Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/qAngjU1KQgw7H-4nodc8_ZOBUYw.roa
File: qAngjU1KQgw7H-4nodc8_ZOBUYw.roa (raw, json)
Hash identifier: zGtvBpOlOGdFYvmpenIDSf+ZAVShhSiYPVzhNIFvb4U=
Subject key identifier: A8:09:E0:8D:4D:4A:42:0C:3B:1F:EE:27:A1:D7:3C:FD:93:81:51:8C
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 018CC50045FE6B02ADDF2BF9B39F70D86F11
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/qAngjU1KQgw7H-4nodc8_ZOBUYw.roa
Signing time: Mon 01 Jan 2024 12:29:38 +0000
ROA not before: Mon 01 Jan 2024 12:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211251
IP address blocks: 213.171.64.0/23 maxlen: 23
213.171.66.0/24 maxlen: 24
213.171.66.0/23 maxlen: 23
213.171.67.0/24 maxlen: 24
213.171.68.0/23 maxlen: 23
213.171.72.0/24 maxlen: 24
213.171.72.0/23 maxlen: 23
213.171.74.0/24 maxlen: 24
213.171.75.0/24 maxlen: 24
79.98.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 17:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:45:fe:6b:02:ad:df:2b:f9:b3:9f:70:d8:6f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jan 1 12:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a809e08d4d4a420c3b1fee27a1d73cfd9381518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:da:01:71:30:18:ed:58:cb:97:f8:61:29:
db:1b:92:c1:1e:a0:ea:6a:d2:63:21:35:4b:0b:a9:
55:62:b5:10:53:48:f9:c6:cc:f4:31:12:d5:2d:cf:
1a:91:6f:d7:fe:6a:4d:d9:98:bc:96:8c:ac:37:34:
5d:45:75:6e:1b:e5:2e:be:53:10:f6:4f:84:9a:57:
6b:48:aa:02:a9:17:c2:3a:a7:a9:4b:f3:3e:13:b4:
34:91:5f:cf:63:79:2a:51:04:87:e6:06:93:2f:78:
4c:c1:e5:23:b6:da:72:0b:29:3b:71:94:c8:dc:79:
48:da:2b:9f:8e:ee:33:5d:f4:c6:eb:4f:69:82:52:
a6:27:21:f3:23:b4:3e:b9:35:31:88:b7:1c:ff:dd:
83:4f:9b:b8:a7:88:d2:fb:cc:5b:c1:fd:91:82:63:
b1:f9:3a:48:5e:ff:a1:4e:dd:bd:6e:f1:ea:e3:4f:
e6:2a:55:3c:b6:8a:bb:4d:26:68:7d:60:fc:a5:af:
8a:22:3d:35:13:53:0a:20:1d:59:b8:e0:03:54:b2:
13:a4:5e:4a:6d:a9:93:14:7c:84:92:22:80:e1:4d:
31:03:cc:b8:0b:1d:60:ee:06:f7:05:3a:7f:cc:45:
17:34:3a:e8:e5:1f:a8:49:78:aa:ce:d7:95:a8:df:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:E0:8D:4D:4A:42:0C:3B:1F:EE:27:A1:D7:3C:FD:93:81:51:8C
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/qAngjU1KQgw7H-4nodc8_ZOBUYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
77:32:43:1d:5d:b6:b1:ed:9f:3a:a4:97:6c:68:6c:74:c8:a3:
4d:ea:a5:79:4f:71:09:80:83:82:91:45:a1:6c:6a:47:52:47:
16:00:b4:f9:4e:57:f7:5d:a1:c0:85:ab:8e:d0:f1:bb:cd:8d:
2d:7f:20:2b:40:86:5c:01:a2:8e:11:7d:17:2a:c4:03:36:50:
f6:21:b6:c3:ab:b8:41:d8:34:a5:05:20:bb:df:06:9d:cb:ec:
7a:b2:3f:06:5e:34:11:09:0b:b5:62:57:e3:ae:9b:31:90:83:
6a:d9:eb:2c:be:9a:0c:e1:15:eb:a3:43:da:26:79:07:ff:d9:
82:86:e8:b7:c5:d2:61:4c:06:77:e0:db:de:36:c0:51:41:21:
78:25:fc:ed:10:86:37:1a:a5:30:a1:2d:1b:0a:eb:de:02:10:
4c:a6:cf:27:e2:35:0e:34:cc:da:79:45:83:01:bd:1c:dd:1e:
67:7e:d0:a4:97:e7:ca:c1:56:5f:99:49:a2:bd:01:e6:89:79:
3e:c0:21:a5:de:36:7c:83:6f:39:b8:c0:1c:2d:c9:49:44:c5:
ed:cc:05:c4:4f:a7:1b:ee:50:f6:67:80:17:50:ac:46:35:2b:
8c:87:7a:64:b7:38:c9:c6:20:56:f7:cd:ab:26:c2:b7:7a:73:
ce:59:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:47 2024 by rpki-client on console-ams.rpki-client.org