Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/QBIVfUIYPKyGaEf3LeZRc_Nw0og.roa
File: QBIVfUIYPKyGaEf3LeZRc_Nw0og.roa (raw, json)
Hash identifier: +OJhddbbJDwM2HsAOONlGCxbnCzntWvtoPdpmBU1R0M=
Subject key identifier: 40:12:15:7D:42:18:3C:AC:86:68:47:F7:2D:E6:51:73:F3:70:D2:88
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018CC50075F362595B4299E78615F53BE8FC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/QBIVfUIYPKyGaEf3LeZRc_Nw0og.roa
Signing time: Mon 01 Jan 2024 12:29:50 +0000
ROA not before: Mon 01 Jan 2024 12:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.16.92.0/23 maxlen: 23
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
46.38.141.0/24 maxlen: 24
46.38.144.0/21 maxlen: 21
46.38.144.0/23 maxlen: 23
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
46.38.156.0/23 maxlen: 23
46.38.158.0/24 maxlen: 24
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Sun 07 Jan 2024 07:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:75:f3:62:59:5b:42:99:e7:86:15:f5:3b:e8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 12:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4012157d42183cac866847f72de65173f370d288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:9e:51:e9:aa:d6:b1:bd:2c:df:88:d4:b1:
d4:84:c5:d9:e9:02:57:9c:4b:d1:8b:6e:cd:e1:19:
9a:7a:e3:68:60:58:90:35:af:d7:54:e0:f0:e6:c7:
a8:37:29:11:bc:06:2e:21:76:52:b8:f8:cd:6f:ad:
db:71:73:cb:d9:57:89:84:df:08:c3:9e:4e:50:c0:
ff:23:69:71:28:02:1c:dd:79:54:ba:1e:00:0c:a5:
48:d7:14:8d:fe:16:3b:a6:e2:67:ab:88:18:e2:a8:
99:d2:f0:56:81:9f:9d:44:c0:a4:04:55:6f:c4:93:
77:6d:6a:24:9c:94:90:46:2d:6a:79:de:d8:16:f3:
8d:e2:07:a9:65:da:14:b8:3f:73:b0:3f:35:eb:78:
cc:5d:30:fb:c6:bc:3c:dc:3e:f1:13:98:0f:98:95:
55:3d:ec:30:99:5d:cd:a4:fb:51:be:fb:bd:24:60:
c6:3b:a1:73:22:dc:7b:c5:4a:a5:28:bb:b0:98:07:
88:cb:86:39:6a:48:ec:a2:e0:2f:82:d6:9a:a6:1a:
4d:27:c6:c1:ad:fc:0b:c8:51:02:87:f2:b3:b1:fa:
6a:6a:2c:e5:b9:94:7d:b0:3c:66:15:61:47:2a:fe:
82:48:1e:3e:95:78:9c:66:2d:58:a7:68:0b:37:da:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:15:7D:42:18:3C:AC:86:68:47:F7:2D:E6:51:73:F3:70:D2:88
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/QBIVfUIYPKyGaEf3LeZRc_Nw0og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/23
46.38.144.0/21
46.38.156.0-46.38.158.255
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
66:5b:44:47:6d:05:6b:1c:ea:e0:f1:a3:81:47:ae:29:f7:dc:
63:f8:2a:02:7a:99:a5:dd:2b:04:d9:32:0c:3f:be:a4:a0:dc:
81:6f:a5:c0:7e:b9:4b:1f:61:c4:e1:12:77:69:78:b2:33:b0:
02:a3:1e:06:f6:f6:8c:ba:9a:de:87:f9:db:6c:8f:d8:6c:35:
a8:cd:f5:04:03:ea:63:9b:b4:c4:a5:cc:df:6a:8b:fe:a2:dc:
6c:1c:08:04:de:58:e0:fa:57:e2:09:92:6b:57:60:fc:b9:12:
3d:20:81:0d:5c:89:5e:a3:af:85:1c:dd:ca:01:1b:80:a3:25:
3e:eb:b4:bf:5c:f0:e4:09:a3:74:1c:32:1a:2a:2f:56:c9:8f:
b4:25:3d:8e:0e:7c:49:54:dc:6f:d5:61:8c:90:14:a4:f9:98:
a9:9a:48:f4:37:ba:6e:bb:e5:96:1b:0a:9c:ab:54:73:ac:fe:
a2:12:d4:6e:9e:bc:cf:0b:25:8e:57:b0:af:53:e8:05:33:d8:
24:68:87:7f:52:fd:a8:5c:56:36:ac:df:0c:c8:91:55:7c:19:
fd:71:46:17:fa:02:dc:4b:76:9d:65:7c:3b:ec:bf:97:da:a2:
19:07:58:ae:5b:94:15:99:e2:3d:0d:f7:70:33:7c:a5:14:ec:
92:89:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org