Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Qq9HTXJb93XFFkNaxe-auTcNuMY.roa
File: Qq9HTXJb93XFFkNaxe-auTcNuMY.roa (raw, json)
Hash identifier: zznJFQAY/HohcCHYLr9Hh9f+FaoybTqXOcw0EFlnPtg=
Subject key identifier: 42:AF:47:4D:72:5B:F7:75:C5:16:43:5A:C5:EF:9A:B9:37:0D:B8:C6
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 019173961A38BA5FCBDE79EA732EC2774039
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Qq9HTXJb93XFFkNaxe-auTcNuMY.roa
Signing time: Wed 21 Aug 2024 06:18:22 +0000
ROA not before: Wed 21 Aug 2024 06:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
Validation: Failed, certificate revoked on Wed 04 Sep 2024 23:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:96:1a:38:ba:5f:cb:de:79:ea:73:2e:c2:77:40:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Aug 21 06:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42af474d725bf775c516435ac5ef9ab9370db8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:f3:da:2b:f5:be:ea:7e:e1:47:6e:93:cd:
11:cb:3e:00:c6:4e:53:00:7a:f9:b5:9d:66:8d:97:
e7:9c:56:44:02:ba:05:11:15:50:06:da:81:56:90:
c3:8e:7c:75:65:12:1f:05:8d:2d:f7:aa:d4:ad:b1:
95:37:e2:54:35:a2:21:b3:a0:e6:bf:3b:4d:62:e7:
ed:0a:45:0f:64:39:8f:b6:68:c1:a0:ba:40:18:de:
1d:8f:b1:02:80:50:31:a8:9d:e2:f7:f0:ff:4f:ed:
e1:72:a0:db:d3:c1:ed:f5:29:b5:bf:44:6f:70:ed:
50:74:a1:b6:14:16:3d:72:4e:79:db:94:fe:6e:8a:
4c:05:69:4d:24:06:d4:53:b2:de:82:ab:e6:04:5b:
4f:8d:94:86:9b:c3:ca:ce:ba:d1:72:4d:50:a8:2d:
d1:ee:9b:7a:8b:2d:95:f8:23:b9:d8:64:23:07:e8:
db:f6:8e:7e:1a:85:4f:9a:ce:cf:0e:50:97:20:3b:
93:f2:18:5a:37:11:6d:2d:d1:2c:db:72:93:31:4e:
b9:95:97:3b:21:f6:bc:c0:19:93:ad:4c:54:14:f4:
d0:8a:89:6a:b5:4c:7d:c6:f4:f1:4d:71:19:da:c2:
17:29:a3:03:c8:c8:77:28:05:92:45:87:da:01:4e:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AF:47:4D:72:5B:F7:75:C5:16:43:5A:C5:EF:9A:B9:37:0D:B8:C6
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Qq9HTXJb93XFFkNaxe-auTcNuMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
Signature Algorithm: sha256WithRSAEncryption
74:ac:ef:1c:5e:95:fd:74:33:1c:1e:ad:e5:f1:f1:64:2c:15:
d9:40:b2:40:5e:f4:5e:9e:3f:c5:d6:3d:c9:6c:a9:83:ed:70:
75:ed:73:43:c6:76:71:92:e5:3d:b8:74:83:96:c9:3a:e9:cf:
3c:ad:f6:d5:30:c1:89:a1:95:d9:85:05:bf:63:03:bc:4f:c9:
79:ee:92:3a:db:44:b3:78:aa:0d:70:cf:4c:e3:37:ff:06:13:
ae:1c:40:a8:41:68:aa:b1:44:2e:41:19:da:bf:e1:82:75:89:
11:9e:f9:00:f6:57:0b:e2:e7:34:95:c8:1f:ea:4d:24:81:bc:
98:3c:4b:ea:5e:ce:a5:14:34:fb:11:81:b0:43:e1:69:54:23:
31:3e:0e:18:d9:d6:8f:36:c1:fe:1a:27:e7:85:40:95:5d:c5:
a6:12:b7:5e:c5:5e:25:67:00:8a:82:45:51:c9:da:f3:e5:de:
69:49:1c:45:d4:44:b8:d2:21:68:ed:92:b1:23:82:df:46:32:
3c:01:b9:65:aa:91:c4:cb:b3:07:4e:9b:0c:84:d7:23:f9:cc:
ec:38:4c:c3:ab:f3:50:17:fd:8c:36:6a:36:f9:b6:03:fd:b2:
34:f0:49:8f:bb:c3:bc:f4:be:03:02:ea:9b:1d:15:8c:53:f0:
07:40:2f:94
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAZFzlho4ul/L3nnqcy7Cd0A5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjQwODIxMDYxODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmFmNDc0ZDcyNWJmNzc1YzUxNjQzNWFjNWVmOWFiOTM3MGRiOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv97z2iv1vup+4Uduk80Ryz4Axk5T
AHr5tZ1mjZfnnFZEAroFERVQBtqBVpDDjnx1ZRIfBY0t96rUrbGVN+JUNaIhs6Dm
vztNYuftCkUPZDmPtmjBoLpAGN4dj7ECgFAxqJ3i9/D/T+3hcqDb08Ht9Sm1v0Rv
cO1QdKG2FBY9ck5525T+bopMBWlNJAbUU7LegqvmBFtPjZSGm8PKzrrRck1QqC3R
7pt6iy2V+CO52GQjB+jb9o5+GoVPms7PDlCXIDuT8hhaNxFtLdEs23KTMU65lZc7
Ifa8wBmTrUxUFPTQiolqtUx9xvTxTXEZ2sIXKaMDyMh3KAWSRYfaAU4mBwIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFEKvR01yW/d1xRZDWsXvmrk3DbjGMB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvUXE5SFRYSmI5M1hGRmtOYXhlLWF1VGNOdU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jAYBAIAATASAwQAueEY
AwQAueEaAwQAwL2dMIHNBAIAAjCBxjASAwcDKhQ/gAAIAwcEKhQ/gAAgAwcDKhQ/
gABgAwcEKhQ/gACAAwcEKhQ/gAEAMBADBgMqFD+ACAMGAioUP4AYMBADBgUqFD+A
IAMGAioUP4AoMBADBgQqFD+AMAMGAyoUP4BAAwYCKhQ/gFADBgIqFD+AYAMGAioU
P4BwAwYCKhQ/gIgDBwMqFD+ArzgDBgIqFD+BWAMGAioUP4JAAwYCKhQ/gmADBgIq
FD+CcAMGAioUP4KIAwYCKhQ/h0gDBgIqFD+HaDANBgkqhkiG9w0BAQsFAAOCAQEA
dKzvHF6V/XQzHB6t5fHxZCwV2UCyQF70Xp4/xdY9yWypg+1wde1zQ8Z2cZLlPbh0
g5bJOunPPK321TDBiaGV2YUFv2MDvE/Jee6SOttEs3iqDXDPTOM3/wYTrhxAqEFo
qrFELkEZ2r/hgnWJEZ75APZXC+LnNJXIH+pNJIG8mDxL6l7OpRQ0+xGBsEPhaVQj
MT4OGNnWjzbB/hon54VAlV3FphK3XsVeJWcAioJFUcna8+XeaUkcRdREuNIhaO2S
sSOC30YyPAG5ZaqRxMuzB06bDITXI/nM7DhMw6vzUBf9jDZqNvm2A/2yNPBJj7vD
vPS+AwLqmx0VjFPwB0AvlA==
-----END CERTIFICATE-----
Generated at Thu Sep 5 01:21:05 2024 by rpki-client on console-ams.rpki-client.org