Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qqOtGYvfgzfw1Pfl3sP6Oy0MmUs.roa
File: qqOtGYvfgzfw1Pfl3sP6Oy0MmUs.roa (raw, json)
Hash identifier: NJrcqZH1d4Ji8aMnZraflTqxhd+8MghKHUASyKWiGyw=
Subject key identifier: AA:A3:AD:19:8B:DF:83:37:F0:D4:F7:E5:DE:C3:FA:3B:2D:0C:99:4B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53CE4AC489A56733CF0EA8C638BCE2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qqOtGYvfgzfw1Pfl3sP6Oy0MmUs.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 185.254.29.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 17:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ce:4a:c4:89:a5:67:33:cf:0e:a8:c6:38:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa3ad198bdf8337f0d4f7e5dec3fa3b2d0c994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:48:f8:80:47:03:6a:14:7c:c9:80:81:b3:
67:23:61:7b:53:68:18:df:be:ca:5f:96:ca:ca:f9:
f6:67:2e:05:40:38:48:10:32:e4:77:3d:24:29:59:
72:37:65:c6:59:3f:e0:54:3a:c1:c8:b1:0e:ca:e1:
ec:bf:cd:9a:af:0c:73:4a:70:64:80:07:d9:5e:50:
7a:17:b3:fc:99:80:86:c3:f6:90:8f:5c:42:48:f1:
0e:47:c9:84:32:da:1c:48:35:23:4e:ef:30:4c:28:
2d:8e:f5:ad:a1:83:28:bb:29:30:67:b1:52:52:44:
55:7a:3c:f4:d9:e0:38:ec:fd:e8:c5:74:fb:02:ce:
88:51:51:45:80:67:a6:28:22:51:57:dd:22:e4:21:
c6:45:a3:31:ba:bc:3a:bc:ba:65:45:25:c2:21:70:
fb:be:d3:0b:ab:7f:13:83:2e:a8:16:ae:68:20:74:
fa:31:88:16:0e:25:5c:79:05:d2:fe:41:b5:f0:05:
88:9f:01:12:99:68:62:35:14:d4:0d:d3:2d:6b:ce:
05:4d:9e:ad:30:b9:a8:89:32:43:b2:9c:74:23:69:
15:3b:74:13:8b:a9:6e:78:f1:74:66:59:90:3d:4d:
49:1b:e2:27:71:15:dc:6c:ca:76:b9:fc:24:da:1b:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:AD:19:8B:DF:83:37:F0:D4:F7:E5:DE:C3:FA:3B:2D:0C:99:4B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qqOtGYvfgzfw1Pfl3sP6Oy0MmUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.98.61.0/24
185.185.232.0/24
185.243.182.0/24
185.254.29.0/24
193.160.142.0/24
193.223.104.0/23
194.62.53.0/24
194.62.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:10:3a:a4:4a:89:de:1b:22:d4:72:a3:f0:5e:b3:0d:a3:fc:
ad:a9:26:af:3e:81:1a:fe:38:d8:c2:27:22:ca:f9:c9:e4:98:
1a:cb:d3:ce:f9:d0:b8:f8:38:d9:51:39:8a:8f:cf:31:31:da:
70:9e:66:18:21:41:d3:c9:af:e0:fb:39:05:d5:16:a3:d2:bd:
1d:6b:95:da:15:3c:79:87:0b:a5:6e:fe:ae:ef:af:35:10:b9:
1c:fd:82:8f:fd:51:c0:64:0a:f1:e7:e2:9f:ef:10:96:54:b9:
22:17:24:05:7b:b9:98:2c:90:be:23:7a:55:aa:71:de:1e:54:
02:b0:7c:62:05:9f:8d:84:1f:53:bf:31:b6:2a:0b:27:75:4c:
92:86:57:4b:11:51:39:4a:37:73:98:24:aa:22:a8:bd:4e:3b:
54:49:8f:74:a6:2a:13:b3:34:dd:e6:04:60:47:e8:90:11:f5:
af:d9:ba:35:41:fb:f6:ef:a3:d2:49:03:3f:3b:67:99:3a:a4:
72:fa:af:62:ee:4b:88:65:29:58:9f:b1:7c:26:f0:5a:bd:51:
08:3d:96:b4:fe:54:0e:c1:68:95:e7:5a:63:6d:c9:5b:22:de:
63:11:b0:a6:32:6e:82:e6:84:3f:54:19:27:3b:6b:16:e5:69:
0f:50:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org