Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qsF0uORQZbDUsiJMAsLEeDnaeiM.roa
File: qsF0uORQZbDUsiJMAsLEeDnaeiM.roa (raw, json)
Hash identifier: 6UdhvFQKl0zluMCI3wVYlb1Qj0b/rNwsCRhczsCvM6w=
Subject key identifier: AA:C1:74:B8:E4:50:65:B0:D4:B2:22:4C:02:C2:C4:78:39:DA:7A:23
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCB5D0618624FE98CCF29DBEEFF5C9
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qsF0uORQZbDUsiJMAsLEeDnaeiM.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 83.60.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
83.47.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
195.53.218.0/23 maxlen: 23
81.37.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
195.53.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
194.179.112.0/24 maxlen: 24
88.11.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
213.99.44.0/24 maxlen: 24
83.52.0.0/16 maxlen: 16
195.55.110.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
88.15.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 17 Jan 2024 08:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b5:d0:61:86:24:fe:98:cc:f2:9d:be:ef:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aac174b8e45065b0d4b2224c02c2c47839da7a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:f6:6f:b5:4e:94:77:bb:81:01:f9:aa:b5:
fc:e4:72:d5:78:76:95:72:c7:54:ec:d9:9e:b4:d1:
ea:f0:3f:f2:f8:0a:1c:00:e9:de:83:5a:f4:4f:77:
b5:0e:e5:c0:ee:be:ea:16:17:f7:4b:c0:63:8d:81:
3a:b8:88:08:8f:8a:81:0d:4d:39:3b:bf:2c:91:0e:
70:d3:83:4e:00:8e:1d:71:3a:22:29:79:b0:9f:4f:
c1:38:79:c4:20:b1:72:a6:7b:65:f8:aa:c0:e5:89:
3e:a2:53:c9:c4:9a:4c:d2:37:47:bf:a0:d3:9e:b8:
9c:36:1c:03:dd:b8:a3:8c:ff:0d:4c:0e:29:35:c0:
0f:0c:23:0d:31:e3:c7:79:d3:07:89:21:13:95:9c:
a8:7a:f5:62:b0:e6:ed:80:07:f9:aa:dc:a1:33:cb:
1b:64:dd:16:45:37:d0:b6:3e:e3:6f:06:c7:81:8f:
88:07:ce:86:1b:d3:4c:1d:ee:0e:d2:e6:3f:d3:7e:
20:44:c8:9c:d5:5c:e8:7b:f7:80:eb:61:7d:ba:7e:
bc:b1:85:99:fb:ae:20:e3:01:1c:f5:f8:ec:2f:78:
4b:0e:b6:67:c7:c8:e5:42:27:8a:ec:17:ce:9d:c4:
72:1c:fe:3c:8d:c8:23:bd:55:ad:d6:ac:48:ac:09:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:74:B8:E4:50:65:B0:D4:B2:22:4C:02:C2:C4:78:39:DA:7A:23
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qsF0uORQZbDUsiJMAsLEeDnaeiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.137.0.0-2.138.255.255
79.144.0.0/14
80.30.0.0/15
81.32.0.0/16
81.34.0.0-81.41.255.255
83.32.0.0/14
83.37.0.0-83.39.255.255
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.0.0.0/15
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
194.179.112.0/24
195.53.0.0/16
195.55.110.0/24
213.99.44.0/24
213.99.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:21:e0:36:7b:a3:6b:c8:9f:6d:bc:a1:79:d8:18:68:69:8b:
52:7a:aa:25:05:54:f8:7c:62:cf:45:30:71:cc:a6:dc:24:4c:
e6:06:8f:28:e8:6f:23:91:86:4e:e8:db:a6:a5:32:48:b2:bb:
c7:31:fc:f1:0f:ca:fe:19:65:89:72:8d:47:9b:1c:76:d7:26:
1a:0d:58:f1:1c:7e:2a:d4:0e:fc:29:03:ba:1c:55:d6:e4:97:
10:6c:f1:25:cf:91:90:b2:19:55:6b:f7:33:c4:0e:ae:e5:d4:
0f:63:0b:19:25:f8:9c:11:9a:3c:be:68:6e:25:a2:2e:00:86:
90:01:36:14:cf:bb:e7:24:b4:bc:ba:7a:a1:5c:a3:bc:03:18:
19:ff:51:e6:43:fe:64:77:d6:04:af:4f:06:30:4d:9d:06:98:
5a:32:a7:13:43:d8:a3:24:80:35:17:3b:4f:ed:0d:99:97:2a:
e6:2f:4a:4f:22:5a:0f:b7:c4:f6:7f:eb:84:44:ab:d2:04:25:
23:9e:e1:e8:87:77:24:40:d8:0d:ca:53:ed:ea:07:f3:fb:2a:
ff:df:04:8a:ad:6a:5b:a5:31:2e:42:ee:5f:89:5a:ec:b6:8d:
1e:e2:4b:39:03:8a:f6:83:2b:b1:25:ad:32:d2:99:8f:91:c1:
23:c0:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org