Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/Q5Mf46ODLpXjz8NK0TPSDogfIjA.roa
File: Q5Mf46ODLpXjz8NK0TPSDogfIjA.roa (raw, json)
Hash identifier: YteANLrQlXklaaJGf+E84dU/wRTkK7Rw5Sago44+GjQ=
Subject key identifier: 43:93:1F:E3:A3:83:2E:95:E3:CF:C3:4A:D1:33:D2:0E:88:1F:22:30
Certificate issuer: /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial: 01882387E083B750AB0790136A1235E77C18
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/Q5Mf46ODLpXjz8NK0TPSDogfIjA.roa
Signing time: Tue 16 May 2023 07:48:07 +0000
ROA not before: Tue 16 May 2023 07:48:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59702
IP address blocks: 207.189.192.0/20 maxlen: 20
81.25.144.0/20 maxlen: 20
195.42.104.0/23 maxlen: 23
146.66.232.0/21 maxlen: 21
185.80.216.0/22 maxlen: 22
216.158.96.0/20 maxlen: 20
194.37.249.0/24 maxlen: 24
213.244.240.0/21 maxlen: 21
185.16.200.0/22 maxlen: 22
31.31.161.0/24 maxlen: 24
31.31.164.0/24 maxlen: 24
31.31.163.0/24 maxlen: 24
31.31.165.0/24 maxlen: 24
31.31.160.0/21 maxlen: 21
31.31.166.0/24 maxlen: 24
31.31.167.0/24 maxlen: 24
185.47.192.0/22 maxlen: 22
185.47.192.0/24 maxlen: 24
172.103.88.0/21 maxlen: 21
185.47.193.0/24 maxlen: 24
185.47.194.0/24 maxlen: 24
2a03:780::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:87:e0:83:b7:50:ab:07:90:13:6a:12:35:e7:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Validity
Not Before: May 16 07:48:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43931fe3a3832e95e3cfc34ad133d20e881f2230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:bf:53:39:84:2e:bb:38:9e:3e:73:b5:3f:
fc:15:9d:33:6e:39:70:b8:c7:1e:2f:ce:e9:9d:b0:
44:47:56:e2:9e:bf:ab:f4:00:53:d7:17:e0:f6:12:
e5:c7:74:be:bf:54:24:3a:10:2a:81:c6:fb:49:e0:
84:4b:c0:3b:6f:69:7a:75:d7:e9:2d:11:86:ee:dd:
f7:0f:12:e5:ba:23:8b:41:d9:1f:9c:b7:dc:d0:19:
e1:8e:0b:54:37:b3:fa:da:54:42:58:20:8d:2a:a5:
ef:ae:91:e8:ed:26:13:b8:46:04:b8:fb:75:b6:84:
22:ee:0c:74:fb:bb:5d:b3:81:d4:8b:6e:fc:94:99:
4c:87:73:16:5e:23:53:68:49:b9:a9:68:2d:d0:3d:
e7:44:bd:8d:83:32:ac:a4:b8:c6:c3:49:c4:ee:39:
b8:62:03:b4:97:5b:17:ab:bc:8c:50:aa:78:9f:0c:
bf:86:0d:02:a6:1d:b3:ff:96:ba:48:d1:98:4d:da:
0f:42:ce:a1:5a:0f:14:02:30:19:ee:72:9d:5a:43:
89:39:ee:8f:08:cc:bd:fc:c0:2a:84:fa:12:cb:96:
17:99:3b:13:e1:bf:97:b6:09:09:92:e2:de:3e:e7:
0f:ae:e9:b3:fa:4a:a8:c4:fd:23:e7:78:47:a7:d4:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:1F:E3:A3:83:2E:95:E3:CF:C3:4A:D1:33:D2:0E:88:1F:22:30
X509v3 Authority Key Identifier:
keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/Q5Mf46ODLpXjz8NK0TPSDogfIjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.160.0/21
81.25.144.0/20
146.66.232.0/21
172.103.88.0/21
185.16.200.0/22
185.47.192.0/22
185.80.216.0/22
194.37.249.0/24
195.42.104.0/23
207.189.192.0/20
213.244.240.0/21
216.158.96.0/20
IPv6:
2a03:780::/32
Signature Algorithm: sha256WithRSAEncryption
4c:47:1f:a4:6e:a7:5c:51:4e:d8:23:0b:2d:71:5c:37:69:aa:
9e:7b:01:4e:f6:70:4e:8c:b2:fa:0a:e5:c8:54:14:78:f7:a5:
7d:e7:c6:20:5c:ef:f4:c3:11:ed:60:86:c1:ea:04:5b:02:57:
ee:c6:5b:a6:a9:60:3e:e8:5b:f0:6c:bd:91:e1:fb:bd:6a:fa:
2b:5a:75:a6:a2:1a:69:fa:68:7b:cf:4a:f2:dd:02:77:a8:2c:
be:bf:15:6a:9a:98:bf:47:60:ea:b1:05:57:6d:54:16:62:bf:
22:84:52:41:1e:28:0a:14:97:b8:1a:d3:ab:0c:7d:5d:f0:78:
cd:6a:8d:85:cf:8e:af:1f:40:61:bf:cf:cc:a8:88:e2:94:11:
16:5e:ce:d5:45:43:0e:d1:f5:48:c6:99:e9:9a:fa:f9:01:1c:
89:9d:47:19:62:5e:f7:f8:4b:64:94:0a:80:79:a9:d8:b5:71:
48:8c:8b:2a:1e:04:ac:ae:d6:74:1f:d6:47:b1:b5:7f:cf:27:
08:78:f3:85:e1:7f:01:00:f5:48:6e:f8:3a:21:a7:87:32:f6:
9f:c6:b9:06:7e:ca:24:9c:7b:2a:5e:b1:57:85:6f:6f:7e:b0:
8b:09:6e:94:81:50:37:34:ee:9c:13:5b:cb:b9:5d:91:45:98:
39:f1:89:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:00 2024 by rpki-client on console-fra.rpki-client.org