Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/q1L00i4fT8ea8ohKWt2HpTguoD0.roa
File: q1L00i4fT8ea8ohKWt2HpTguoD0.roa (raw, json)
Hash identifier: x/fVkLY3zCe1P9yDkW7TziHICJT2HuS4Sdy5lsM9n2I=
Subject key identifier: AB:52:F4:D2:2E:1F:4F:C7:9A:F2:88:4A:5A:DD:87:A5:38:2E:A0:3D
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 01934FA2805FC8CC11AD1C76F9D4D6E84278
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/q1L00i4fT8ea8ohKWt2HpTguoD0.roa
Signing time: Thu 21 Nov 2024 16:51:09 +0000
ROA not before: Thu 21 Nov 2024 16:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39271
IP address blocks: 46.19.128.0/21 maxlen: 21
46.19.135.0/24 maxlen: 24
87.238.144.0/21 maxlen: 21
87.238.151.0/24 maxlen: 24
185.186.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:a2:80:5f:c8:cc:11:ad:1c:76:f9:d4:d6:e8:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Nov 21 16:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab52f4d22e1f4fc79af2884a5add87a5382ea03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:40:3e:a9:a3:44:1e:51:58:48:d5:98:07:
8f:4c:9b:eb:a8:be:a8:cd:a9:28:1c:62:8e:ce:43:
7c:1d:f3:b0:00:e9:59:f7:3d:88:c8:70:70:a6:e4:
6d:6b:57:b4:fe:99:2b:9e:4c:9b:1a:20:80:40:b1:
17:ec:d9:cd:2a:8b:fa:0c:4b:5c:85:a7:55:5a:99:
d6:cc:77:3a:1e:3a:9f:64:43:58:a0:ea:55:2c:b2:
2a:55:57:3e:f3:ed:ff:f3:7a:a6:26:68:79:cb:0a:
e0:aa:7b:a9:e0:93:61:6a:d6:4d:9f:10:6c:39:0f:
e5:16:59:81:11:05:6a:8a:f8:ff:55:85:af:d2:21:
ce:be:b1:dd:1b:b8:a4:5f:80:72:4b:d1:73:20:3a:
fd:a0:43:d7:bc:ee:4a:8c:0b:2a:c9:5c:11:f7:90:
e8:28:9d:d8:8d:a3:a0:cd:48:15:52:56:9c:21:4a:
24:a0:3b:d2:60:00:60:98:56:d7:83:7e:25:7b:2d:
0f:5f:b9:6e:1d:a7:cb:55:1d:d1:d4:2b:11:06:1a:
41:ba:b6:83:e5:75:03:25:96:21:cc:53:9c:e8:69:
a1:5d:b0:fa:6e:15:cc:73:f4:64:65:e4:99:5f:c0:
2c:9d:92:41:fc:84:a9:28:82:6b:86:2c:9a:df:bb:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:F4:D2:2E:1F:4F:C7:9A:F2:88:4A:5A:DD:87:A5:38:2E:A0:3D
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/q1L00i4fT8ea8ohKWt2HpTguoD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.128.0/21
87.238.144.0/21
185.186.72.0/22
Signature Algorithm: sha256WithRSAEncryption
91:58:59:c2:38:9f:af:1c:4e:22:d5:1a:3c:14:32:76:77:fd:
96:af:44:66:18:b7:7e:74:c4:d6:45:6e:46:71:f2:d8:8a:21:
82:09:13:67:8b:6a:8f:b5:fe:05:78:ef:f1:86:23:36:44:d9:
34:3c:1b:7b:6d:76:98:b3:cf:19:2e:79:63:ee:3d:16:d0:92:
1e:bf:ea:93:3f:c2:94:23:04:8b:cc:95:40:d2:5f:5a:f4:6b:
33:3b:7c:70:e6:9d:01:de:33:1d:78:e9:a2:f4:29:63:df:22:
d1:1a:de:46:a6:62:67:6d:6a:a9:4c:d9:33:79:89:02:16:8b:
bf:f6:6f:72:44:f9:45:a4:7f:4c:c2:90:5f:bd:a7:43:f4:1d:
60:e1:7e:6a:41:90:af:20:3d:70:a0:c5:ea:c9:3c:d3:5f:65:
82:a1:05:f6:80:89:b5:df:ee:3f:1c:b5:f5:0c:1e:b9:3b:62:
a8:c1:fb:fd:12:58:81:76:ef:ab:4c:9b:5c:8b:c8:4c:34:c2:
ce:1e:ac:b2:8c:b7:79:24:36:85:38:e6:f9:41:b8:c0:f7:7f:
35:0e:e8:04:dc:6c:96:da:0c:29:c8:95:d7:0d:0e:c0:c6:95:
49:47:a5:f7:cc:78:95:a2:7d:c1:3d:5d:11:63:0a:be:78:ef:
af:f5:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:05 2025 by rpki-client