Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/qEWCAAu5ElvaSget2xGsIQApfbY.roa
File: qEWCAAu5ElvaSget2xGsIQApfbY.roa (raw, json)
Hash identifier: n8UFcImtSnHF9TKLrt0Ql+vmsdTDmufEVHTsL7/Fbp4=
Subject key identifier: A8:45:82:00:0B:B9:12:5B:DA:4A:07:AD:DB:11:AC:21:00:29:7D:B6
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018B5917874A204F3C56DD8CAC17BFEDCD8B
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/qEWCAAu5ElvaSget2xGsIQApfbY.roa
Signing time: Sun 22 Oct 2023 20:33:16 +0000
ROA not before: Sun 22 Oct 2023 20:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.40.0/21 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
2.181.191.0/24 maxlen: 24
2.181.222.0/24 maxlen: 24
2.181.223.0/24 maxlen: 24
2.188.72.0/22 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.59.0/24 maxlen: 24
78.38.25.0/24 maxlen: 24
2.189.160.0/21 maxlen: 24
2.189.168.0/21 maxlen: 24
2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 24
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 24
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.160.0/21 maxlen: 24
2.188.176.0/23 maxlen: 23
2.188.192.0/19 maxlen: 24
2.189.80.0/21 maxlen: 24
2.189.88.0/21 maxlen: 24
2.182.172.0/24 maxlen: 24
2.189.48.0/21 maxlen: 24
2.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 12:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:17:87:4a:20:4f:3c:56:dd:8c:ac:17:bf:ed:cd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Oct 22 20:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a84582000bb9125bda4a07addb11ac2100297db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:51:62:51:6c:5c:9e:56:61:83:d9:75:07:
91:b8:63:aa:80:e7:a4:03:7a:40:ca:e8:4c:d9:7f:
5a:bd:2b:3a:8b:9d:ce:0a:96:bb:b3:af:5f:d2:da:
b3:cb:61:7f:c4:0b:98:16:23:1d:74:10:90:65:9c:
e7:bb:ea:c2:ea:b5:cc:c3:31:68:b7:16:74:44:27:
6b:4f:8c:6c:0f:71:a9:e1:60:22:ee:87:70:a5:2b:
af:9c:1b:b9:51:80:02:49:80:df:9b:b0:26:06:e7:
35:6c:4f:db:ef:00:e0:a8:45:6e:70:94:86:f7:58:
ea:cd:b1:8c:6e:8b:58:64:7e:c2:29:65:00:f0:0e:
16:15:fc:3a:b1:f1:04:62:b4:b4:06:1b:e6:e3:f4:
1a:1a:92:ea:12:0c:b0:a7:a1:6f:22:26:d1:ee:ae:
2c:97:e0:43:56:dd:a8:a3:ef:ec:b5:14:16:63:ae:
90:37:16:a9:e0:17:bc:07:9f:ae:94:08:88:c6:de:
77:5b:c7:81:82:72:36:2f:1b:95:7e:0a:5d:dc:a5:
66:0e:e9:f7:07:ac:6b:4b:ef:43:76:8d:3c:37:7e:
80:7c:69:ca:cb:db:52:28:d4:35:1b:7c:f6:91:f8:
27:ee:ec:f0:7c:e8:60:95:cd:63:2f:6a:ae:83:1d:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:82:00:0B:B9:12:5B:DA:4A:07:AD:DB:11:AC:21:00:29:7D:B6
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/qEWCAAu5ElvaSget2xGsIQApfbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.181.191.0/24
2.181.222.0/23
2.182.172.0/24
2.188.40.0/21
2.188.72.0/22
2.188.160.0/21
2.188.176.0/23
2.188.192.0/18
2.189.48.0/21
2.189.64.0/22
2.189.80.0/20
2.189.160.0/20
78.38.25.0/24
78.38.243.0/24
78.38.246.0/24
78.38.248.0/24
78.38.250.0/23
78.38.254.0/24
78.39.40.0/24
78.39.43.0/24
78.39.46.0-78.39.51.255
78.39.53.0-78.39.59.255
78.39.62.0/23
78.39.153.0/24
78.39.155.0-78.39.156.255
Signature Algorithm: sha256WithRSAEncryption
6d:60:7e:97:c0:b4:63:d2:0a:99:eb:79:bd:21:fa:c8:3b:02:
e6:92:81:37:69:36:a9:23:bf:5e:f3:87:8c:82:5a:61:4b:ff:
f9:db:3d:37:85:5f:8c:ef:3e:d6:0f:03:53:6a:92:f3:90:0f:
5b:a0:75:5f:01:a0:e8:9a:28:55:76:dd:83:b6:13:27:46:29:
89:79:07:8d:31:3c:42:32:38:2b:e7:e4:f7:d1:76:03:41:51:
1f:1c:5b:f0:f8:14:6b:71:c6:40:53:5f:4b:1d:af:ba:77:82:
b6:f5:bf:ad:51:ef:70:89:aa:2a:24:fd:4c:34:0f:aa:9c:b7:
be:8d:7e:31:b6:6a:6d:bc:b7:2d:5f:6a:1b:45:fb:3f:12:bd:
c1:b0:a9:ae:43:0d:2f:2c:29:83:77:f9:54:ff:0f:d0:9e:bc:
39:7c:eb:db:4c:e1:7d:da:ec:fe:8c:5b:e7:ea:9c:74:36:e5:
57:33:33:0f:6e:2f:4e:f5:e6:49:b7:f4:5a:35:77:ff:2f:bd:
19:e8:fc:ed:8e:cf:50:ad:21:37:69:45:56:9f:ec:fd:a5:61:
c7:f2:b0:f6:11:56:f2:23:76:4b:89:b5:00:d2:02:b7:8d:ed:
6c:07:47:44:0a:f3:0e:4c:57:3c:9f:5b:fa:ef:0c:a7:9d:bf:
62:69:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org