Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/qGbaGQchdrAfMw9NbeX23VmqrBo.roa
File: qGbaGQchdrAfMw9NbeX23VmqrBo.roa (raw, json)
Hash identifier: 5+CbKzy5wEcT5AYFbvV7o/1gzTcPYmITIGWDTYKQhnY=
Subject key identifier: A8:66:DA:19:07:21:76:B0:1F:33:0F:4D:6D:E5:F6:DD:59:AA:AC:1A
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 018CC492F9541ECD3161A1BE789219805EFD
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/qGbaGQchdrAfMw9NbeX23VmqrBo.roa
Signing time: Mon 01 Jan 2024 10:30:15 +0000
ROA not before: Mon 01 Jan 2024 10:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
178.236.70.0/23 maxlen: 23
178.236.76.0/22 maxlen: 22
2a02:1610::/32 maxlen: 32
2a02:1610::/56 maxlen: 56
2a02:1610:1:1000::/56 maxlen: 56
Validation: Failed, certificate revoked on Wed 24 Jan 2024 15:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f9:54:1e:cd:31:61:a1:be:78:92:19:80:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jan 1 10:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a866da19072176b01f330f4d6de5f6dd59aaac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:ca:60:14:49:59:f0:7d:89:a5:10:f8:0a:
78:11:46:10:5e:17:6a:37:5c:5c:ee:77:bf:d7:8c:
ed:04:ee:2d:46:7c:b7:57:24:33:9c:87:20:83:83:
6a:88:63:60:3e:97:09:0d:a1:56:83:17:27:67:b8:
d9:64:db:05:1f:a8:07:d3:d1:ae:4b:14:33:4f:dc:
0e:fc:81:c3:5f:e6:ea:22:41:98:14:a9:28:f3:62:
af:60:87:16:85:ed:a8:17:1b:5a:3b:5a:65:fd:5c:
40:8b:bf:32:ad:4b:46:0c:29:a9:f1:ab:5a:32:f8:
c3:cd:2d:b4:2c:ba:48:8c:8b:16:14:f9:f6:4b:30:
ba:2c:86:40:74:4b:e2:94:77:01:fa:34:18:ca:e6:
54:85:27:7b:9b:18:d4:1d:66:e3:10:2b:e9:64:f7:
96:53:bc:35:e3:9a:1f:77:e0:e5:a9:47:0a:05:7f:
31:4c:e5:77:e5:84:5b:52:ad:32:bd:fa:4e:60:12:
af:35:18:a3:c2:ad:b3:36:53:e0:80:17:2c:bc:e8:
83:bf:6d:fc:9d:85:5d:35:c7:a5:4c:69:25:8f:4a:
aa:b6:c0:69:ea:b6:ed:b7:87:cc:7a:e1:e7:49:b9:
b3:2c:e9:d5:ae:53:4d:c2:7c:9b:3b:39:c4:1f:d9:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:DA:19:07:21:76:B0:1F:33:0F:4D:6D:E5:F6:DD:59:AA:AC:1A
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/qGbaGQchdrAfMw9NbeX23VmqrBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
79:28:b4:17:c3:99:de:52:b7:6e:ec:7d:db:cc:77:68:3d:bd:
0c:6c:87:56:1e:91:a1:3d:74:f4:43:49:59:8a:a0:1d:7c:30:
ad:ba:d4:85:7b:38:47:2a:00:3b:00:26:3a:86:4f:da:34:1e:
80:14:98:83:4d:97:7d:c4:50:06:fc:8a:0a:b6:bb:8a:68:b2:
a7:00:4c:66:67:94:2a:50:b1:c2:fd:45:a4:b1:14:e3:c7:c2:
c2:a6:90:75:a5:9b:c5:0f:1b:0a:ee:d4:97:5f:e0:8a:19:a5:
b6:c4:82:10:7b:0e:ba:63:de:f2:ec:b7:07:67:79:e9:21:6a:
17:a0:7a:0c:16:f9:56:b2:ad:c2:41:1c:bc:48:34:bb:70:1c:
b1:00:c2:ae:f9:67:7d:67:f9:ef:c1:82:b8:e0:4a:9f:9c:e6:
91:d8:e2:a5:05:76:71:66:70:14:93:88:b9:bf:ab:88:82:ed:
85:8a:a2:94:02:c7:0d:95:c9:73:a8:5e:6b:87:dd:c7:53:bf:
b3:4d:cf:fd:f5:9f:d6:23:8f:1e:c7:d7:f5:58:aa:a2:eb:cf:
37:a5:2a:b3:6b:88:63:4d:ee:66:d2:8e:7f:9e:d3:47:ca:68:
33:3b:41:f5:28:43:63:0f:84:93:62:db:21:6f:76:08:86:1b:
3a:a5:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 19:02:21 2024 by rpki-client on console-fra.rpki-client.org