Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/QQOFIqAcWSegIep8U4pqxp7wiN8.roa
File: QQOFIqAcWSegIep8U4pqxp7wiN8.roa (raw, json)
Hash identifier: PTslGiV96xPLVvR8538QWj7t6re4FZgi/kuOOucGY9o=
Subject key identifier: 41:03:85:22:A0:1C:59:27:A0:21:EA:7C:53:8A:6A:C6:9E:F0:88:DF
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 018CC6B82355B5184E08716BBD1894FC80FC
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/QQOFIqAcWSegIep8U4pqxp7wiN8.roa
Signing time: Mon 01 Jan 2024 20:30:05 +0000
ROA not before: Mon 01 Jan 2024 20:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201017
IP address blocks: 145.219.10.0/24 maxlen: 24
145.219.8.0/21 maxlen: 21
145.219.11.0/24 maxlen: 24
145.219.8.0/24 maxlen: 24
145.219.9.0/24 maxlen: 24
145.219.13.0/24 maxlen: 24
145.219.14.0/24 maxlen: 24
145.219.12.0/24 maxlen: 24
145.219.16.0/23 maxlen: 23
145.219.17.0/24 maxlen: 24
145.219.15.0/24 maxlen: 24
145.219.16.0/24 maxlen: 24
2a04:b0c0:8::/45 maxlen: 45
2a04:b0c0::/44 maxlen: 44
2a04:b0c0::/45 maxlen: 45
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:23:55:b5:18:4e:08:71:6b:bd:18:94:fc:80:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jan 1 20:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41038522a01c5927a021ea7c538a6ac69ef088df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:1d:26:33:7c:30:4c:9a:2c:1f:12:9a:4c:
db:0c:7d:34:21:14:c8:44:c2:8d:f1:87:16:83:e2:
2f:13:cd:3f:f4:6f:d5:43:e3:77:5b:43:8d:2a:f9:
af:1a:54:03:fe:74:e5:b3:e4:26:83:6a:22:e9:9b:
2c:b2:4f:e7:73:35:23:9d:10:cc:40:ef:77:fe:d3:
b0:08:6c:90:17:c1:29:56:b5:d9:22:54:37:79:3f:
7b:25:1e:19:d5:33:2f:6d:ea:b1:4b:f8:6c:6f:82:
bb:e6:95:20:bd:48:b3:77:b4:01:87:56:be:ac:e3:
31:55:19:e3:0f:d1:21:02:f7:2c:74:5b:28:5e:21:
63:d2:93:fe:a9:cf:67:e1:dd:e3:87:c9:f1:9f:0a:
23:36:44:93:47:7f:16:df:a6:e1:12:77:ff:9b:48:
05:8b:b7:bf:8b:06:61:02:a7:51:e5:5c:d1:4a:00:
38:d3:fe:10:1e:d4:fa:8b:92:ce:3d:33:e4:9e:98:
5c:a4:27:b9:f0:c6:67:6c:2e:de:77:45:59:5e:30:
1e:09:29:11:bf:4a:63:20:33:d2:30:d3:5c:c7:6d:
80:92:c9:10:68:4f:f7:d8:13:90:da:b3:e4:92:c6:
78:21:e5:26:72:a3:b6:42:bd:0d:c9:04:6f:57:3f:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:03:85:22:A0:1C:59:27:A0:21:EA:7C:53:8A:6A:C6:9E:F0:88:DF
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/QQOFIqAcWSegIep8U4pqxp7wiN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.8.0-145.219.17.255
IPv6:
2a04:b0c0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:af:1b:c6:78:57:7b:94:79:6e:43:ad:0c:9d:dd:b9:a2:fc:
a6:e8:6e:a0:55:ef:c8:95:22:ad:08:5a:af:8f:d8:29:e1:49:
62:28:3e:ee:9c:12:ad:f5:26:f0:5c:40:23:54:00:f0:6a:7d:
08:8b:26:a0:b2:53:48:9b:71:6c:34:6b:0d:df:c9:af:a4:55:
7a:f0:e8:fb:96:3b:0f:be:8d:c9:8c:b2:a9:a6:18:d4:e1:7e:
0b:b7:b1:8e:d0:90:16:b0:08:01:0a:a3:f8:8e:da:dc:7b:3e:
ae:19:3f:1e:7e:25:c8:e6:1f:07:f3:1e:db:4c:f6:db:18:11:
f2:e9:f9:a8:ac:f2:1b:6d:8f:13:80:70:60:87:4a:5a:ed:c2:
c3:53:bb:c1:ae:5b:9c:76:63:29:ae:ab:47:b7:45:6e:59:c3:
51:d1:f3:69:e9:7a:4c:6e:ef:0e:2c:7d:01:1c:b7:57:cc:dc:
7f:d9:44:16:f7:18:ef:8d:3c:5c:05:6e:3b:52:4e:f5:2d:d6:
2e:fd:97:46:eb:50:af:34:cf:d6:28:f4:1f:55:5e:8e:fd:03:
d0:be:0d:dc:a5:31:19:2c:45:63:f3:1d:23:69:c0:60:df:c0:
ae:53:39:31:d7:64:a1:27:5a:89:ac:7c:46:e7:bc:2c:12:75:
93:22:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 14:59:07 2024 by rpki-client on console-fra.rpki-client.org