Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QFTzGX65hsHn2tC00SyijAsUlf4.roa
File: QFTzGX65hsHn2tC00SyijAsUlf4.roa (raw, json)
Hash identifier: vxwdHpXD8S6bZ6Wi2WscYOSyK8EcIT9HJmOsms+pZMc=
Subject key identifier: 40:54:F3:19:7E:B9:86:C1:E7:DA:D0:B4:D1:2C:A2:8C:0B:14:95:FE
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F1011627D5196B445A9FDF725EEF6E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QFTzGX65hsHn2tC00SyijAsUlf4.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201337
IP address blocks: 84.236.137.0/24 maxlen: 24
178.156.75.0/24 maxlen: 24
84.236.184.0/24 maxlen: 24
185.25.198.0/24 maxlen: 24
185.25.196.0/24 maxlen: 24
185.25.196.0/22 maxlen: 22
185.25.197.0/24 maxlen: 24
185.25.199.0/24 maxlen: 24
84.236.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:01:16:27:d5:19:6b:44:5a:9f:df:72:5e:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4054f3197eb986c1e7dad0b4d12ca28c0b1495fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:94:b0:c7:d9:23:cf:98:c2:62:49:77:77:
d6:72:8d:ba:cc:2f:54:3c:f4:9a:0e:96:f5:19:d4:
ef:18:c3:99:93:d7:d9:f0:04:49:6d:5a:21:1d:49:
2c:ce:ab:8b:39:b8:c7:f7:e1:a0:67:14:4a:5a:09:
eb:9d:91:13:0d:f3:cd:b3:10:13:7c:d0:2a:cc:d8:
65:b5:4f:d8:51:9c:9a:26:3f:b5:cf:bc:28:63:24:
59:a9:e6:b9:77:21:78:0f:76:f4:e3:f8:94:a5:a8:
53:37:10:d8:37:08:60:df:1d:67:a3:9c:f3:c1:8d:
0f:04:ed:a7:68:d4:52:38:a2:cf:08:3a:df:f1:48:
ea:5c:a2:b6:e1:ea:92:cc:2f:ca:d4:a2:5d:e8:59:
36:18:a9:29:93:c8:0c:09:80:df:f5:22:25:e3:cf:
be:f0:df:4f:93:f1:3d:04:d7:27:39:e8:fe:53:2c:
e1:26:c7:35:06:c8:30:aa:91:06:35:b9:77:94:40:
d4:08:3b:33:ed:bd:ef:76:3d:a7:4f:99:16:0c:5d:
e5:1b:1d:9b:d8:ff:2f:de:b6:be:de:73:cb:3f:72:
56:29:8f:34:f4:19:6f:d9:70:7d:be:3a:81:43:a6:
28:d2:7f:d6:c6:20:21:9f:4d:f8:4b:14:bd:80:fd:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:54:F3:19:7E:B9:86:C1:E7:DA:D0:B4:D1:2C:A2:8C:0B:14:95:FE
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QFTzGX65hsHn2tC00SyijAsUlf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.137.0/24
84.236.184.0/24
84.236.189.0/24
178.156.75.0/24
185.25.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b1:f3:72:76:4a:0c:30:1a:17:c0:3c:b9:06:81:26:ae:5c:
1f:51:df:5b:cb:25:75:f4:0c:6c:7c:3c:b8:31:7f:82:89:4a:
49:11:b9:7c:9d:6d:b1:33:21:0d:1e:9b:57:a5:f2:09:58:69:
63:42:ec:fc:55:80:ec:7f:1c:8c:e4:c8:07:fe:a6:a7:2d:9a:
29:a1:e9:e3:1d:3c:b4:34:49:ac:37:77:d8:61:74:94:ed:cd:
9d:c1:90:4e:07:26:f1:e6:7f:9a:99:78:cc:1c:15:ff:17:e0:
23:b7:98:6d:3f:01:1d:90:76:b2:27:81:4d:bd:bc:8f:ed:9b:
0c:8d:6d:f3:30:83:be:c5:ec:c4:e6:c6:7c:d9:8a:31:bd:c5:
27:79:80:5a:0c:cf:71:9a:67:91:3b:f0:28:4f:7e:fc:a7:b2:
1f:cc:28:1a:69:3d:68:3b:16:6c:39:12:ec:cc:67:7d:3b:47:
e5:ca:83:64:32:fa:7b:5f:1a:82:41:ff:b9:43:74:89:4d:96:
0f:1a:25:81:07:db:19:a9:cb:61:d7:3c:b1:5a:f3:fc:25:c9:
33:3e:34:c3:09:53:e8:6b:af:2e:ef:d6:52:e9:30:d3:c6:0d:
17:d8:fd:d0:a6:33:4f:79:35:15:eb:5f:30:ef:3a:8e:11:c9:
6c:74:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:46 2024 by rpki-client on console-ams.rpki-client.org