Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/q0gHmUae4BXymMWzWa-thrTxADs.roa
File: q0gHmUae4BXymMWzWa-thrTxADs.roa (raw, json)
Hash identifier: yseQuBjclSgYvjNce4GWwxwaDWez9ZE0pv/V27Mvc1I=
Subject key identifier: AB:48:07:99:46:9E:E0:15:F2:98:C5:B3:59:AF:AD:86:B4:F1:00:3B
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 018D0F023B69524BBD41E06D698BAA45659E
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/q0gHmUae4BXymMWzWa-thrTxADs.roa
Signing time: Mon 15 Jan 2024 21:23:40 +0000
ROA not before: Mon 15 Jan 2024 21:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29170
IP address blocks: 185.67.177.201/32 maxlen: 32
178.132.216.0/24 maxlen: 24
82.114.81.0/24 maxlen: 24
178.132.217.0/24 maxlen: 24
82.114.84.0/24 maxlen: 24
82.114.79.0/24 maxlen: 24
178.132.216.0/21 maxlen: 21
178.132.220.0/24 maxlen: 24
82.114.88.0/24 maxlen: 24
46.19.224.0/21 maxlen: 24
46.19.224.0/24 maxlen: 24
46.19.225.0/24 maxlen: 24
46.19.230.0/24 maxlen: 24
82.114.64.0/19 maxlen: 19
82.114.64.0/24 maxlen: 24
82.114.68.0/24 maxlen: 24
82.114.69.0/24 maxlen: 24
82.114.70.0/24 maxlen: 24
82.114.65.0/24 maxlen: 24
82.114.66.0/24 maxlen: 24
82.114.67.0/24 maxlen: 24
82.114.74.0/24 maxlen: 24
82.114.77.0/24 maxlen: 24
82.114.78.0/24 maxlen: 24
82.114.85.19/32 maxlen: 32
185.67.176.0/22 maxlen: 22
185.67.176.0/24 maxlen: 24
185.67.177.0/24 maxlen: 24
185.67.178.0/24 maxlen: 24
185.67.179.0/24 maxlen: 24
185.67.177.175/32 maxlen: 32
185.190.132.0/22 maxlen: 22
185.190.132.0/24 maxlen: 24
185.67.177.176/32 maxlen: 32
2a04:3080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 16 Jan 2024 08:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0f:02:3b:69:52:4b:bd:41:e0:6d:69:8b:aa:45:65:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Jan 15 21:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab480799469ee015f298c5b359afad86b4f1003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1a:25:b4:1f:23:87:c2:aa:f7:8f:5f:c2:c1:
9b:c3:a9:1d:ed:8e:6e:06:52:4b:bd:01:bc:c5:cd:
60:04:af:9e:c6:9c:07:ff:3b:d1:79:83:ef:25:fc:
f1:15:f5:5f:65:15:f0:5c:bc:91:b4:53:4a:6c:db:
d0:68:f9:56:cc:ea:5d:18:30:f5:58:d2:8a:39:2d:
ce:fc:52:a5:b5:18:41:53:e7:29:b2:a6:cc:64:5f:
3d:20:9a:99:1d:06:98:83:6a:bd:4b:da:1f:a9:2f:
9a:c2:79:dd:8c:bb:37:cd:80:74:0d:1c:c5:93:79:
b4:ea:ac:30:83:45:e3:ea:ee:66:2a:a4:b7:5b:a7:
b3:34:d3:09:f8:d2:36:f8:75:31:da:4f:2f:bb:4f:
62:fb:56:c6:46:f2:2f:9c:17:4a:52:c6:1b:a6:48:
cc:c4:c6:f3:25:66:2e:48:b7:32:cf:c7:91:16:42:
fe:c0:8e:96:91:3f:c0:bc:28:44:5f:09:7e:30:00:
a1:ab:91:76:9e:7e:ee:16:f6:db:18:ef:53:cd:f0:
07:26:03:1e:99:2c:40:1e:63:63:3c:95:b9:75:8a:
1b:48:47:c5:dd:e2:bd:a1:ae:b5:0b:23:d0:58:4b:
f6:cb:23:ef:0d:fb:b0:90:7b:e0:7b:63:16:77:05:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:07:99:46:9E:E0:15:F2:98:C5:B3:59:AF:AD:86:B4:F1:00:3B
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/q0gHmUae4BXymMWzWa-thrTxADs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.224.0/21
82.114.64.0/19
178.132.216.0/21
185.67.176.0/22
185.190.132.0/22
IPv6:
2a04:3080::/29
Signature Algorithm: sha256WithRSAEncryption
68:32:fd:29:30:8f:94:12:e5:2a:83:1f:61:a4:30:a5:64:0b:
6a:65:15:4f:dd:81:05:2b:09:37:a8:3a:f6:d8:bf:f3:af:14:
ff:90:d6:02:15:5e:9b:9c:10:6a:54:3f:75:70:55:3c:9f:9e:
7f:88:75:38:cc:0a:85:a3:f9:17:a2:57:9f:58:33:30:ba:b7:
0a:79:da:b8:6d:d9:9f:cb:cb:2c:f2:21:57:30:25:96:f9:1c:
0c:72:07:55:fd:a3:88:56:29:37:0d:80:3e:1d:f7:71:6e:92:
b5:a8:67:24:85:b4:50:d2:05:a7:7f:cb:4c:74:36:b1:bb:e7:
ec:4c:f2:06:2a:fc:05:72:84:a4:89:4e:b1:26:d6:92:43:6e:
70:cc:13:01:65:20:f9:35:50:0e:0c:00:bb:7b:e0:11:e1:ce:
02:6b:e1:7c:e9:e6:ad:d8:77:26:7a:c4:1e:0d:c7:08:b2:26:
32:ba:17:d4:3e:30:9f:df:af:6a:3e:2c:e7:93:05:0b:a0:8c:
7f:6f:9d:3b:2d:47:6f:23:a8:b9:95:96:43:3c:5f:be:b8:67:
59:0b:4e:8e:0a:83:0e:2d:e4:15:05:10:75:ed:1a:bb:da:3c:
62:02:d6:96:95:06:e1:63:a3:ed:9d:86:d4:0c:54:2d:d9:5a:
17:c4:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:56 2024 by rpki-client on console-ams.rpki-client.org