Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QogWAs3krNSZI3rUl6w8NQ761Oo.roa
File: QogWAs3krNSZI3rUl6w8NQ761Oo.roa (raw, json)
Hash identifier: EZAOLXUJC9uKtSqd0LDGHIqYmyVP2s7OtLtUonkM3wE=
Subject key identifier: 42:88:16:02:CD:E4:AC:D4:99:23:7A:D4:97:AC:3C:35:0E:FA:D4:EA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190C16CFCFA20FA9DED4CC4D143C7BFE6FC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QogWAs3krNSZI3rUl6w8NQ761Oo.roa
Signing time: Wed 17 Jul 2024 16:01:03 +0000
ROA not before: Wed 17 Jul 2024 16:01:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.153.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 17:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:6c:fc:fa:20:fa:9d:ed:4c:c4:d1:43:c7:bf:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 17 16:01:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42881602cde4acd499237ad497ac3c350efad4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:f0:8d:07:63:ec:c8:17:c4:0a:3d:a1:f6:
87:7b:46:07:5e:fb:d3:cf:d5:89:5e:f8:e9:a4:86:
e4:a0:f5:80:d6:84:83:e2:71:1c:91:22:a1:a2:0d:
a2:c1:2e:23:c1:d7:82:b0:4d:5f:7e:78:74:2f:4a:
a3:e7:c8:4a:06:8b:48:92:ed:c2:26:5e:de:80:cb:
26:4f:d6:37:05:fa:e9:25:4f:e9:d2:94:77:9e:0f:
bf:2b:00:af:34:bd:10:a9:d7:72:4a:9a:e5:ff:d0:
d0:cd:f8:eb:dc:8c:42:e3:b7:6e:cc:a3:ac:d9:ef:
79:8f:2a:ea:7a:a7:4d:2a:1d:96:46:9a:59:f5:4c:
17:26:b4:c1:14:88:2a:6d:2d:61:be:10:40:8a:b0:
c9:1f:5f:18:51:bd:8c:70:cf:d9:85:cd:9b:cb:ab:
de:a4:21:d7:dc:62:03:f3:e4:86:e0:d9:fa:3f:16:
15:9e:04:db:50:82:7e:07:5d:d8:51:5a:62:9a:54:
05:c0:fe:69:fb:0b:d8:40:7b:39:c6:03:d8:a8:13:
40:59:a9:53:1f:39:e2:0a:fc:5f:79:3d:2a:d5:e6:
2e:4a:66:89:40:08:2b:0c:d4:56:12:a9:82:e2:37:
6d:27:1d:6e:f6:9a:76:4a:4e:16:ea:11:1a:9e:36:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:16:02:CD:E4:AC:D4:99:23:7A:D4:97:AC:3C:35:0E:FA:D4:EA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QogWAs3krNSZI3rUl6w8NQ761Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
89.213.107.0/24
89.213.112.0-89.213.114.255
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
213.130.137.0/24
213.130.152.0-213.130.154.255
Signature Algorithm: sha256WithRSAEncryption
28:98:e4:d5:40:ae:70:f8:ef:22:9a:29:ee:07:5c:eb:d7:f9:
e4:d6:ef:f1:4e:f8:e2:d7:3b:a7:db:a0:6a:f4:a2:ee:5f:d4:
66:a5:af:0a:69:8d:6c:28:7a:f7:cf:eb:ed:64:d4:bc:59:f2:
93:6d:e4:3a:ea:3c:93:6c:4a:c5:b2:33:fd:db:8e:70:77:e4:
0b:c0:97:80:f2:1f:3e:13:81:4f:95:bd:17:f3:d3:97:aa:08:
8b:d8:d6:2e:41:73:73:80:31:d8:3c:22:00:01:16:08:2f:79:
16:e1:5f:c7:18:60:31:ae:b1:03:e7:27:1b:7d:7b:fa:84:f0:
00:03:a3:bf:73:bb:e1:39:d3:be:71:e8:65:cd:38:21:90:3c:
2b:15:e0:ab:4b:fa:0f:0f:b7:7e:80:0a:20:b0:4e:fe:69:b3:
bf:4c:28:79:f0:e6:06:5f:40:dc:a6:29:cb:2c:4d:ac:4b:90:
8c:cb:ac:12:b4:8d:0b:e0:ab:60:15:7f:f7:89:e0:33:b3:bb:
b6:d8:09:a9:1d:39:ed:43:3a:be:9a:04:e1:3f:2d:7e:c1:ee:
8e:2a:cf:8e:8f:42:1e:42:59:9e:1e:01:dd:f2:c4:99:4d:e5:
79:12:97:f0:d7:6c:91:e1:22:77:59:20:ed:67:3d:0a:64:c1:
70:4c:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:20:08 2025 by rpki-client