Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/QaNK01qgkMP59jWxAUK4RBd-8RE.roa
File: QaNK01qgkMP59jWxAUK4RBd-8RE.roa (raw, json)
Hash identifier: oHSyvIG6NxrRS2CgG1uOAZu/jlovJHMoOR541hKOAQA=
Subject key identifier: 41:A3:4A:D3:5A:A0:90:C3:F9:F6:35:B1:01:42:B8:44:17:7E:F1:11
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 018D0CCE43EB521DF983548F3D90CE3D731C
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/QaNK01qgkMP59jWxAUK4RBd-8RE.roa
Signing time: Mon 15 Jan 2024 11:07:40 +0000
ROA not before: Mon 15 Jan 2024 11:07:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13101
IP address blocks: 45.145.236.0/22 maxlen: 22
185.234.200.0/22 maxlen: 22
192.166.40.0/22 maxlen: 22
46.22.152.0/21 maxlen: 21
206.168.72.0/21 maxlen: 21
202.71.144.0/21 maxlen: 21
109.94.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:ce:43:eb:52:1d:f9:83:54:8f:3d:90:ce:3d:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jan 15 11:07:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41a34ad35aa090c3f9f635b10142b844177ef111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:c0:3a:69:8c:a9:b2:8c:4d:c7:57:79:d9:
56:df:14:60:f6:3d:84:0b:0b:64:1f:49:22:e8:b4:
35:29:ab:de:c9:84:b4:1b:79:1c:04:02:d0:d5:d6:
42:d3:bb:ec:8d:d9:00:8a:33:3d:7a:4a:14:cb:a9:
43:82:8e:bd:e1:a5:10:69:93:7d:f3:83:e7:da:2d:
28:0f:58:c8:7e:a7:77:f1:2d:2b:b7:7f:90:a3:02:
68:d3:19:87:b9:18:7b:0d:17:a4:98:7e:ce:91:d0:
ff:95:f3:71:32:58:bb:96:d1:8f:1c:49:eb:a5:6c:
76:e2:8e:09:be:97:ba:7f:a4:ee:9b:79:c9:9c:34:
00:29:47:56:18:73:b5:80:9d:2c:63:8a:75:85:c3:
7b:62:2c:07:c4:f3:43:c3:8d:ad:46:e5:20:69:85:
44:33:0b:f8:68:0a:89:b0:6b:d4:1d:41:5e:17:8b:
f0:86:66:a6:5f:9b:69:99:78:d3:6f:70:16:13:1a:
8c:84:6a:1f:1b:84:a8:c5:cb:0d:93:cc:64:0e:fc:
63:60:f9:a8:e8:60:65:61:be:8b:dd:15:27:2f:d3:
f8:4f:fc:1c:99:a6:24:46:cb:56:58:b5:06:83:99:
aa:df:49:1c:d9:75:ed:98:2c:54:bf:05:a1:36:b2:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A3:4A:D3:5A:A0:90:C3:F9:F6:35:B1:01:42:B8:44:17:7E:F1:11
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/QaNK01qgkMP59jWxAUK4RBd-8RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.236.0/22
46.22.152.0/21
109.94.212.0/22
185.234.200.0/22
192.166.40.0/22
202.71.144.0/21
206.168.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:37:ed:59:98:60:37:2e:50:a8:b8:25:d9:dd:8d:ae:bc:1b:
da:5e:ab:b5:75:8c:43:3c:a6:5b:3e:4c:f5:b3:a2:1d:b4:89:
17:2e:e1:04:5b:6c:b5:1f:86:4d:96:76:57:6d:26:15:10:6a:
ec:7c:fc:36:ac:d9:2c:3b:eb:07:56:40:12:cf:03:30:69:e0:
06:2e:09:96:8a:00:2b:a4:9f:f2:75:b7:86:da:d1:2d:f8:ab:
70:94:a2:a1:b4:db:ac:0c:a5:0b:e8:9d:0e:e1:91:f7:21:66:
90:cf:ea:21:4d:ab:21:60:f4:6f:fb:ff:97:ea:83:f9:4d:90:
e4:93:79:0f:b0:4d:6a:ce:4b:3e:13:9f:3e:55:27:55:d3:a0:
3d:f7:66:1b:f6:cc:d9:4f:31:55:6c:64:1f:52:cc:fd:67:25:
70:85:a4:49:df:ed:5b:54:54:e0:00:7f:96:a4:e1:41:b9:74:
ce:89:c8:c6:a6:e0:71:8a:a9:a6:88:7a:6d:4a:8f:d5:a4:c3:
98:38:5c:19:ad:99:e1:66:29:ab:51:46:5b:2f:b8:9c:28:3e:
56:43:b2:d3:16:10:d2:55:3e:15:f2:0e:0b:59:56:9f:68:f7:
6b:b8:44:f2:9a:5c:19:04:c9:43:fe:be:e8:de:95:aa:b0:04:
e9:ed:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:19 2025 by rpki-client