Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qKIBmxlj0kqFtA7pbUfqyjBC_BI.roa
File: qKIBmxlj0kqFtA7pbUfqyjBC_BI.roa (raw, json)
Hash identifier: f/yeJ02OXep+DHsEZYEDjMu06rFhNtn/ygDHuUYndf8=
Subject key identifier: A8:A2:01:9B:19:63:D2:4A:85:B4:0E:E9:6D:47:EA:CA:30:42:FC:12
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193AFD2B7C65048298E7B54FFBE8A98DCD6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qKIBmxlj0kqFtA7pbUfqyjBC_BI.roa
Signing time: Tue 10 Dec 2024 09:07:22 +0000
ROA not before: Tue 10 Dec 2024 09:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:d2:b7:c6:50:48:29:8e:7b:54:ff:be:8a:98:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 10 09:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8a2019b1963d24a85b40ee96d47eaca3042fc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:fa:d8:99:ec:ae:d7:11:91:c8:ec:80:15:
9a:af:1a:71:7e:2b:aa:82:62:6f:8b:db:f1:26:58:
b6:e7:43:32:77:d7:13:ae:62:d2:21:2c:6c:89:7b:
93:bd:c7:8b:af:0f:be:9e:b5:2f:8e:17:70:9b:61:
3f:5e:83:1a:23:d7:c6:73:98:45:1e:77:ae:54:c3:
25:91:56:06:c1:4e:81:49:ef:d4:e3:b6:43:b0:ea:
2d:ff:1d:4e:e8:28:34:2e:18:84:05:ce:33:21:82:
8f:e4:21:15:3a:0e:a5:4c:e4:0f:1d:cb:a4:58:1d:
27:cd:ce:29:9a:b1:1d:60:47:ca:38:f8:2d:42:40:
df:52:86:28:31:9f:f7:df:ab:94:04:4e:70:d0:79:
64:59:e5:35:32:8c:6d:60:8f:f8:c0:70:c9:4b:a2:
33:05:49:84:93:25:0e:6f:f0:82:1d:f5:0d:e3:a0:
ec:f0:0c:17:5b:9c:3b:31:4f:2c:04:20:1a:0c:2c:
aa:2b:fc:b1:ff:1f:1d:ae:57:82:88:c5:90:b5:e1:
31:15:06:30:44:6e:60:a7:72:16:61:8e:43:4d:f6:
64:ba:6a:8c:b1:6d:e6:28:17:35:83:f8:98:83:4f:
4e:54:f5:6b:79:a5:c0:d5:8e:62:ae:0a:e1:00:f8:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:01:9B:19:63:D2:4A:85:B4:0E:E9:6D:47:EA:CA:30:42:FC:12
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qKIBmxlj0kqFtA7pbUfqyjBC_BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/23
62.192.152.0/24
77.81.182.0/24
79.110.227.0/24
85.204.18.0/24
89.34.106.0/24
89.35.129.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.106.0/23
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
188.212.121.0/24
188.215.31.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
23:04:1a:90:59:53:0f:22:6a:34:89:90:69:4c:2d:b0:1f:1b:
eb:74:7b:fe:58:ce:34:5d:66:55:c3:47:b0:4f:54:60:e1:5e:
f1:67:39:2e:b7:e1:76:d4:a7:8b:b3:db:df:15:5f:b9:fb:a1:
13:b6:f2:8a:60:80:c0:5b:a9:76:93:be:28:12:a5:39:ac:a9:
b4:b3:8d:ce:2e:5d:5c:36:80:25:4d:79:cb:a8:24:ad:81:d6:
9d:46:4e:07:e1:7d:1b:43:9d:5f:8f:f5:a3:01:43:9d:a0:f3:
75:8c:4d:19:31:a7:46:2e:f8:c1:55:df:cf:a0:76:48:39:0a:
6c:32:7d:20:5a:5d:c2:6e:96:70:33:1a:59:e6:dc:61:c7:3a:
75:e9:12:8b:01:26:0f:fc:ad:b1:83:47:86:2e:ae:18:d4:2b:
31:a2:9a:1d:e6:84:6e:23:2e:e1:7d:86:60:61:58:3d:46:cc:
be:67:eb:31:29:e0:04:2d:aa:5f:7c:bc:6f:35:cd:5a:71:da:
bd:5b:15:67:d7:74:a6:7d:60:70:e1:3f:1e:5a:6e:17:bf:f4:
bd:6e:a3:cc:7d:b0:10:55:21:35:e1:4b:c0:34:dd:2e:9c:fa:
c2:ed:93:7b:29:a1:e1:97:8a:30:d6:91:61:3f:37:ca:4a:b1:
31:be:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:41 2025 by rpki-client