Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/Qc2wyL5g59WufIbArbf1o1IYHJQ.roa
File: Qc2wyL5g59WufIbArbf1o1IYHJQ.roa (raw, json)
Hash identifier: b+vE57yDcR5Wo/yr+nb83Y3HJLhX8WssYDbIHNZNUt8=
Subject key identifier: 41:CD:B0:C8:BE:60:E7:D5:AE:7C:86:C0:AD:B7:F5:A3:52:18:1C:94
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 018CCA29C2B811A9828E051CD15DCCA1BA7D
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/Qc2wyL5g59WufIbArbf1o1IYHJQ.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24951
IP address blocks: 185.154.36.0/22 maxlen: 22
185.154.38.0/24 maxlen: 24
195.144.7.0/24 maxlen: 24
212.71.96.0/20 maxlen: 24
217.71.93.0/24 maxlen: 24
212.71.102.0/24 maxlen: 24
212.71.112.0/22 maxlen: 22
212.71.107.0/24 maxlen: 24
212.71.116.0/24 maxlen: 24
212.71.118.0/24 maxlen: 24
212.71.117.0/24 maxlen: 24
212.71.112.0/20 maxlen: 24
212.71.119.0/24 maxlen: 24
212.71.120.0/21 maxlen: 21
217.20.192.0/20 maxlen: 24
217.20.192.0/24 maxlen: 24
217.71.80.0/20 maxlen: 24
217.71.85.0/24 maxlen: 24
217.71.88.0/24 maxlen: 24
217.71.89.0/24 maxlen: 24
217.71.87.0/24 maxlen: 24
2a00:fb00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c2:b8:11:a9:82:8e:05:1c:d1:5d:cc:a1:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41cdb0c8be60e7d5ae7c86c0adb7f5a352181c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:8e:3f:ab:37:32:0d:f8:eb:d3:17:10:80:
7d:6c:1a:6a:c3:b7:83:e2:1d:27:49:dc:17:aa:9c:
b7:2f:52:cf:51:2c:0c:cd:37:27:8d:1b:aa:74:da:
70:9d:d6:45:13:fe:55:60:04:e9:ff:f4:40:88:d1:
29:39:9e:7e:86:d1:2d:d9:54:1a:00:a4:59:0a:fc:
ab:91:f9:3d:1b:b3:25:4d:77:e6:d2:5b:a9:7e:00:
21:4f:63:82:bc:dd:e7:b9:bb:88:d2:ad:3b:c3:b8:
b5:8e:7c:d2:c6:8f:c7:d1:a2:11:be:95:8a:39:16:
63:49:1d:ea:aa:28:50:da:70:34:f8:74:1b:e2:7b:
8b:83:26:0e:81:05:51:39:f9:7f:c4:bb:be:77:33:
10:13:7a:ca:e0:34:ca:09:2d:7a:eb:95:fe:e4:92:
0c:e0:c8:f2:09:3c:c4:8e:da:57:f8:ba:72:f7:19:
1a:e6:0e:81:87:44:2a:b7:28:78:17:ee:84:50:d3:
52:9e:df:fb:c1:96:bf:e9:20:16:6f:c3:6c:12:e1:
5d:b4:52:30:18:2f:07:84:72:51:30:e2:01:22:0b:
d6:28:59:a3:d3:5f:08:5d:b1:09:18:d2:02:ce:86:
d5:5e:7b:b1:ab:69:26:72:c3:b5:b5:43:d3:19:34:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:B0:C8:BE:60:E7:D5:AE:7C:86:C0:AD:B7:F5:A3:52:18:1C:94
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/Qc2wyL5g59WufIbArbf1o1IYHJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.36.0/22
195.144.7.0/24
212.71.96.0/19
217.20.192.0/20
217.71.80.0/20
IPv6:
2a00:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
62:ed:f1:35:5e:f0:71:b4:1f:c5:4a:3f:98:db:83:ce:aa:01:
83:7d:1e:39:8a:13:5f:f6:bc:2f:bb:79:64:23:50:bf:ec:22:
b0:1e:39:42:d2:4b:0e:22:2b:7d:64:ae:da:06:13:43:de:35:
17:0a:95:28:6c:85:7f:f2:ac:eb:5b:ae:2c:41:cb:04:64:cf:
1e:84:01:56:38:be:ef:c5:fe:dc:5c:ac:60:da:6e:c9:82:74:
be:01:ba:76:c0:a7:fb:c8:d7:3d:c3:16:68:b5:41:b9:95:07:
82:c9:be:e1:2d:e2:8c:bc:3e:65:37:2d:c9:6b:f0:a3:a6:52:
be:72:ab:af:34:52:db:de:10:d7:0d:ec:95:6e:ea:f8:74:28:
d3:a3:0b:12:86:88:b3:a0:f4:c6:4b:48:a5:e5:f1:16:3e:50:
a0:0f:f8:3a:09:5d:5f:cb:81:26:19:66:90:00:10:07:7d:30:
b6:36:a2:90:50:f7:6d:c8:ec:a4:e1:ff:97:d1:98:bc:7f:bd:
90:c1:2c:55:cd:c6:eb:8b:ad:8d:02:fb:fc:cf:71:b0:67:34:
e7:81:34:e8:1d:9a:61:04:b0:04:44:5c:1c:98:a2:b7:43:1e:
d7:61:d6:b0:b6:21:d4:26:11:bd:f0:20:f8:3e:94:de:28:61:
a6:98:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:21 2025 by rpki-client