Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/QFPjtz2U2oYwXYEokG7ByUwS_6o.roa
File: QFPjtz2U2oYwXYEokG7ByUwS_6o.roa (raw, json)
Hash identifier: Ze2tNLFdaJROM0FAFPJAmk3AWMRKeQTjQKwD3vU48rM=
Subject key identifier: 40:53:E3:B7:3D:94:DA:86:30:5D:81:28:90:6E:C1:C9:4C:12:FF:AA
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018BA36485DD20A7C873F3CA190BF54A8994
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/QFPjtz2U2oYwXYEokG7ByUwS_6o.roa
Signing time: Mon 06 Nov 2023 06:49:15 +0000
ROA not before: Mon 06 Nov 2023 06:49:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43811
IP address blocks: 194.176.54.0/23 maxlen: 23
85.206.140.0/24 maxlen: 24
85.206.141.0/24 maxlen: 24
85.206.142.0/24 maxlen: 24
85.206.143.0/24 maxlen: 24
82.135.217.0/24 maxlen: 24
82.135.218.0/24 maxlen: 24
85.206.148.0/22 maxlen: 22
193.105.146.0/24 maxlen: 24
195.12.180.0/24 maxlen: 24
194.176.36.0/24 maxlen: 24
194.176.32.0/24 maxlen: 24
194.176.33.0/24 maxlen: 24
194.176.35.0/24 maxlen: 24
88.119.222.0/24 maxlen: 24
88.119.220.0/24 maxlen: 24
88.119.221.0/24 maxlen: 24
212.47.123.0/24 maxlen: 24
88.119.246.0/24 maxlen: 24
31.193.192.0/24 maxlen: 24
193.200.124.0/24 maxlen: 24
193.200.125.0/24 maxlen: 24
31.193.197.0/24 maxlen: 24
31.193.198.0/24 maxlen: 24
31.193.199.0/24 maxlen: 24
31.193.193.0/24 maxlen: 24
31.193.194.0/24 maxlen: 24
31.193.195.0/24 maxlen: 24
31.193.196.0/24 maxlen: 24
88.119.180.0/24 maxlen: 24
81.7.105.0/24 maxlen: 24
88.118.143.0/24 maxlen: 24
81.7.107.0/24 maxlen: 24
81.7.106.0/24 maxlen: 24
81.7.114.0/24 maxlen: 24
81.7.115.0/24 maxlen: 24
82.135.132.0/24 maxlen: 24
82.135.133.0/24 maxlen: 24
92.61.32.0/20 maxlen: 32
185.3.231.0/24 maxlen: 24
185.3.228.0/24 maxlen: 24
185.3.229.0/24 maxlen: 24
185.3.230.0/24 maxlen: 24
2a00:1eb8:c004::/48 maxlen: 48
2a02:118:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:64:85:dd:20:a7:c8:73:f3:ca:19:0b:f5:4a:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Nov 6 06:49:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4053e3b73d94da86305d8128906ec1c94c12ffaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:3d:65:a2:43:3d:42:9b:c8:c4:86:54:2b:
d9:cd:86:aa:8c:74:f3:74:45:5a:b5:ba:59:29:2e:
8b:69:91:6d:8a:bf:c8:08:bb:a5:be:f5:a1:0b:0c:
25:89:7b:60:3f:83:4e:f2:8c:5d:fd:99:5a:95:f3:
ff:5d:eb:7a:19:33:89:16:6d:da:9b:60:77:99:4f:
a8:a4:d1:cc:d8:6d:40:d3:7b:f4:10:e5:04:44:af:
fe:7f:c2:7e:07:f1:5f:2a:8d:f3:98:d8:ae:90:66:
19:49:cc:eb:b7:1e:b8:3c:03:5e:c3:7f:bf:a3:8e:
0e:75:20:8f:58:cc:14:fe:b8:60:d7:1b:20:86:83:
f9:fe:ee:7e:e2:e3:8e:14:9b:b7:33:3d:4b:48:a2:
40:d1:0f:21:c4:93:87:9d:53:6a:b7:cf:ce:63:0f:
b4:0e:f6:b5:b7:a4:11:f0:c6:2b:d6:dd:4d:75:0b:
ac:ed:12:b7:e5:eb:5e:88:7c:54:55:d6:76:62:5c:
9f:78:ae:35:ea:a1:26:6d:1c:80:1a:a7:d9:81:6b:
3e:db:ed:91:f3:af:a6:9f:53:b7:01:19:e2:dd:6f:
f1:37:5a:2c:2a:7b:07:c4:48:03:3b:2a:b8:09:c2:
42:0b:fd:14:5e:90:5b:de:07:50:bd:6a:92:16:54:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:53:E3:B7:3D:94:DA:86:30:5D:81:28:90:6E:C1:C9:4C:12:FF:AA
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/QFPjtz2U2oYwXYEokG7ByUwS_6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.192.0/21
81.7.105.0-81.7.107.255
81.7.114.0/23
82.135.132.0/23
82.135.217.0-82.135.218.255
85.206.140.0/22
85.206.148.0/22
88.118.143.0/24
88.119.180.0/24
88.119.220.0-88.119.222.255
88.119.246.0/24
92.61.32.0/20
185.3.228.0/22
193.105.146.0/24
193.200.124.0/23
194.176.32.0/23
194.176.35.0-194.176.36.255
194.176.54.0/23
195.12.180.0/24
212.47.123.0/24
IPv6:
2a00:1eb8:c004::/48
2a02:118:2::/48
Signature Algorithm: sha256WithRSAEncryption
84:bc:e5:df:c9:c5:9b:45:ba:63:51:ba:fc:7a:b3:8b:f4:53:
71:28:cb:81:18:d3:26:c6:95:43:a9:c6:26:be:a3:fb:73:28:
b9:52:b2:72:9e:e7:a2:44:1c:e8:76:15:91:d5:ed:59:a8:7c:
e4:ac:27:b9:d5:d8:36:82:7b:a5:8a:70:0f:21:aa:7a:48:c6:
0a:0b:8e:10:71:a8:26:36:59:b9:4d:4b:b9:bb:54:d2:cd:2f:
f9:8c:7c:61:b2:86:80:79:e6:4e:6f:be:96:ca:45:5e:be:df:
1c:b7:01:7f:5c:2b:72:1e:2f:5f:f5:74:54:f0:b9:62:69:47:
40:a2:28:17:d2:d9:4e:ef:cd:d1:da:2b:77:e4:a2:9e:e0:e7:
f5:97:73:68:cb:61:7e:06:20:0c:89:e1:62:4d:6e:b2:c8:29:
80:06:8b:24:1b:41:61:e1:70:a3:ed:fa:02:98:63:9c:57:45:
05:5d:ce:a1:f6:3b:08:f1:3b:ed:03:fd:20:28:62:34:5e:29:
89:fe:4d:fb:46:8c:53:fa:bc:43:a8:e9:f5:01:ac:2c:ef:98:
5c:d7:e1:d6:e0:b9:3f:c5:dd:bc:cb:9c:f0:c6:be:c6:3d:ea:
ae:4c:79:18:46:ed:b8:c3:b7:26:07:8f:4d:9a:b7:8a:b4:11:
cf:df:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:29 2024 by rpki-client on console-fra.rpki-client.org