Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/qvDjKMzdd_qo-ZygRPnQhqhkdlk.roa
File: qvDjKMzdd_qo-ZygRPnQhqhkdlk.roa (raw, json)
Hash identifier: jRHTP22pq1SJ1mBuwb2S2GuRQObgsii6K5IqrmBzBcg=
Subject key identifier: AA:F0:E3:28:CC:DD:77:FA:A8:F9:9C:A0:44:F9:D0:86:A8:64:76:59
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 01910D8597EDC22147962901D5D1546F4021
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/qvDjKMzdd_qo-ZygRPnQhqhkdlk.roa
Signing time: Thu 01 Aug 2024 10:39:04 +0000
ROA not before: Thu 01 Aug 2024 10:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 5.32.192.0/18 maxlen: 24
5.36.0.0/16 maxlen: 24
5.37.0.0/16 maxlen: 24
37.40.0.0/15 maxlen: 24
62.61.160.0/19 maxlen: 24
62.231.192.0/18 maxlen: 24
82.178.0.0/19 maxlen: 24
82.178.144.0/21 maxlen: 24
85.154.0.0/16 maxlen: 24
134.0.128.0/18 maxlen: 24
134.0.192.0/20 maxlen: 24
134.0.208.0/21 maxlen: 24
188.140.128.0/17 maxlen: 24
212.72.0.0/19 maxlen: 24
2001:1670:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Aug 2024 10:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:85:97:ed:c2:21:47:96:29:01:d5:d1:54:6f:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Aug 1 10:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaf0e328ccdd77faa8f99ca044f9d086a8647659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:e6:86:b7:ed:b0:44:e1:83:5b:e7:d8:30:
1f:16:88:30:0f:5b:df:28:09:f1:b6:6b:f0:b6:57:
ee:14:14:2b:94:07:13:73:b2:64:6d:39:df:ad:22:
aa:fc:5a:b1:23:52:37:0d:3c:31:77:3b:13:a6:49:
0f:e4:13:60:64:a1:17:87:9f:67:37:5f:ab:8f:e7:
2c:91:a2:6c:3e:8d:34:af:ff:56:a5:8f:b8:e6:49:
66:65:2f:ab:79:ce:00:c0:2a:40:d6:22:60:38:c6:
72:92:fc:8a:cf:32:e6:7c:9e:96:48:c4:fa:3d:74:
c3:da:a5:df:81:68:cc:5b:56:65:f0:f7:d0:cb:0c:
19:2b:57:36:5a:0a:5e:b3:9e:62:93:2a:b8:9d:d8:
85:28:c9:e4:3b:b9:3f:1d:8c:97:c7:16:99:c7:ec:
e3:e8:09:18:81:6c:7c:52:82:0c:cf:c7:7c:cf:a9:
1f:77:47:0e:98:55:f2:24:93:91:a9:72:f7:6c:77:
85:3b:c2:fe:6a:42:fc:ea:71:92:2d:fa:e5:01:ae:
09:6e:5f:58:44:f9:d8:3e:ff:76:45:f9:57:1c:f4:
81:11:45:a7:51:a3:b4:be:ae:68:c8:a1:f3:f2:45:
12:5f:51:c8:5a:b7:05:1e:53:61:30:b6:a5:5f:d0:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:E3:28:CC:DD:77:FA:A8:F9:9C:A0:44:F9:D0:86:A8:64:76:59
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/qvDjKMzdd_qo-ZygRPnQhqhkdlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.192.0/18
5.36.0.0/15
37.40.0.0/15
62.61.160.0/19
62.231.192.0/18
82.178.0.0/19
82.178.144.0/21
85.154.0.0/16
134.0.128.0-134.0.215.255
188.140.128.0/17
212.72.0.0/19
IPv6:
2001:1670:2::/48
Signature Algorithm: sha256WithRSAEncryption
1f:bd:60:95:40:a3:4d:31:f1:17:d2:0f:a6:c0:f4:e0:07:80:
32:39:33:80:b5:7b:1b:37:65:2d:14:e9:d0:c0:84:d3:34:3d:
b4:1d:e9:6d:be:3a:27:16:3a:72:4d:1c:b5:7c:b2:f8:0d:90:
7b:c5:8e:7d:63:b3:ab:fc:6a:0f:64:a8:a3:78:d6:82:54:e3:
38:ef:0d:1a:12:f6:87:4f:6e:70:13:1d:9a:ec:87:f4:a2:19:
86:cc:d4:20:5c:c9:35:d1:12:94:f3:ee:03:89:11:49:e8:69:
65:47:4e:e1:1f:15:f2:80:35:bc:9e:3e:0f:c3:fe:ce:69:0e:
08:5b:0b:a0:64:64:ed:e2:b3:92:e4:56:31:ec:14:ab:06:5c:
e2:d6:04:50:2d:ca:75:4d:a5:e6:00:4f:56:a0:93:17:90:b7:
e2:cc:08:fb:cc:78:17:da:5f:ec:b4:4f:7d:21:06:d6:62:63:
f0:24:00:8f:c5:fb:60:60:e2:a0:24:e6:59:6f:d1:04:53:02:
85:fb:fa:64:b8:a4:f4:6a:d7:bc:96:af:54:f3:c2:fb:7e:b4:
be:e4:d3:cc:b4:4b:b3:d5:67:68:ed:17:60:1e:10:01:0e:26:
54:26:37:d7:ea:b7:44:09:24:75:58:49:9b:e6:49:2f:a7:4a:
11:a9:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:17:00 2025 by rpki-client