Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QziQ-dkjt6pOSptJAQNA1Bs8NQA.roa
File: QziQ-dkjt6pOSptJAQNA1Bs8NQA.roa (raw, json)
Hash identifier: Spa47B+tHArH5lyjNb+DFQ4j8Oy0T1bjoSvAEl03058=
Subject key identifier: 43:38:90:F9:D9:23:B7:AA:4E:4A:9B:49:01:03:40:D4:1B:3C:35:00
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A268CDBCCF440E5DB9AB4827E6633AB18
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QziQ-dkjt6pOSptJAQNA1Bs8NQA.roa
Signing time: Thu 24 Aug 2023 07:58:00 +0000
ROA not before: Thu 24 Aug 2023 07:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28964
IP address blocks: 178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
178.253.232.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.219.4.0/22 maxlen: 22
178.219.12.0/23 maxlen: 23
178.219.15.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:8c:db:cc:f4:40:e5:db:9a:b4:82:7e:66:33:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 24 07:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=433890f9d923b7aa4e4a9b49010340d41b3c3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c2:f6:29:c4:df:db:c5:5f:c1:e6:2c:1b:f7:
7f:7e:53:42:aa:40:6a:d6:4f:11:85:53:f5:a9:26:
3f:86:07:27:0c:43:34:bb:ee:04:62:b6:c7:52:7e:
e9:0f:d9:45:b4:90:9a:d9:fa:1c:e9:71:c8:5f:ff:
48:dc:75:58:18:47:fd:ca:65:4f:37:b0:49:7b:ab:
28:ba:fb:8f:1a:d0:b4:01:8e:ae:c4:fc:e3:8a:8d:
c2:f2:23:5c:0a:5f:25:56:b7:5d:6a:5a:53:e9:87:
b0:b1:b4:d2:a2:e1:aa:b6:e4:21:c2:e6:51:ae:84:
fc:13:64:5a:bf:5c:17:d3:ff:51:2b:47:61:b9:b0:
e0:7b:51:2b:da:f2:bd:4a:79:f8:2a:66:95:a9:aa:
9c:a8:0a:1d:06:42:e2:53:bc:38:df:26:b8:23:e2:
48:86:29:99:52:bf:ae:fa:5f:d2:3c:7e:23:4e:7b:
72:76:69:a9:a2:de:95:72:1e:33:ad:1a:ba:9d:6b:
81:31:24:32:d6:42:b7:8a:2c:fb:d7:f1:16:f5:ca:
f3:ed:67:c4:31:24:ad:58:d3:7c:47:db:f8:e6:49:
d3:3b:74:b2:c4:81:83:2f:0d:3e:09:10:c6:d4:88:
e7:08:3c:69:b3:ba:bd:0e:18:a6:f4:b9:bb:ef:56:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:90:F9:D9:23:B7:AA:4E:4A:9B:49:01:03:40:D4:1B:3C:35:00
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QziQ-dkjt6pOSptJAQNA1Bs8NQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.39.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
178.219.2.0/24
178.219.4.0/22
178.219.12.0/23
178.219.15.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.220.0/23
178.253.232.0/24
178.253.238.0/24
178.253.244.0-178.253.246.255
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.199.255
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.2.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7c:a2:8c:86:ed:13:92:73:7a:ee:12:22:c6:c8:c4:dc:4a:
bc:a4:1f:05:55:75:37:c2:c9:6d:76:5c:60:eb:1e:b7:e7:db:
e9:1d:9a:eb:35:45:ae:12:ba:3b:2c:1f:e9:d2:60:1a:df:08:
82:46:9f:f8:1d:a0:37:a1:b8:04:c7:c9:ff:cc:f4:4b:dd:61:
b2:36:3b:7e:ae:4d:d6:ba:77:5c:12:54:bb:9d:54:86:8f:14:
04:0c:55:42:04:b5:7a:2b:7e:e2:43:7f:6e:99:35:68:dc:d3:
d9:a6:89:5c:d9:d2:eb:ce:fb:9e:60:ed:12:7d:db:6c:3f:fc:
82:f6:4d:85:79:39:ee:12:40:69:ad:6b:ad:0e:94:7a:60:b7:
45:12:81:92:b8:f6:6c:a9:76:34:e5:b7:20:48:2a:07:32:da:
0e:95:73:61:86:f5:45:a8:ad:d5:68:88:66:1c:92:5d:15:7b:
8b:1d:75:8e:48:af:ce:5f:8c:bb:56:b7:db:0f:07:32:36:7a:
4f:c9:20:80:2f:f0:6f:c7:dc:03:51:b3:c7:37:f1:3f:22:2f:
ee:c9:e9:c4:74:a9:94:66:66:10:8a:93:c9:8e:31:14:c7:d8:
d7:29:df:c2:9d:5d:63:8b:d8:78:5b:75:51:e0:c8:cd:d3:31:
16:91:bc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 08:56:08 2023 by rpki-client on console-fra.rpki-client.org