Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/qYNxdR2TNOK1sp5ZZGiXhe07iVM.roa
File: qYNxdR2TNOK1sp5ZZGiXhe07iVM.roa (raw, json)
Hash identifier: +AarfqbBYLvMQTMLzeB3fXxFpC5dpURxj+13f3vLCWE=
Subject key identifier: A9:83:71:75:1D:93:34:E2:B5:B2:9E:59:64:68:97:85:ED:3B:89:53
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0189C6A8CB0151D8F0F797115A552A3FCF0C
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/qYNxdR2TNOK1sp5ZZGiXhe07iVM.roa
Signing time: Sat 05 Aug 2023 17:04:58 +0000
ROA not before: Sat 05 Aug 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47376
IP address blocks: 195.238.247.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.220.0/22 maxlen: 22
103.215.220.0/24 maxlen: 24
185.221.239.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
2a05:63c0::/30 maxlen: 30
2a05:63c0::/29 maxlen: 29
2a05:63c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:a8:cb:01:51:d8:f0:f7:97:11:5a:55:2a:3f:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Aug 5 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a98371751d9334e2b5b29e5964689785ed3b8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:cc:69:c7:a4:bd:92:43:34:62:73:97:41:
fe:98:02:d6:35:a8:c7:d8:00:42:4a:27:55:5a:89:
12:76:42:c9:2f:1b:b7:97:d9:d5:13:9e:60:c2:e9:
89:43:da:81:d3:83:05:1b:a7:44:c8:8c:fc:ff:17:
9e:07:14:83:4a:e0:51:45:16:f2:98:61:cd:cb:3c:
50:21:ab:a7:f6:3c:18:b6:2c:3a:89:31:73:87:06:
e9:2a:5a:f3:52:3e:8b:ba:35:27:13:93:f7:da:72:
fa:53:bc:d0:46:16:14:46:dc:59:4d:c3:df:fd:11:
54:e7:1f:bf:6d:00:64:80:c8:2c:f3:70:51:91:a0:
28:d9:0e:48:08:ed:27:b5:0b:08:0f:69:76:77:9c:
b3:ae:fd:2c:f5:c2:5a:86:db:d9:8c:f0:30:83:59:
d9:d9:2d:bb:3d:e7:e2:06:65:f8:dd:a5:6f:75:59:
19:8f:77:63:72:b7:0a:28:c6:95:d8:c7:97:7b:69:
6d:ca:20:ec:3a:e6:39:12:e9:96:02:56:02:80:5d:
04:be:6f:d1:15:f8:f9:ce:7d:05:cc:a6:d6:67:cb:
9b:fd:28:2b:91:e8:64:00:62:d8:9b:a9:53:6c:67:
d5:6a:7d:d9:a7:0a:db:3b:52:84:45:5c:0b:46:63:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:71:75:1D:93:34:E2:B5:B2:9E:59:64:68:97:85:ED:3B:89:53
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/qYNxdR2TNOK1sp5ZZGiXhe07iVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
185.221.239.0/24
195.28.11.0/24
195.238.231.0/24
195.238.247.0/24
IPv6:
2a05:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:75:a9:68:41:dc:37:fb:91:61:bc:46:29:ae:c3:22:57:21:
96:15:45:b0:95:3a:1d:5f:cd:bc:16:22:60:50:04:40:68:45:
64:e2:2a:f3:76:9b:05:37:44:7a:af:ec:a2:43:aa:37:27:2a:
21:de:18:01:be:ee:80:6e:4e:de:da:13:7b:1c:20:c3:33:dd:
16:e2:29:06:f0:da:75:38:52:5c:3e:1e:91:44:9f:58:f2:70:
18:b0:6b:5e:0e:02:2e:1c:45:2b:d9:9f:d8:e9:07:1c:1a:1a:
46:2d:e7:bf:ec:ae:c3:03:f7:e3:4b:9a:6d:bb:97:d9:d5:d6:
2a:6f:e3:c1:e7:8e:90:a7:ec:3a:e1:44:58:50:a1:d5:83:d9:
22:fc:44:a1:60:92:c8:8c:6d:ab:2c:ec:ea:9a:92:b2:b3:4b:
2a:f6:51:17:26:24:e0:82:98:8d:0d:f9:73:68:8f:e3:44:34:
7b:bb:cc:0d:c1:6c:32:2e:42:44:05:0c:1f:ad:e1:84:72:c6:
14:fe:cd:fb:21:4d:40:d2:97:28:47:53:0d:cf:50:70:30:8d:
f7:2a:58:31:92:08:c2:17:90:72:00:d8:8e:0f:8f:81:63:09:
67:e2:26:30:a4:0e:fe:0f:ba:fa:d5:67:ad:8d:4f:83:36:2f:
73:17:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:26 2024 by rpki-client on console-ams.rpki-client.org