Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QtcR9q3ZVj8A4FFnCWeRwQTcH64.roa
File: QtcR9q3ZVj8A4FFnCWeRwQTcH64.roa (raw, json)
Hash identifier: wRwt3KTAOhckegkOBwF9tEZhisiscStY06MnegR5//o=
Subject key identifier: 42:D7:11:F6:AD:D9:56:3F:00:E0:51:67:09:67:91:C1:04:DC:1F:AE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0190263967785B2B30766276EDB037E62109
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QtcR9q3ZVj8A4FFnCWeRwQTcH64.roa
Signing time: Mon 17 Jun 2024 12:43:34 +0000
ROA not before: Mon 17 Jun 2024 12:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.87.20.0/24 maxlen: 24
45.140.214.0/24 maxlen: 24
45.142.204.0/24 maxlen: 24
45.142.206.0/24 maxlen: 24
45.144.156.0/24 maxlen: 24
45.144.158.0/24 maxlen: 24
45.145.249.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
136.144.25.0/24 maxlen: 24
2a07:e343::/32 maxlen: 32
2a0f:e381::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Jun 2024 08:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:39:67:78:5b:2b:30:76:62:76:ed:b0:37:e6:21:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 17 12:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d711f6add9563f00e05167096791c104dc1fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:6a:41:f0:6a:d5:f2:cf:bf:32:6e:c6:bd:
ea:6b:f1:52:3c:9e:c5:c0:23:1f:44:a9:70:b5:54:
6b:a8:f8:f3:6a:55:52:6d:5a:ab:3b:bc:0a:be:32:
4b:43:27:e2:7a:d5:14:21:e7:c7:ae:f0:1d:86:a5:
3d:fd:b3:63:c6:1a:58:b5:d8:e8:43:4f:f6:c4:be:
56:10:1a:dc:e5:cf:80:af:90:22:4d:f9:c9:88:73:
8f:cb:89:ec:1c:ae:4d:cd:d9:af:66:c9:33:c8:3f:
bc:0d:ab:3d:b1:a9:0e:84:b0:2d:9a:72:37:ef:83:
98:91:06:ea:2a:fc:47:54:58:a2:81:b8:0f:10:b4:
ae:eb:b3:bd:8d:81:f8:f8:2d:bd:57:9e:00:42:9e:
ba:5c:61:54:c6:5c:65:6f:89:eb:73:73:d9:b4:7a:
72:1a:c3:aa:e8:3f:b1:f6:d8:53:73:a5:4d:f8:45:
bd:fc:2e:19:45:45:09:da:a2:46:f2:b9:d7:fd:0f:
dd:bf:2f:6c:8e:eb:d1:44:e3:08:72:32:84:79:46:
5d:82:e9:33:39:74:1b:46:1f:cb:64:f3:ee:4c:83:
ff:d2:5b:48:6a:6d:49:25:36:b2:b2:2a:2f:1e:35:
82:fd:9c:b5:6a:2e:bb:9d:8f:64:f6:22:d0:88:55:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:11:F6:AD:D9:56:3F:00:E0:51:67:09:67:91:C1:04:DC:1F:AE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QtcR9q3ZVj8A4FFnCWeRwQTcH64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.20.0/24
45.140.214.0/24
45.142.204.0/24
45.142.206.0/24
45.144.156.0/24
45.144.158.0/24
45.145.249.0/24
45.146.53.0/24
45.148.25.0/24
89.251.2.0/24
136.144.25.0/24
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
5d:b0:db:d7:74:b2:ca:67:c2:ce:16:af:39:6b:fe:d8:ff:ab:
75:b7:8f:c6:49:8e:e9:c3:3e:24:87:ff:28:bf:99:ea:b1:41:
98:bc:6b:e1:5a:fb:24:ff:a8:85:d5:13:02:cd:f9:db:29:ac:
05:9e:6d:6a:1b:b6:4e:18:7d:c1:6e:3a:17:77:aa:39:96:e7:
b6:bb:f1:5f:c3:c1:cd:87:0b:95:2f:5f:e3:42:63:a2:4a:a5:
97:3d:3d:0e:25:77:c4:40:e5:fd:99:51:72:64:00:9b:c3:9c:
a3:7a:81:78:81:12:0d:ec:7e:2c:41:5c:be:1b:2c:61:44:0c:
7a:d4:a7:8e:99:00:6d:45:fe:40:3e:3c:45:b1:75:ff:fc:95:
56:ad:0e:dc:de:4b:b7:34:04:27:a2:44:c1:96:6f:9c:a4:ef:
42:3a:cd:55:48:b5:4b:9e:01:db:4e:33:00:1c:87:e5:97:14:
1a:f1:16:b1:d5:7a:f3:15:0b:1b:55:79:26:ff:0f:18:1b:f9:
cd:b3:96:c3:e0:28:f7:a8:17:f1:4f:02:12:05:42:cd:2b:1c:
13:10:95:fd:da:e5:00:ea:13:a0:6c:0f:31:ff:73:6e:fd:b5:
3b:78:4f:9b:dd:74:7b:ea:6a:ca:0c:6c:ea:01:c4:1e:46:53:
e9:95:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:54:39 2024 by rpki-client on console-ams.rpki-client.org