Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/qC3LBexglRNK9Sirgb-Zv6I5QR4.roa
File: qC3LBexglRNK9Sirgb-Zv6I5QR4.roa (raw, json)
Hash identifier: 0H9r8T0dKIsXzFBMDvQKBC2lh6wgUskEdkhwD8Lf6Dg=
Subject key identifier: A8:2D:CB:05:EC:60:95:13:4A:F5:28:AB:81:BF:99:BF:A2:39:41:1E
Certificate issuer: /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial: 019251AA016CC5D0560D54AB410B9F84497F
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/qC3LBexglRNK9Sirgb-Zv6I5QR4.roa
Signing time: Thu 03 Oct 2024 09:15:48 +0000
ROA not before: Thu 03 Oct 2024 09:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60273
IP address blocks: 81.25.32.0/21 maxlen: 21
81.25.40.0/21 maxlen: 21
91.187.0.0/20 maxlen: 20
91.187.16.0/20 maxlen: 20
109.232.112.0/22 maxlen: 22
185.10.80.0/24 maxlen: 24
185.10.81.0/24 maxlen: 24
185.10.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 18:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:aa:01:6c:c5:d0:56:0d:54:ab:41:0b:9f:84:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Validity
Not Before: Oct 3 09:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a82dcb05ec6095134af528ab81bf99bfa239411e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:98:91:22:5d:bd:61:dd:d0:e6:15:56:d5:
e5:78:32:55:74:6a:be:f0:15:0e:94:0c:39:ba:df:
c6:38:77:38:1c:6b:fa:b4:0b:0d:9e:dd:74:98:c2:
5a:a6:5a:4c:07:68:68:fb:8c:15:3e:0c:75:c9:b2:
9f:66:96:c1:84:e9:83:e9:c6:0f:08:19:c2:09:33:
2b:af:f8:0e:dd:4f:5e:c4:aa:5f:91:77:23:42:0e:
1f:59:82:bc:5f:f7:3e:83:e1:8f:a4:bc:df:1f:ed:
4e:31:6a:17:39:6d:3f:6f:2e:b1:20:53:99:a2:3b:
22:ed:43:fd:c6:38:be:c8:f5:44:c6:77:89:19:cd:
d8:87:15:2f:54:a2:24:63:90:70:54:ad:9d:92:06:
3a:76:65:45:21:46:c7:9c:ed:44:86:3a:d2:73:94:
eb:aa:67:64:6b:ae:6c:36:43:7f:93:45:b7:58:8d:
1c:57:a2:0c:7c:f7:da:f6:58:a2:59:29:65:3e:de:
6f:e3:f8:9c:a8:89:fc:30:64:f5:de:b0:a7:37:5f:
e8:e4:08:2f:a0:0e:73:b1:b2:5c:0c:28:b3:94:e5:
04:61:44:bd:e6:c3:94:32:2d:f4:eb:32:fe:dd:91:
13:34:f1:86:63:3b:12:25:fb:07:45:94:43:21:99:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:CB:05:EC:60:95:13:4A:F5:28:AB:81:BF:99:BF:A2:39:41:1E
X509v3 Authority Key Identifier:
keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/qC3LBexglRNK9Sirgb-Zv6I5QR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.32.0/20
91.187.0.0/19
109.232.112.0/22
185.10.80.0-185.10.82.255
Signature Algorithm: sha256WithRSAEncryption
88:8f:f8:52:51:73:eb:19:f5:59:47:17:23:c2:13:3b:ab:cd:
3c:d8:67:62:08:0e:24:17:71:fa:7f:0b:14:9e:2d:88:29:e2:
b3:73:4b:e2:9d:a0:a9:30:01:2c:73:11:59:76:2c:81:82:15:
96:1a:a0:4b:01:a5:62:8f:09:79:58:f9:0b:88:bb:70:8d:cd:
7a:c5:aa:bb:1a:53:46:23:bd:97:40:44:a8:04:f2:55:02:b9:
a8:01:06:87:f8:0c:ed:b1:7d:1e:f2:02:53:10:d1:85:65:f8:
63:ba:6c:6b:8a:3a:02:a6:a6:34:70:90:c7:fd:2d:89:9c:a7:
b7:bb:23:bc:57:19:6a:b7:98:32:8a:ed:c5:cf:ce:e3:e9:40:
54:b6:e8:70:f4:8a:b0:93:cb:6d:e2:bb:c1:47:ea:b0:e0:2a:
ba:2c:0a:35:f8:b7:54:5d:b3:23:4e:3f:f0:1c:20:0c:d8:5c:
12:f6:70:d3:11:9d:6c:2b:cf:ae:aa:5f:a5:d9:8d:d5:70:05:
c7:c9:ce:6e:0f:cc:ab:7b:f2:1e:6d:97:9a:56:1f:e6:6c:7a:
66:8a:0f:fe:dd:18:1a:66:70:51:a9:79:0d:08:0d:4c:1d:46:
cb:d4:1f:c1:c5:12:10:c4:00:79:53:14:33:d1:a3:a8:75:b7:
b3:6c:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 20:08:57 2024 by rpki-client on console-fra.rpki-client.org