Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/ql7iORRb_QWVrhTS6ec9-oRTgis.roa
File: ql7iORRb_QWVrhTS6ec9-oRTgis.roa (raw, json)
Hash identifier: jmhOrewprJw4Wh73ynXHGs8CijZOIPr06fh4C4Mlbp4=
Subject key identifier: AA:5E:E2:39:14:5B:FD:05:95:AE:14:D2:E9:E7:3D:FA:84:53:82:2B
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 0187E784C9CDC105059E75A3F749561AA4E7
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/ql7iORRb_QWVrhTS6ec9-oRTgis.roa
Signing time: Thu 04 May 2023 16:07:32 +0000
ROA not before: Thu 04 May 2023 16:07:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.66.0/24 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.68.0/24 maxlen: 24
94.124.69.0/24 maxlen: 24
94.124.70.0/24 maxlen: 24
94.124.71.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.157.0/24 maxlen: 24
185.187.158.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:84:c9:cd:c1:05:05:9e:75:a3:f7:49:56:1a:a4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: May 4 16:07:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5ee239145bfd0595ae14d2e9e73dfa8453822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:32:5e:5f:2f:a3:a4:9f:7c:f0:88:44:fb:
90:8d:98:b8:63:77:32:89:fe:02:fc:09:b6:50:e5:
4b:04:34:87:7a:cc:b3:22:52:b9:f9:9d:a0:02:b9:
28:d4:3e:f8:e8:bc:3b:e1:a5:00:1b:38:b8:25:85:
d3:35:65:5e:ec:ea:9f:cb:88:32:1e:fb:84:c3:29:
23:03:ba:96:30:53:24:f0:98:5e:88:11:f8:9b:99:
ec:21:4f:a5:9e:c2:a9:f3:06:79:65:5a:6e:57:43:
94:1b:c3:86:2c:48:36:ff:8e:2f:fc:ad:04:e4:0d:
cb:f9:79:b2:7e:89:fa:11:fb:d9:46:35:ee:21:4b:
59:c2:20:9f:b6:f4:70:cc:7f:b1:49:8d:54:cc:7d:
44:3e:af:02:a8:e2:74:86:1a:09:7b:54:4f:f2:91:
04:88:ab:88:eb:a7:07:bc:66:7c:3c:1d:0b:c8:b5:
9e:91:5b:b6:7d:ce:8a:13:0f:5d:80:4b:48:f6:c0:
f6:c7:73:53:30:89:9d:b0:7a:34:ba:f3:9b:12:1d:
ec:35:82:30:42:e3:b4:ce:8c:06:92:5d:e9:b1:81:
ac:1f:79:e5:1c:33:0f:a7:f1:25:1e:98:f9:6e:e1:
35:b3:6c:24:a5:c7:84:64:8d:85:a7:36:f0:48:b5:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:E2:39:14:5B:FD:05:95:AE:14:D2:E9:E7:3D:FA:84:53:82:2B
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/ql7iORRb_QWVrhTS6ec9-oRTgis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
06:6a:c6:a5:c6:77:5e:e8:b4:62:06:e9:bb:b4:d8:09:b1:da:
aa:a2:89:b8:1a:08:74:83:e5:db:59:a0:d5:85:9e:1f:2f:cb:
77:d8:8d:f8:24:f5:14:82:7e:fd:cf:82:fb:3b:7a:ab:61:4a:
2f:40:92:97:86:68:ec:32:94:f9:c3:23:4d:20:35:41:ee:14:
3a:3b:d7:f1:5d:4d:de:b1:56:cb:1d:af:8d:04:6a:d4:5a:08:
03:ba:f4:df:31:1a:29:4b:5d:82:7a:68:36:13:4e:85:1c:14:
e5:be:50:5c:02:28:38:b0:0d:a5:3c:08:a7:08:84:6b:a3:ba:
39:8c:31:35:42:ce:39:d3:93:d2:df:8f:c0:84:8e:e3:0e:f2:
b4:97:67:77:4e:70:c4:78:ab:54:9c:7b:ba:d0:18:6e:ec:57:
c0:64:73:cf:1a:4f:82:7a:fd:23:cf:1f:86:3d:e3:e9:d1:13:
0f:bc:b2:93:c3:4d:03:85:2f:41:d7:bf:40:a9:9e:79:7e:00:
d0:79:4f:b4:c3:5d:be:12:58:9f:cd:e6:fc:55:93:7b:42:af:
2f:4f:a3:7b:45:b4:90:aa:de:a0:90:df:ad:71:7c:f1:df:24:
26:63:9e:2f:99:3d:a1:ff:e8:58:19:28:c1:5f:b8:d1:5c:e7:
af:3b:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org