Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/Q-RsSeuxdLv4XxygrcPFRqqm1OI.roa
File: Q-RsSeuxdLv4XxygrcPFRqqm1OI.roa (raw, json)
Hash identifier: MUWTY2SzfHufDME/J1NRfU8zJL0foU1AAx7rKYpiUB4=
Subject key identifier: 43:E4:6C:49:EB:B1:74:BB:F8:5F:1C:A0:AD:C3:C5:46:AA:A6:D4:E2
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018C0DC14E2F3FE3D0C56E04D40BDA7D8207
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/Q-RsSeuxdLv4XxygrcPFRqqm1OI.roa
Signing time: Sun 26 Nov 2023 22:30:21 +0000
ROA not before: Sun 26 Nov 2023 22:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8849
IP address blocks: 5.44.249.0/24 maxlen: 24
146.19.196.0/24 maxlen: 24
185.224.249.0/24 maxlen: 24
158.255.76.0/24 maxlen: 24
185.140.210.0/24 maxlen: 24
185.140.211.0/24 maxlen: 24
62.122.187.0/24 maxlen: 24
89.36.163.0/24 maxlen: 24
89.36.162.0/24 maxlen: 24
88.210.36.0/23 maxlen: 24
185.230.245.0/24 maxlen: 24
103.111.112.0/22 maxlen: 22
91.192.81.0/24 maxlen: 24
176.97.192.0/24 maxlen: 24
185.147.53.0/24 maxlen: 24
95.174.71.0/24 maxlen: 24
95.174.68.0/24 maxlen: 24
95.174.69.0/24 maxlen: 24
95.174.70.0/24 maxlen: 24
89.40.226.0/24 maxlen: 24
193.35.224.0/24 maxlen: 24
31.222.226.0/24 maxlen: 24
2a06:f902:4000::/36 maxlen: 36
2a06:f902:8000::/36 maxlen: 36
2a06:f901:4000::/36 maxlen: 36
2a06:f901:8000::/36 maxlen: 36
2a06:f901:c000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:c1:4e:2f:3f:e3:d0:c5:6e:04:d4:0b:da:7d:82:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Nov 26 22:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e46c49ebb174bbf85f1ca0adc3c546aaa6d4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:fd:f0:7a:73:a8:50:c0:d8:5e:ae:0d:87:
4f:dc:79:2c:29:94:c2:32:69:10:0a:b5:41:30:dd:
a6:06:62:28:e4:94:16:9d:6b:60:ec:b4:2a:76:19:
71:5e:fe:e1:c6:ea:84:da:12:d0:78:76:38:ad:7f:
2a:33:d9:22:e2:f1:c5:ed:90:2a:78:de:cf:0d:0c:
1a:a0:84:d2:e3:f3:15:ad:dc:70:60:53:1f:7c:47:
90:dd:97:d9:48:0a:61:bf:e7:69:14:23:a1:22:a1:
00:92:8f:2a:6d:4d:19:d4:7c:7b:7e:b5:68:d4:ff:
d5:97:b7:2d:6b:c3:8a:fc:de:f6:dd:0a:85:bf:4c:
1a:9a:95:76:47:51:37:7f:d3:a0:f1:9d:14:9c:c1:
ba:b4:4a:b5:1c:6d:5a:23:a3:42:85:bc:1f:74:cc:
66:84:94:b8:15:18:8a:bb:bd:5b:49:2b:01:c9:3a:
8e:d1:7a:12:52:31:4d:4e:8e:63:f8:00:b1:78:10:
8b:11:9b:72:80:84:ed:45:14:bb:36:c4:7f:96:65:
8f:ae:ad:75:b4:1f:1b:15:f3:0a:66:87:db:77:c4:
d7:12:f7:bd:46:be:24:24:41:65:62:1a:50:46:33:
f0:f7:04:d6:ac:0f:63:5a:6e:11:44:aa:f1:df:e9:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:6C:49:EB:B1:74:BB:F8:5F:1C:A0:AD:C3:C5:46:AA:A6:D4:E2
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/Q-RsSeuxdLv4XxygrcPFRqqm1OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.249.0/24
31.222.226.0/24
62.122.187.0/24
88.210.36.0/23
89.36.162.0/23
89.40.226.0/24
91.192.81.0/24
95.174.68.0/22
103.111.112.0/22
146.19.196.0/24
158.255.76.0/24
176.97.192.0/24
185.140.210.0/23
185.147.53.0/24
185.224.249.0/24
185.230.245.0/24
193.35.224.0/24
IPv6:
2a06:f901:4000::/36
2a06:f901:8000::/36
2a06:f901:c000::/36
2a06:f902:4000::/36
2a06:f902:8000::/36
Signature Algorithm: sha256WithRSAEncryption
86:0c:90:f6:63:e8:44:c9:e2:e1:99:0f:1f:2d:34:30:28:31:
26:2e:0c:34:41:ee:7e:95:a0:12:4f:dd:bd:9b:1a:a2:68:48:
38:52:7a:c5:70:97:35:21:ac:f8:e1:df:89:89:a6:41:24:e3:
7f:5b:2a:06:7c:2d:00:41:b8:67:e1:6d:58:1f:80:22:99:bc:
72:70:bf:7d:e6:40:9c:9d:5c:15:1c:df:7e:3a:3c:09:bd:3e:
84:51:11:34:30:3c:5e:28:20:1f:0f:64:0c:be:2c:c6:8d:78:
22:d8:b6:bc:83:88:49:31:24:07:76:ea:34:e1:68:82:bc:65:
d5:d0:f5:2e:f0:11:8b:2f:00:90:df:13:43:4a:69:87:9d:d8:
34:29:7e:66:f0:b4:2a:84:25:e5:6f:2c:36:08:ce:fc:39:2e:
cc:df:22:fa:b3:cf:e1:a4:56:86:58:36:23:e0:24:1c:32:0c:
ce:d4:2a:3a:93:e0:ad:7d:f1:0b:ff:df:68:9a:1e:39:e6:e3:
4a:2b:ab:61:e0:64:39:7f:14:a7:a2:b2:29:36:bd:f0:e7:5f:
98:25:00:97:8a:25:70:b1:39:13:e4:da:88:05:fd:59:36:bb:
c8:ae:6a:4e:c3:59:b3:49:15:7d:03:1b:cb:0a:71:ca:6f:3b:
a4:51:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:44 2024 by rpki-client on console-ams.rpki-client.org