Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qkWVjU1RdD_mUyErBpG-5XQQd74.roa
File: qkWVjU1RdD_mUyErBpG-5XQQd74.roa (raw, json)
Hash identifier: UQCgdD9OvjcJvdnef1C9y7L1LZrVGWUFRgNCFvKIgZU=
Subject key identifier: AA:45:95:8D:4D:51:74:3F:E6:53:21:2B:06:91:BE:E5:74:10:77:BE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01874BEC95D65576C99E4731688E8FF66148
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qkWVjU1RdD_mUyErBpG-5XQQd74.roa
Signing time: Tue 04 Apr 2023 11:00:08 +0000
ROA not before: Tue 04 Apr 2023 11:00:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
77.107.64.0/18 maxlen: 24
213.210.0.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
89.213.40.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
213.218.208.0/20 maxlen: 24
89.31.232.0/21 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
213.218.224.0/19 maxlen: 24
81.168.0.0/17 maxlen: 17
89.213.128.0/17 maxlen: 24
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.49.124.0/22 maxlen: 24
185.24.84.0/22 maxlen: 24
89.213.0.0/21 maxlen: 24
213.130.128.0/19 maxlen: 24
194.105.64.0/19 maxlen: 24
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
195.128.138.0/24 maxlen: 24
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Apr 2023 11:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:ec:95:d6:55:76:c9:9e:47:31:68:8e:8f:f6:61:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 4 11:00:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa45958d4d51743fe653212b0691bee5741077be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:0b:30:4a:12:54:fb:71:fd:33:ac:10:a5:
4c:05:ca:29:36:09:5c:0a:f1:2b:57:f2:37:bc:c2:
6c:e2:a5:cd:c1:09:07:45:31:46:dc:34:12:43:1c:
60:83:08:99:8c:73:91:b1:30:d9:65:a7:d6:53:b7:
06:ed:b9:5a:86:f9:ec:ce:01:2b:0f:c2:bd:d0:c9:
6b:b1:dd:d2:d5:ae:8b:84:e8:53:31:54:23:41:1b:
82:0c:0c:aa:66:35:e3:b4:14:18:02:4f:07:2e:7a:
a9:97:d9:e7:a3:7a:be:9a:0f:a3:22:c7:6c:fe:2b:
17:8e:48:49:c1:23:74:06:f6:23:1d:f5:58:b8:99:
37:2c:ef:31:f8:6b:13:b2:29:6a:d2:d2:96:67:f2:
da:6f:c8:10:78:76:e2:bd:e9:43:b4:8e:f7:43:c8:
4a:f3:4e:36:56:73:a3:c6:fc:cb:1e:63:21:34:fb:
ef:44:c5:5c:57:d2:09:d3:8f:38:4a:12:b7:ff:07:
cc:8f:7a:ab:2c:e9:d5:73:49:69:6f:ac:49:e6:04:
14:6a:59:2f:95:0a:1b:ea:02:d8:16:fc:d9:4e:d5:
e2:d0:56:33:1c:6f:b5:88:43:bd:b3:d4:18:d5:38:
3d:d2:82:53:fc:de:3c:28:ce:64:3d:80:b7:05:01:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:95:8D:4D:51:74:3F:E6:53:21:2B:06:91:BE:E5:74:10:77:BE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qkWVjU1RdD_mUyErBpG-5XQQd74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
185.20.32.0/22
185.24.84.0/22
185.49.124.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
1c:67:dd:33:5a:e6:0c:47:d8:fe:34:ba:35:18:e9:63:45:e5:
e9:4c:bb:95:ef:03:63:2c:00:0d:61:3b:cd:95:99:7b:a9:3a:
13:96:0f:f6:b6:81:e0:78:31:48:af:bf:35:b9:f4:38:26:a5:
1f:16:f9:bf:9d:9d:1f:ff:2e:25:96:02:31:42:3b:f7:21:f1:
50:68:2f:2b:87:00:9e:d2:d9:ac:a0:cb:10:13:57:de:f7:f8:
df:55:bf:9f:75:49:7a:3e:69:38:54:21:1b:eb:69:f4:7f:d7:
64:f8:24:c2:88:da:ed:f0:2f:89:d5:c0:61:a8:be:ae:76:85:
c1:2a:76:04:67:e1:6a:f9:2f:b0:8b:6c:45:f7:cb:a9:2e:cf:
1a:89:57:c7:89:cb:e1:0b:4d:be:bb:b3:e5:ab:b7:c1:b2:7c:
58:70:b0:40:46:74:49:f1:44:91:27:d1:df:40:3e:19:db:db:
66:3b:83:32:13:5f:94:8c:92:5d:16:c5:cc:5c:3b:c2:29:38:
ca:90:db:2a:0b:c8:fe:24:e2:90:65:7e:8c:8e:8c:fd:20:bd:
97:dc:48:c4:61:89:02:f5:22:61:b4:3e:1e:f5:45:8a:fd:75:
7e:68:df:80:5a:ab:42:e6:d2:c3:68:d4:48:c4:d0:95:3e:75:
fb:a3:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org