Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/qf8q53hcw2_wbGGnmFV5PMPuFVQ.roa
File: qf8q53hcw2_wbGGnmFV5PMPuFVQ.roa (raw, json)
Hash identifier: W4aPx+JYRKeZBxkco32KvePFNIlkrv3RxUgbsFc1ovQ=
Subject key identifier: A9:FF:2A:E7:78:5C:C3:6F:F0:6C:61:A7:98:55:79:3C:C3:EE:15:54
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 018708573B668413349BB87B114001D1D2F9
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/qf8q53hcw2_wbGGnmFV5PMPuFVQ.roa
Signing time: Wed 22 Mar 2023 08:02:27 +0000
ROA not before: Wed 22 Mar 2023 08:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
5.62.152.0/21 maxlen: 32
91.92.22.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
93.113.52.0/23 maxlen: 32
185.66.136.0/22 maxlen: 32
180.149.16.0/20 maxlen: 32
94.139.224.0/20 maxlen: 32
119.12.192.0/21 maxlen: 32
188.240.48.0/23 maxlen: 32
180.235.160.0/20 maxlen: 32
91.92.138.0/24 maxlen: 32
180.149.0.0/20 maxlen: 32
110.238.192.0/19 maxlen: 32
77.81.92.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 Mar 2023 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:57:3b:66:84:13:34:9b:b8:7b:11:40:01:d1:d2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Mar 22 08:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ff2ae7785cc36ff06c61a79855793cc3ee1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:f9:f3:9c:e7:c9:08:ee:a1:b3:07:29:1b:
72:ab:0a:00:86:9d:d8:b5:d6:f5:94:94:21:d0:05:
57:57:3b:f9:86:30:82:2c:39:cd:f7:23:e6:36:94:
79:6d:d0:d5:94:f2:1c:c4:c7:48:2f:e4:91:8f:48:
81:46:42:65:e9:db:86:83:58:83:1e:0e:f5:8e:0d:
d2:6d:18:02:09:a3:3a:52:ac:b8:59:f7:0d:00:80:
91:7e:99:20:6b:da:40:0a:d9:93:ea:5c:fd:c3:23:
24:e2:1e:31:18:fb:42:6a:2c:50:18:ee:b3:f3:d8:
07:b1:0b:50:44:b9:41:3f:1d:fd:3f:c9:c7:ec:ff:
93:6b:18:48:80:29:db:34:76:04:09:b2:fe:40:71:
b7:89:04:ef:d2:96:c4:36:42:c8:d3:ed:07:f7:09:
68:ea:26:24:7d:b1:5c:b6:09:79:7a:3d:80:8d:f7:
a5:97:ea:4f:10:e0:4d:00:bb:db:93:99:44:d5:d4:
4c:e5:ca:01:39:93:69:4a:b3:11:4c:c1:4d:9a:7d:
0a:86:a2:4b:b2:f3:3b:c5:1d:a4:24:2d:e4:c5:e7:
d2:09:35:7c:5d:ae:5e:f8:fb:0c:c2:e7:6c:c6:11:
0e:cd:fc:bb:b4:ed:41:c6:43:a4:2f:a4:74:69:c6:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:2A:E7:78:5C:C3:6F:F0:6C:61:A7:98:55:79:3C:C3:EE:15:54
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/qf8q53hcw2_wbGGnmFV5PMPuFVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.152.0/21
77.81.92.0/22
91.92.22.0/23
91.92.138.0/24
91.92.216.0-91.92.218.255
93.113.52.0/23
94.139.224.0/20
110.238.192.0/19
119.12.192.0/21
176.223.182.0/23
180.149.0.0/19
180.235.160.0/20
185.66.136.0/22
188.212.136.0/21
188.240.48.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:bd:06:09:25:e2:2b:a9:e9:51:6b:5f:76:85:37:4c:9a:7f:
63:81:d2:10:a2:fe:28:d9:30:7a:38:a6:99:92:5b:84:0f:d1:
8f:df:60:70:8b:d8:67:b7:1b:eb:f1:9c:79:13:a5:0e:64:2e:
99:b9:cf:52:4b:63:25:8c:27:0f:86:5d:78:b2:c3:47:59:72:
0d:8c:e3:35:b2:53:91:89:d8:cf:1f:4b:f2:eb:55:c5:4a:eb:
2f:23:8a:f9:ab:6c:28:96:3d:01:bb:e8:53:40:7b:ad:f8:7b:
1a:a1:24:c1:58:f9:1d:46:25:f2:7c:48:28:4a:ca:81:e3:cf:
15:77:de:8f:94:27:b9:a3:3a:d2:1f:09:26:92:8d:3d:d6:02:
16:35:6f:71:0e:7b:86:ee:57:33:6f:26:84:4f:8b:0a:0f:ad:
7d:93:71:56:db:b4:a4:07:59:97:5e:9d:3d:94:08:7b:01:c4:
8c:91:45:e3:70:61:d6:1e:ee:7d:34:c5:b2:b5:07:95:be:dc:
5a:51:ac:59:14:b6:c3:1d:97:bd:53:52:e9:ec:59:9f:77:0d:
6c:24:ce:98:b4:96:7b:ff:d2:5d:b3:39:93:f6:23:7c:51:d2:
e4:0e:ce:db:8f:ef:ac:3f:fc:6f:53:d4:2f:38:b6:2e:d5:fd:
b4:0d:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org