Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/KQ5lmNvGVfyyY8Xd9dUfDkdn_dA.roa
File: KQ5lmNvGVfyyY8Xd9dUfDkdn_dA.roa (raw, json)
Hash identifier: R6KuXGwDwfKHfPCX0nmdq4jDUoTCTCFU5JJSfCZb+68=
Subject key identifier: 29:0E:65:98:DB:C6:55:FC:B2:63:C5:DD:F5:D5:1F:0E:47:67:FD:D0
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 01856D8AAD041F27493B64DDF0E96D6F4A06
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/KQ5lmNvGVfyyY8Xd9dUfDkdn_dA.roa
Signing time: Sun 01 Jan 2023 13:34:42 +0000
ROA not before: Sun 01 Jan 2023 13:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205399
IP address blocks: 194.26.108.0/24 maxlen: 24
194.26.109.0/24 maxlen: 24
194.26.115.0/24 maxlen: 24
194.26.114.0/24 maxlen: 24
185.229.13.0/24 maxlen: 24
185.229.12.0/24 maxlen: 24
185.229.12.0/22 maxlen: 24
185.229.15.0/24 maxlen: 24
141.98.118.0/24 maxlen: 24
185.181.208.0/22 maxlen: 24
185.181.208.0/24 maxlen: 24
185.181.210.0/24 maxlen: 24
185.181.209.0/24 maxlen: 24
185.181.211.0/24 maxlen: 24
141.98.117.0/24 maxlen: 24
141.98.116.0/24 maxlen: 24
141.98.119.0/24 maxlen: 24
185.219.132.0/24 maxlen: 24
185.219.134.0/24 maxlen: 24
185.219.133.0/24 maxlen: 24
185.219.135.0/24 maxlen: 24
2a0a:e080::/29 maxlen: 29
2a0d:ae00::/29 maxlen: 48
2a0b:e8c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ad:04:1f:27:49:3b:64:dd:f0:e9:6d:6f:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 1 13:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290e6598dbc655fcb263c5ddf5d51f0e4767fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:d5:93:18:0d:00:ec:ab:2a:8a:38:e8:f7:
c9:82:17:8d:2d:eb:04:03:2b:b6:dd:8d:0a:3c:07:
e1:ba:66:8a:19:9e:10:b6:59:49:f9:3b:01:02:3b:
c0:b6:d8:28:1d:bc:a7:c6:1a:fb:6f:ec:69:82:06:
4c:6c:14:e4:b0:e3:6a:fb:5a:9c:69:50:dc:b6:4b:
e5:e9:28:cc:f2:17:d6:80:b7:57:2b:ea:6a:24:89:
a4:ce:07:a3:62:be:62:61:ef:d6:02:80:96:dc:69:
a5:da:36:6b:ae:60:f6:0a:e1:a5:20:8a:61:f4:9a:
f9:88:3e:f8:be:fd:c4:1a:7d:02:25:a8:8b:4c:4b:
b2:9b:ff:f6:59:a0:bc:48:fc:87:f1:da:91:d0:a7:
d6:bd:46:22:1a:f5:a4:53:72:42:5d:11:35:24:9e:
1a:39:35:7d:e4:45:af:53:e7:63:03:c1:9d:38:7c:
55:87:9d:4f:fc:ac:07:cf:35:a7:c9:d1:1a:68:c5:
bc:64:67:37:63:a2:c3:97:21:eb:92:e1:6d:91:95:
a0:ce:2d:4a:9e:77:cd:a5:da:7c:28:c4:02:b0:10:
ff:8b:0e:b8:ca:a4:f8:c8:3f:9a:e3:c4:71:cc:89:
2e:56:47:63:3a:af:87:5e:88:79:3a:23:ca:52:51:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:65:98:DB:C6:55:FC:B2:63:C5:DD:F5:D5:1F:0E:47:67:FD:D0
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/KQ5lmNvGVfyyY8Xd9dUfDkdn_dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.116.0/22
185.181.208.0/22
185.219.132.0/22
185.229.12.0/22
194.26.108.0/23
194.26.114.0/23
IPv6:
2a0a:e080::/29
2a0b:e8c0::/29
2a0d:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:d6:fb:3e:99:be:03:57:07:81:ae:fe:a6:54:e6:41:e5:c5:
e6:14:f7:69:73:ff:c5:42:99:f6:78:34:87:35:e8:04:94:33:
2d:dc:f0:97:32:4e:14:f4:d3:e5:5a:d4:38:e7:48:ba:4f:57:
c4:c4:9b:a3:6c:08:41:6d:83:e3:9f:7d:0a:d3:d1:d3:51:42:
bd:da:a6:54:23:10:0a:29:f9:a4:fa:84:0e:bc:95:a1:b8:83:
57:dd:4e:7c:4a:3e:13:85:a5:db:08:af:d9:39:cc:b1:6a:90:
77:22:46:da:3d:db:02:d8:4e:f3:3c:b6:c0:a6:dd:39:61:b6:
17:03:dd:35:81:d8:96:76:ef:74:f2:46:01:93:01:cd:04:8e:
d0:53:de:b3:49:92:17:fe:9d:ff:c4:40:89:fc:95:45:8a:c0:
27:c9:28:b2:13:4e:c3:41:1a:36:f1:63:54:62:04:49:d6:04:
47:98:ff:69:26:26:2f:85:bb:09:20:e3:13:db:b5:c6:a6:68:
11:36:a5:42:f8:73:34:8f:8a:95:aa:39:a4:2b:25:9a:25:00:
72:b2:f4:48:e9:43:1b:ce:bc:54:d9:47:13:89:e2:ec:25:61:
41:8a:47:34:eb:f6:dc:50:25:cf:2d:83:e0:39:60:c0:4b:af:
65:64:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:31 2024 by rpki-client on console-fra.rpki-client.org