Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/qbZW15ndd-NOMHVlWvp7WPjFAtg.roa
File: qbZW15ndd-NOMHVlWvp7WPjFAtg.roa (raw, json)
Hash identifier: ah9K4mYznnfeHmg74mibVlNTBnWo4+yzNSzcoyHa0Cc=
Subject key identifier: A9:B6:56:D7:99:DD:77:E3:4E:30:75:65:5A:FA:7B:58:F8:C5:02:D8
Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial: 018E193EF9054AB65DD8641DDE7C761AF9DC
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/qbZW15ndd-NOMHVlWvp7WPjFAtg.roa
Signing time: Thu 07 Mar 2024 14:09:01 +0000
ROA not before: Thu 07 Mar 2024 14:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205185
IP address blocks: 45.129.172.0/22 maxlen: 24
86.105.160.0/22 maxlen: 24
86.105.160.0/23 maxlen: 24
86.105.162.0/23 maxlen: 24
185.136.236.0/22 maxlen: 24
185.152.84.0/22 maxlen: 24
185.226.108.0/22 maxlen: 24
194.135.48.0/22 maxlen: 24
2a0d:8600::/29 maxlen: 48
2a0f:dc40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 15:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:3e:f9:05:4a:b6:5d:d8:64:1d:de:7c:76:1a:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Validity
Not Before: Mar 7 14:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9b656d799dd77e34e3075655afa7b58f8c502d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:13:4a:60:1e:6e:f2:d2:12:0c:48:40:54:
20:ba:32:f5:9d:dc:07:00:2e:66:1b:e1:38:f3:28:
ed:6b:06:ac:57:3b:3d:2f:3d:57:ec:1e:53:e0:d1:
3a:24:30:2d:9d:b7:f8:72:be:1a:52:93:75:d8:50:
db:36:cd:45:54:ed:9b:64:f1:45:08:fd:18:5f:da:
63:d6:71:dc:8c:6d:aa:43:42:10:00:01:dd:77:1f:
f1:47:75:e3:7c:dd:c1:b3:0d:f6:d6:cf:61:4f:80:
42:4e:52:71:6a:d4:ff:88:bf:1b:3c:f5:e4:60:5e:
28:fa:5b:7e:d7:4e:31:65:05:75:6a:57:bc:3e:72:
64:41:cd:1a:ac:e1:59:72:8d:29:68:de:f4:d6:ae:
fe:6a:8f:34:a1:73:8e:b8:4d:c4:25:fa:db:05:60:
86:b9:ae:26:1f:c3:aa:5c:88:70:19:19:c4:f7:3f:
2b:74:5c:03:65:1b:b6:e5:90:f0:2d:8c:7d:55:79:
6d:b7:68:9e:af:56:39:83:30:ee:5a:96:8f:94:fb:
74:8d:27:48:8e:43:15:68:d7:a1:6a:3a:2f:27:63:
fd:a9:a1:62:1a:7a:a3:3d:af:b6:e7:24:63:94:3d:
07:29:eb:90:e1:9c:cd:c9:f0:48:2b:91:aa:9f:e1:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:56:D7:99:DD:77:E3:4E:30:75:65:5A:FA:7B:58:F8:C5:02:D8
X509v3 Authority Key Identifier:
keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/qbZW15ndd-NOMHVlWvp7WPjFAtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.172.0/22
86.105.160.0/22
185.136.236.0/22
185.152.84.0/22
185.226.108.0/22
194.135.48.0/22
IPv6:
2a0d:8600::/29
2a0f:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
8f:8c:07:12:27:c1:78:bc:7a:54:3e:10:63:de:68:27:06:b3:
24:ac:5b:f0:0b:92:82:fb:ed:e0:53:7f:59:fa:0f:2c:59:f3:
2e:a2:ac:4f:91:a8:e0:23:ab:b5:b4:f5:9d:98:a3:67:62:74:
9f:a8:c2:dc:32:17:be:52:4d:56:c0:37:74:20:6d:36:75:b1:
aa:35:b5:8a:ca:a9:bc:11:eb:09:cf:05:ad:dc:49:aa:77:bc:
89:5f:ad:29:ef:d5:e0:c5:72:b0:a9:a9:33:50:64:47:f5:12:
95:15:2d:2b:7d:ab:13:dd:f1:ac:94:60:56:71:00:53:b7:81:
d5:fb:21:bc:56:b7:77:31:fd:bd:ac:11:4f:d6:c0:d4:4c:36:
f4:2a:51:00:42:56:fa:74:af:c7:09:1a:5f:3b:88:39:5c:98:
d1:bf:b4:06:69:03:77:87:6b:03:e7:2f:c3:df:10:04:54:ac:
9c:9b:cd:89:64:8e:64:0a:51:d6:4c:ec:93:68:32:12:d9:99:
61:1f:4e:e8:4d:26:a9:13:81:25:28:2c:ef:44:53:bd:d6:18:
19:9c:36:cf:de:2e:75:5e:b0:96:d4:dd:48:4d:3c:30:ad:ad:
47:2c:36:02:7b:ba:e9:51:b0:59:68:5b:5f:23:5e:8b:14:ac:
17:6a:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:01 2025 by rpki-client