Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/QtUHCuNJNZFT1I2FpijpuVQcOqY.roa
File: QtUHCuNJNZFT1I2FpijpuVQcOqY.roa (raw, json)
Hash identifier: LfgeVAJ7RgBvq5cKXd8chmtzQX04iUN4A/IHHIFAUF0=
Subject key identifier: 42:D5:07:0A:E3:49:35:91:53:D4:8D:85:A6:28:E9:B9:54:1C:3A:A6
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC79452EDC9541D430061EE641B646A18
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/QtUHCuNJNZFT1I2FpijpuVQcOqY.roa
Signing time: Tue 02 Jan 2024 00:30:35 +0000
ROA not before: Tue 02 Jan 2024 00:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49666
IP address blocks: 2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.22.0/24 maxlen: 24
2.188.23.0/24 maxlen: 24
2.188.30.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.153.0/24 maxlen: 25
217.218.67.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
85.185.0.0/16 maxlen: 24
2.185.0.0/16 maxlen: 16
78.38.246.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.177.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 24
217.218.0.0/16 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.59.0/24 maxlen: 24
2.176.0.0/17 maxlen: 17
78.38.0.0/16 maxlen: 24
2.176.128.0/17 maxlen: 17
195.146.63.0/24 maxlen: 24
2.189.3.0/24 maxlen: 24
2.189.1.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.181.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
2.188.187.0/24 maxlen: 24
2.182.0.0/16 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.42.0/24 maxlen: 24
2.189.63.0/24 maxlen: 24
2001:4188:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Jan 2024 17:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:52:ed:c9:54:1d:43:00:61:ee:64:1b:64:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d5070ae349359153d48d85a628e9b9541c3aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:c4:2f:47:13:b1:29:36:1b:0e:ad:76:fb:
d6:45:af:65:63:a8:4d:6b:90:8e:6d:e1:f1:1c:a3:
10:7d:4a:ef:fb:04:96:df:76:03:52:e4:7e:9e:3f:
d4:aa:82:ae:b0:4f:4d:80:72:99:08:5e:5a:5e:50:
4f:c8:24:5c:b8:9c:8b:55:49:df:3d:d1:14:fe:c9:
53:6e:12:93:55:51:a2:3b:e5:f3:c9:63:25:8a:5c:
bb:a6:b5:18:55:58:d3:54:62:a8:e2:1f:2c:0a:51:
7c:62:51:2d:21:1b:80:7c:59:59:ba:44:d2:8e:c4:
f4:05:69:67:74:63:cc:3b:45:6c:65:83:8e:4d:16:
34:68:32:05:8e:93:5f:f3:25:c5:43:45:55:d4:0c:
42:d6:7f:7c:f0:0a:cc:06:b2:74:34:ca:6b:f2:67:
79:4e:e6:e9:c4:45:ae:0d:a9:10:22:bb:74:04:44:
af:21:3d:24:db:e8:e9:e8:97:35:8a:04:52:41:e2:
a3:89:10:07:16:b4:c8:dc:46:e1:16:37:41:65:7f:
58:f3:6d:1b:8d:2f:e9:c2:07:d7:00:17:73:0b:79:
ae:ac:95:8d:59:8c:cd:6b:dd:6e:c7:96:4c:4c:39:
d7:d6:cf:9f:17:ce:a0:7a:4d:16:f7:f0:fb:cb:6c:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D5:07:0A:E3:49:35:91:53:D4:8D:85:A6:28:E9:B9:54:1C:3A:A6
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/QtUHCuNJNZFT1I2FpijpuVQcOqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/15
2.182.0.0/16
2.185.0.0/16
2.188.0.0/15
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.63.0/24
217.218.0.0/15
IPv6:
2001:4188:2::/48
Signature Algorithm: sha256WithRSAEncryption
49:22:7f:3b:68:ef:40:a9:d7:d8:62:69:8c:1d:11:b3:5d:5d:
5a:3e:ba:ff:f2:d2:db:6b:cb:60:0d:91:77:e6:c3:f2:70:a4:
22:fc:13:57:75:5f:45:f5:fb:86:ab:44:f2:d6:71:41:96:41:
8a:b4:3f:fe:69:eb:8a:62:bf:09:0c:ab:69:5b:bd:c7:45:4b:
94:78:a0:87:74:c0:99:0b:2b:e2:5a:d0:55:e9:9c:6a:30:81:
a7:05:89:97:9d:4c:9c:18:dd:23:be:92:7f:73:f3:d0:59:4d:
28:07:c1:35:9c:76:6f:fe:40:ef:0a:5d:c7:ae:14:84:bc:8f:
e0:7c:38:48:cf:15:99:90:70:36:d8:58:f3:01:3e:50:5d:11:
87:41:cc:29:6d:38:12:26:00:88:4d:2d:9f:14:6d:da:3a:ba:
9a:85:30:2c:1d:a3:9e:72:ab:3d:64:10:f5:ee:d8:3d:da:8f:
cf:b2:fd:89:56:09:16:1a:03:c8:ba:21:2a:df:ce:44:f1:db:
fb:02:23:0a:e6:7c:1c:4f:f6:64:1e:74:ba:9d:4a:89:44:fe:
29:e7:b4:67:db:92:d4:24:06:70:1a:a2:d3:d6:4e:bf:95:59:
1e:1a:ab:36:23:b8:8a:9e:a3:e7:3a:3d:70:71:f3:3b:cb:42:
83:01:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org