKPBmliRRcUmhnanC85j
T3oskhSjhduaH5SXVUsq+d8RExqttI2QVBHwUQsIaQ0KYjHsohRAIPqA6sFYu20z
tNOxBZ1ySn5ezB/3cI+ONPHTJ/OnAalPziLR4bK2B0gLgxrhfG5Sn2OfYTEfpQ6x
ZvHVVxrZPEHZv0PkRk/0ei20q8K1ZbmNE+uRRd9Me0JV/hl/qJB8oqIn50WWEa5N
HrzxTnX6p9tmHjLlH3o749BF5bIGvg7eoGfgKbA2HFciv/TmVrFRxcGxpwIDAQAB
o4ICcTCCAm0wHQYDVR0OBBYEFEI9njmImCAoe+sdhHY07YefZ+XMMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvUWoyZU9ZaVlJQ2g3NngyRWRqVHRoNTluNWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwYgQCAAEwXAMEAFXMfQME
AFZqUAMEAFZqaAMEA1kiCDAMAwQAWSstAwQAWSsuAwQAWSzRAwQAXXGeAwQAXXI3
AwQAXXJjAwQAXXKrAwQAvNUSAwQBvNdIAwQAvNdfAwQAvPAOMA8EAgACMAkDBwAq
BbaAAAEwDQYJKoZIhvcNAQELBQADggEBALlh4NiZUA7qn57Lsl6YfpxVTYbSrWWA
t/zZ7v6T59Q2ynS/B20mdDd4dwbFMw0z9TnzUECQmwYzwAk3spb2eQypfDLTBoSI
+bru7pXhTBrpIhRWAkI+4QZQ6OtAWYT5NQoq0gsDOiEVQ9GBBbHeQUQezVCHQMH3
OY209BjRPnIoLz9WtcLprE/COMt+0Rw00R+KBW7bsnlZYssVMfd79EF+HohuAwFj
JFRdYa/H49WWc0S0TPs2QKne/Wv3Mu45kA09HpaavRu8gTRvwGHIJiH/NJD2esVF
geMAFU7QI3kDj0h9BiCtmMYvBvocT5TOQSNmI7tFUAU12CzzdSfWybo=
-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:29 2024 by rpki-client on console-ams.rpki-client.org