Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qFuCts1fY9reOHI9tm_i68h97M8.roa
File: qFuCts1fY9reOHI9tm_i68h97M8.roa (raw, json)
Hash identifier: cBd349fbNO8tAI+BEurabupPIOHjIcvnnDwJfXU6FO4=
Subject key identifier: A8:5B:82:B6:CD:5F:63:DA:DE:38:72:3D:B6:6F:E2:EB:C8:7D:EC:CF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019098D4641B201E76D8F5C5F6FAA6813376
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qFuCts1fY9reOHI9tm_i68h97M8.roa
Signing time: Tue 09 Jul 2024 18:49:34 +0000
ROA not before: Tue 09 Jul 2024 18:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 45.135.184.0/24 maxlen: 24
45.144.227.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.145.0/24 maxlen: 24
62.197.146.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.149.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.153.0/24 maxlen: 24
62.197.154.0/23 maxlen: 24
62.197.156.0/22 maxlen: 24
91.190.101.0/24 maxlen: 24
92.62.120.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
92.62.122.0/23 maxlen: 24
185.244.139.0/24 maxlen: 24
193.218.35.0/24 maxlen: 24
194.169.168.0/22 maxlen: 24
212.119.32.0/23 maxlen: 24
212.119.34.0/24 maxlen: 24
213.109.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 18:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:d4:64:1b:20:1e:76:d8:f5:c5:f6:fa:a6:81:33:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 9 18:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a85b82b6cd5f63dade38723db66fe2ebc87deccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:07:da:b0:44:60:05:48:58:d9:a1:95:9f:
6d:d8:90:e7:24:4f:8b:81:55:66:d5:c4:3f:a7:34:
49:2d:30:70:98:09:d9:09:ba:64:24:0a:ca:6e:92:
10:66:2f:0d:57:40:87:82:5e:23:ec:18:e9:2b:86:
17:6d:2c:b3:ee:ff:e8:51:92:de:80:15:25:9c:e8:
30:e4:4b:df:ec:05:58:e1:84:3d:89:e6:00:e0:ad:
4b:26:9d:e4:13:7b:79:fd:ec:a2:33:2b:6d:b0:a0:
ba:42:c1:38:c9:9b:03:64:18:98:74:eb:75:b5:58:
df:87:d1:04:67:1e:56:0a:ff:96:90:eb:6b:d2:d9:
8c:6b:b2:f5:ab:08:30:8b:6a:c5:52:3d:8e:b0:9c:
ee:de:60:66:35:69:22:0a:a4:cc:30:c4:eb:3d:f1:
76:26:d3:20:6d:ba:c1:2c:1f:06:46:59:39:5a:42:
41:d3:9b:7a:8b:ac:72:97:86:1e:f1:66:dc:b3:ce:
3f:1a:22:75:c8:87:18:7c:dc:39:16:2c:04:6e:08:
c9:5d:17:52:6b:4f:a8:49:18:de:60:7b:a4:c9:11:
cb:d2:b3:3c:70:0a:aa:e4:35:5d:a0:7c:58:36:ee:
f9:e7:a5:6e:1d:e7:03:5f:f0:89:d3:41:bb:d5:52:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5B:82:B6:CD:5F:63:DA:DE:38:72:3D:B6:6F:E2:EB:C8:7D:EC:CF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qFuCts1fY9reOHI9tm_i68h97M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.184.0/24
45.144.227.0/24
62.197.144.0/20
91.190.101.0/24
92.62.120.0/22
185.244.139.0/24
193.218.35.0/24
194.169.168.0/22
212.119.32.0-212.119.34.255
213.109.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:09:e6:1a:3e:b5:22:c5:3a:a3:47:3d:90:ec:ca:0e:7d:90:
44:bd:f0:16:8e:09:3f:c3:d1:f9:ef:3e:47:91:36:40:8f:7c:
c9:1b:ce:bb:7e:a1:a7:68:ea:e2:81:ca:20:22:c0:40:f2:9d:
c7:ea:cb:c8:c8:db:6c:87:85:c4:21:af:2d:c8:02:d0:f9:cd:
b1:1c:4b:03:84:71:eb:03:2f:c4:88:e8:b0:8e:de:17:e7:c0:
97:65:48:e3:4b:d9:44:fa:84:34:3c:16:d7:9f:e7:8f:c9:73:
e2:8e:9f:4e:e9:b1:29:18:50:3e:52:4d:9c:f0:48:f2:28:14:
85:1d:31:6a:72:79:7e:f7:2f:00:e9:80:4b:73:d3:07:1e:05:
1e:3f:52:e3:25:7f:c5:ee:6c:d2:c3:08:e6:9a:1c:8f:1f:e4:
db:e7:04:c2:9b:82:1b:e1:a6:a0:5d:bd:e1:bf:71:5b:de:9d:
cd:cf:0e:0b:8f:dd:a4:4d:ea:65:94:d2:93:6e:a5:f6:56:71:
b4:d3:6d:bc:4a:a7:f7:ce:00:91:78:7a:78:dd:78:8c:9c:af:
ce:5c:10:ee:5a:36:f5:f0:ed:9f:f0:12:19:8e:b5:d7:f6:1b:
45:e7:e1:8c:fb:e7:22:c2:eb:c5:ab:56:b9:f6:f6:5d:da:7a:
40:08:e1:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 29 19:08:46 2024 by rpki-client on console-fra.rpki-client.org