Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/jqEoc-eu_MLx-ADfqOMLZS292MM.roa
File: jqEoc-eu_MLx-ADfqOMLZS292MM.roa (raw, json)
Hash identifier: Q2X5T1KdTTHHfTB64NG9jEDPFjvQvZ/eJ288PzBJvAc=
Subject key identifier: 8E:A1:28:73:E7:AE:FC:C2:F1:F8:00:DF:A8:E3:0B:65:2D:BD:D8:C3
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 018B4CCCDCCD368FDDBA964F6C55C649325E
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/jqEoc-eu_MLx-ADfqOMLZS292MM.roa
Signing time: Fri 20 Oct 2023 11:16:16 +0000
ROA not before: Fri 20 Oct 2023 11:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12989
IP address blocks: 81.171.61.0/24 maxlen: 24
81.171.66.0/24 maxlen: 24
81.171.70.0/23 maxlen: 23
81.171.68.0/24 maxlen: 24
81.171.105.0/24 maxlen: 24
81.171.106.0/24 maxlen: 24
81.171.116.0/24 maxlen: 24
81.171.115.0/24 maxlen: 24
2001:4de0:2105::/48 maxlen: 48
2001:4de0:400::/40 maxlen: 40
2001:4de0:600::/40 maxlen: 40
2001:4de0:4300::/40 maxlen: 40
2001:4de0:3000::/40 maxlen: 40
2001:4de0:2000::/40 maxlen: 40
2001:4de0:2300::/40 maxlen: 40
2001:4de0:3100::/40 maxlen: 40
2001:4de0:4200::/40 maxlen: 40
2001:4de0:700::/40 maxlen: 40
2001:4de0:2200::/40 maxlen: 40
2001:4de0:4000::/40 maxlen: 40
2001:4de0:500::/40 maxlen: 40
2001:4de0:2100::/40 maxlen: 48
2001:4de0:4100::/40 maxlen: 40
2001:4de0:1000::/48 maxlen: 48
2001:4de0:402::/48 maxlen: 48
2001:4de0:2202::/48 maxlen: 48
2001:4de0:7002::/48 maxlen: 48
2001:4de0:5010::/48 maxlen: 48
2001:4de0:ac13::/48 maxlen: 48
2001:4de0:3004::/48 maxlen: 48
2001:4de0:4006::/48 maxlen: 48
2001:4de0:101::/48 maxlen: 48
2001:4de0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:cc:dc:cd:36:8f:dd:ba:96:4f:6c:55:c6:49:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Oct 20 11:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea12873e7aefcc2f1f800dfa8e30b652dbdd8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:58:67:36:dd:97:9b:7f:8d:f4:dc:ff:e4:
21:d0:54:82:54:f2:4d:30:f8:ab:7b:d3:15:2f:be:
90:5c:99:93:6d:ea:a0:a3:f3:b9:f2:58:fd:b9:94:
f7:51:90:e9:bf:71:00:d9:cf:74:6b:c7:90:c8:db:
5a:93:4c:b0:61:a3:9a:b1:97:b6:24:73:d0:c6:83:
ab:36:72:b5:cb:dc:17:73:15:24:20:3c:d7:15:2d:
1d:4e:69:8d:a0:d1:6a:d8:3c:5d:b9:23:28:06:2b:
7b:6d:de:52:8a:7b:4b:47:9a:df:29:e7:79:48:56:
3a:f9:3b:5a:d1:e3:61:fc:e0:71:d6:5b:8a:1b:24:
d5:de:88:57:16:5c:60:57:cd:b5:b5:4c:b3:64:8f:
d6:97:5c:19:40:83:33:99:55:b5:1b:38:4c:a1:e2:
9c:7d:12:4a:59:f6:1d:05:e2:ab:ed:cb:80:ee:cf:
ba:f9:85:4e:b2:1a:71:fb:00:93:b7:3d:a0:54:51:
69:3b:a4:2f:67:2e:fc:2a:43:4e:dd:73:74:d9:65:
46:8b:c3:2b:a3:fa:93:a2:4b:d8:c3:71:bb:80:04:
ab:e9:65:f4:29:b9:3b:0d:c7:6c:f7:3d:fd:d7:7f:
10:b2:30:0d:47:c2:9f:0f:0c:4d:7a:f4:08:de:33:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:28:73:E7:AE:FC:C2:F1:F8:00:DF:A8:E3:0B:65:2D:BD:D8:C3
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/jqEoc-eu_MLx-ADfqOMLZS292MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.61.0/24
81.171.66.0/24
81.171.68.0/24
81.171.70.0/23
81.171.105.0-81.171.106.255
81.171.115.0-81.171.116.255
IPv6:
2001:4de0:101::/48
2001:4de0:400::/38
2001:4de0:1000::/48
2001:4de0:2000::/38
2001:4de0:3000::/39
2001:4de0:4000::/38
2001:4de0:5010::/48
2001:4de0:7001::-2001:4de0:7002:ffff:ffff:ffff:ffff:ffff
2001:4de0:ac13::/48
Signature Algorithm: sha256WithRSAEncryption
cd:b9:48:bc:05:f5:e5:80:e7:fc:93:b4:97:67:12:89:b5:7d:
93:39:48:6f:52:1a:5c:eb:59:ff:35:6a:91:f2:d3:5c:89:2f:
2a:b3:69:77:d3:49:d2:b8:dd:3c:56:a6:2d:5c:69:c2:8f:34:
b1:e1:83:9f:b4:98:9e:66:19:d8:1c:a3:8a:58:33:bf:84:98:
2d:06:71:dd:71:11:c2:98:03:d5:9f:4e:e3:95:ff:cc:f9:d4:
77:0b:52:e1:c1:b3:d4:dc:f5:3c:a0:bb:59:bc:63:6a:7d:25:
5c:ba:b6:90:8f:1d:db:99:86:df:3c:87:27:7b:4f:8c:0b:5d:
08:66:52:87:75:35:5a:a5:c7:e8:d0:f8:0a:6f:99:c3:3c:01:
97:75:ba:fb:c4:12:54:91:1e:ac:5e:d9:3a:24:7f:cc:62:a8:
d6:65:65:8f:08:48:d1:39:19:57:88:88:6e:94:d0:9c:3d:fb:
99:4e:2a:e9:88:4a:ce:09:d1:4c:a1:be:84:06:0f:82:aa:39:
df:3e:ae:b3:6e:6b:40:18:ae:5a:ce:59:76:27:77:fb:81:f7:
be:b9:34:d9:11:3e:c1:00:61:82:57:08:7c:27:5d:ac:9a:59:
ad:7c:8a:33:22:a7:54:8b:1b:52:71:da:7a:53:21:53:9d:5b:
65:83:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org