Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_bqrednUI0xaV1nKmId1HoJKDOY.roa
File: _bqrednUI0xaV1nKmId1HoJKDOY.roa (raw, json)
Hash identifier: pleWU1U6okNN4+GzZ3RjlthIiwu3x47ebBbulb+jWIk=
Subject key identifier: FD:BA:AB:79:D9:D4:23:4C:5A:57:59:CA:98:87:75:1E:82:4A:0C:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933556B336AEE0208E3116AD581828
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_bqrednUI0xaV1nKmId1HoJKDOY.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 188.212.121.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 06:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:35:56:b3:36:ae:e0:20:8e:31:16:ad:58:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdbaab79d9d4234c5a5759ca9887751e824a0ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:30:1d:0c:30:a0:7c:f9:93:8e:7c:ab:34:
50:76:b9:c9:e4:6f:26:57:82:f0:ec:6f:52:0e:aa:
e8:26:a7:51:d8:bc:f9:20:99:0b:82:7f:de:7a:2f:
9c:01:2b:5b:bb:8b:ff:37:ae:c4:f4:49:03:90:ad:
20:99:68:a8:06:c2:9e:d8:9f:7e:f1:f4:e7:96:69:
da:02:98:f2:52:09:a5:3d:a4:b4:6c:40:03:a0:67:
80:d0:c3:dc:4d:66:dc:7e:3c:69:e8:96:68:51:08:
4d:9d:e6:7f:ed:31:8f:c9:40:de:e9:41:17:d0:7f:
64:8f:de:a2:a5:e4:33:91:5e:bf:f9:1e:6b:07:6f:
38:4a:26:8d:6b:26:a7:89:ab:3f:35:da:f9:ee:01:
24:4c:28:f1:46:f6:17:7c:b5:bd:18:3f:5d:0e:8f:
b0:39:cd:21:44:ce:1a:2c:84:dc:a0:dc:ff:78:47:
5c:35:aa:d6:bd:c0:dd:1e:a7:e3:85:c0:22:ac:6e:
13:05:fa:10:38:4d:90:b2:67:d1:a1:95:7b:10:cc:
87:d0:dd:84:06:86:7e:48:b1:63:a8:b2:0d:1c:0e:
af:09:5e:69:d5:ad:21:bd:68:a7:3b:b4:da:49:22:
f0:34:7c:18:6c:c7:38:5c:d9:b1:5d:3d:c7:ba:ce:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:AB:79:D9:D4:23:4C:5A:57:59:CA:98:87:75:1E:82:4A:0C:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_bqrednUI0xaV1nKmId1HoJKDOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.100.0/24
89.36.140.0/24
89.40.36.0/24
89.45.35.0/24
89.46.42.0/24
89.47.36.0/24
94.177.51.0/24
94.198.171.0/24
176.223.188.0/24
188.212.121.0/24
188.215.31.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0d:d9:85:f1:38:7e:9d:93:5e:da:bb:80:d9:16:75:9a:84:
55:31:ee:c2:71:0c:e7:66:05:06:a7:af:02:f7:7e:2e:2f:96:
7b:7f:91:32:41:eb:30:25:fa:23:9f:70:4d:7d:10:db:f6:42:
1e:b9:42:94:e1:4b:24:b3:99:15:66:f4:d6:d2:f9:ea:a4:5a:
df:d1:cb:0e:64:94:0e:31:0b:e4:24:3d:02:b8:d5:82:e6:7c:
5a:ad:d6:2b:be:ed:8d:51:59:81:eb:fa:09:ed:9b:d3:d0:e2:
39:2d:d8:fb:b6:09:08:69:16:e2:f9:ea:b3:fd:7e:43:db:ce:
7e:89:13:eb:4a:52:1b:93:25:da:ae:a9:d7:c4:ea:25:2e:dc:
18:fb:2a:c1:45:0a:ad:63:aa:d7:a1:97:3f:35:ec:54:a4:b4:
7e:50:ca:40:c7:21:a7:3c:14:7e:09:2e:0f:bb:28:f8:6f:25:
d8:f8:6e:e3:a8:da:7b:03:72:f2:30:30:fa:5d:7d:4f:d0:97:
cb:63:2f:78:23:e9:85:bc:8e:a0:92:cd:3f:bc:26:f7:3a:4c:
e9:c0:21:da:5c:53:d1:0d:a9:02:1c:2f:88:fa:99:7f:04:96:
f5:5a:57:e2:3a:1a:a2:ca:73:ea:2f:cb:6a:05:12:2a:db:43:
0f:ca:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org