Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qbvRCOZhidjUXHdiJAOwSNHW3SA.roa
File: qbvRCOZhidjUXHdiJAOwSNHW3SA.roa (raw, json)
Hash identifier: gE8GCzIgR1jCj3gwlHiT4Bq/Kqry4lSDggIAeSs4TvM=
Subject key identifier: A9:BB:D1:08:E6:61:89:D8:D4:5C:77:62:24:03:B0:48:D1:D6:DD:20
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0193C0712C3DE7B14B22840F27B5360E2C80
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qbvRCOZhidjUXHdiJAOwSNHW3SA.roa
Signing time: Fri 13 Dec 2024 14:34:22 +0000
ROA not before: Fri 13 Dec 2024 14:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12566
IP address blocks: 62.62.169.0/24 maxlen: 24
87.255.128.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
185.39.216.0/22 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
212.23.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:71:2c:3d:e7:b1:4b:22:84:0f:27:b5:36:0e:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Dec 13 14:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9bbd108e66189d8d45c77622403b048d1d6dd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:3e:d4:b3:cc:0e:98:c9:82:b6:80:0e:69:
70:94:76:5d:78:59:cc:d9:59:96:38:89:72:0c:ba:
58:76:48:51:e2:02:19:1f:7f:9a:dc:be:4e:af:ad:
69:75:a1:89:ca:fd:1f:7e:a2:d1:79:66:5c:c0:dd:
5d:d7:13:95:c1:dd:8e:18:94:f8:8f:ff:6e:57:09:
0f:b9:86:21:64:b9:dd:05:69:8e:16:9c:32:70:42:
89:4c:7d:24:09:dd:a0:a8:e5:36:c0:d5:32:01:be:
ab:65:4b:cd:20:9a:5e:dd:d2:63:61:48:27:5b:32:
97:f7:27:ef:3d:41:db:69:00:c8:0c:8e:89:ae:8e:
9b:2d:46:45:51:61:a4:63:7d:82:f2:96:4d:45:01:
2d:31:3d:a3:67:7d:a2:70:14:41:64:c4:ff:8b:ba:
9a:72:95:41:1d:5c:db:89:7f:c2:66:59:de:e5:49:
10:90:c9:e1:0b:53:a6:91:ed:21:2d:8f:f6:e3:ef:
cb:40:ab:e7:5c:5e:3a:02:ea:3a:65:7e:7d:c7:bc:
d2:fb:fa:56:02:6f:cd:dc:c6:a3:14:f9:65:27:04:
06:d5:8f:30:c1:91:54:d2:80:6b:ad:22:50:a5:a6:
59:70:89:98:71:a2:84:ad:82:dd:af:21:6c:af:25:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:D1:08:E6:61:89:D8:D4:5C:77:62:24:03:B0:48:D1:D6:DD:20
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qbvRCOZhidjUXHdiJAOwSNHW3SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.62.169.0/24
87.255.128.0/19
95.181.220.0/22
185.39.216.0/22
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
212.23.160.0/19
Signature Algorithm: sha256WithRSAEncryption
13:76:3c:ef:a8:20:ce:5e:10:72:49:05:d8:58:7f:3d:c4:18:
26:fc:dc:2a:bd:40:0a:f4:38:89:e1:db:93:ed:9b:91:5e:19:
b4:ba:06:b9:9f:02:8e:ca:39:20:d2:15:49:d1:77:fb:5d:d0:
f9:ca:94:60:65:7a:dc:72:69:9e:06:8f:fb:73:1f:15:b1:af:
ac:cd:77:31:39:7c:1b:90:eb:26:23:01:77:54:29:e8:e9:f5:
4e:f3:50:02:43:a0:ae:1b:62:f3:0d:c3:cb:36:f6:e7:d7:2b:
0c:e9:d2:2c:2c:49:45:9f:de:1c:17:d0:2c:01:12:18:1e:b4:
ef:00:dc:09:53:1f:2f:eb:04:82:92:c1:82:ef:5c:30:43:5a:
1a:d7:ea:79:37:b6:af:fb:8c:1d:da:c3:b5:9e:9a:3d:f3:27:
60:16:96:32:04:b3:36:b1:fa:78:7b:31:df:0c:13:3c:52:0c:
77:45:f9:07:01:ee:5a:cf:f4:e1:7d:ff:57:d8:51:4f:01:a8:
ac:f4:44:ee:33:ce:aa:94:db:00:29:9c:a1:71:8e:75:68:1f:
25:dc:f0:2c:42:9e:14:fc:e8:68:5b:6a:1b:60:a1:66:66:05:
7d:9d:9e:18:dd:39:5a:0b:de:49:11:5b:0d:88:64:ac:71:92:
de:71:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:51 2025 by rpki-client