Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/QZzQcRcWYGKtYggcl6GcOpZLYyM.roa
File: QZzQcRcWYGKtYggcl6GcOpZLYyM.roa (raw, json)
Hash identifier: fAKBx8mkl1LVVZ9UlF6WFAzuKIhz0o2OOsB3wFj38g4=
Subject key identifier: 41:9C:D0:71:17:16:60:62:AD:62:08:1C:97:A1:9C:3A:96:4B:63:23
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 018FCE92A37DB152136716B75159269CE949
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/QZzQcRcWYGKtYggcl6GcOpZLYyM.roa
Signing time: Fri 31 May 2024 12:14:27 +0000
ROA not before: Fri 31 May 2024 12:14:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197036
IP address blocks: 178.23.152.0/21 maxlen: 21
185.19.240.0/22 maxlen: 22
185.228.20.0/22 maxlen: 22
195.28.192.0/19 maxlen: 24
213.173.48.0/22 maxlen: 22
213.173.51.0/24 maxlen: 24
2a02:21e8::/32 maxlen: 32
2a02:21e8:71::/48 maxlen: 48
2a09:2600::/29 maxlen: 29
2a0c:e600::/29 maxlen: 29
2a0c:e9c0::/29 maxlen: 29
2a0d:d040::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Jun 2024 14:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:92:a3:7d:b1:52:13:67:16:b7:51:59:26:9c:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: May 31 12:14:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=419cd07117166062ad62081c97a19c3a964b6323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:cc:b3:e3:26:32:57:8e:23:dc:e9:6b:e7:
24:20:c0:e6:ef:6a:45:32:ba:e3:6c:ac:67:08:f6:
33:2d:f5:19:8f:d2:6b:b1:5d:7d:55:42:5a:e2:b7:
34:7d:e7:41:bf:fc:8e:2d:1c:5c:46:8f:28:15:50:
3a:d7:dc:ed:be:7d:b0:8f:81:3c:d8:e0:42:a5:cf:
0d:4e:58:cc:40:b4:e8:89:e6:21:7e:be:77:5b:0a:
73:71:fe:dc:bd:00:fc:4d:c7:d8:69:e6:0c:4c:47:
c1:2e:05:d1:72:f4:2b:06:47:f7:24:bd:9f:30:0f:
e6:67:3c:b9:86:16:40:33:af:96:4c:84:58:87:df:
15:19:5f:b0:18:b9:ea:a9:1d:80:ed:9f:60:d8:99:
81:d3:b5:1a:b7:3b:85:72:0f:24:ea:2f:cb:47:cf:
4a:bb:82:42:9d:00:63:9d:c2:ff:b0:be:a4:7e:d3:
e1:f4:00:9a:2d:86:50:b3:92:d7:f4:0e:0f:25:5c:
b8:f4:16:0e:b1:49:e9:4c:c3:bf:75:c2:e6:4d:50:
b4:25:9e:e6:b9:37:a7:a4:c3:0e:87:e4:22:ab:ce:
fb:1a:b1:40:ab:7b:1b:ea:76:4b:ea:3d:29:06:94:
61:70:b6:af:d7:7a:e7:81:0a:3a:38:e7:7e:c0:61:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:D0:71:17:16:60:62:AD:62:08:1C:97:A1:9C:3A:96:4B:63:23
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/QZzQcRcWYGKtYggcl6GcOpZLYyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.152.0/21
185.19.240.0/22
185.228.20.0/22
195.28.192.0/19
213.173.48.0/22
IPv6:
2a02:21e8::/32
2a09:2600::/29
2a0c:e600::/29
2a0c:e9c0::/29
2a0d:d040::/29
Signature Algorithm: sha256WithRSAEncryption
96:e6:20:8e:12:c7:63:25:40:19:b3:82:e1:83:19:91:b3:03:
e3:5d:ed:34:78:04:cf:bc:58:7e:dd:10:6b:7e:ba:15:df:ac:
43:31:26:85:5f:a8:69:b8:f1:09:9a:af:fe:49:71:02:49:19:
f3:09:68:f6:7a:de:88:78:45:37:cd:2d:b2:62:aa:74:27:e6:
ed:00:68:a8:67:dc:a0:09:8c:7c:6c:08:f5:e6:29:5c:c7:55:
10:47:5b:d9:bb:8f:44:84:51:06:48:99:18:00:f7:58:4a:38:
15:d6:08:31:90:6a:0d:47:86:b9:c6:62:bc:0a:11:77:b6:08:
c6:7a:45:36:1e:f5:1b:06:75:44:2a:20:16:4c:b7:99:82:08:
a6:12:cb:fb:5d:9d:63:67:db:64:da:a3:f3:81:72:92:47:5d:
46:bf:1f:4e:0e:86:63:30:6a:cc:b2:74:fb:e1:b4:5b:30:10:
28:88:c8:34:e2:1e:6f:03:96:f0:ef:9c:72:6d:25:bf:e6:47:
bf:a3:b3:f8:4d:f1:ee:0d:77:eb:77:1e:23:87:fc:b7:2c:4a:
59:4e:71:ed:78:27:37:4f:40:09:bc:16:90:c9:f2:1d:18:99:
e9:6f:ff:d9:17:54:27:0f:11:99:a6:38:d0:8d:57:c3:88:c7:
62:66:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:48 2025 by rpki-client