Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/1cqmYHGdbjXnN363BrWCyKqTzB4.roa
File: 1cqmYHGdbjXnN363BrWCyKqTzB4.roa (raw, json)
Hash identifier: X/z6HxFTtOidRgTHkHWbWVkVwn5NYpvrSIco2nHIjYE=
Subject key identifier: D5:CA:A6:60:71:9D:6E:35:E7:37:7E:B7:06:B5:82:C8:AA:93:CC:1E
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01856C4A77D109618A8C8DFBC4C50FB51EA5
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/1cqmYHGdbjXnN363BrWCyKqTzB4.roa
Signing time: Sun 01 Jan 2023 07:44:57 +0000
ROA not before: Sun 01 Jan 2023 07:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25252
IP address blocks: 153.112.160.0/21 maxlen: 21
153.112.176.0/20 maxlen: 20
153.112.173.0/24 maxlen: 24
79.170.17.0/24 maxlen: 24
79.170.16.0/24 maxlen: 24
79.170.21.0/24 maxlen: 24
79.170.22.0/24 maxlen: 24
79.170.23.0/24 maxlen: 24
79.170.18.0/24 maxlen: 24
79.170.19.0/24 maxlen: 24
79.170.20.0/24 maxlen: 24
153.112.208.0/23 maxlen: 23
153.112.132.0/22 maxlen: 22
153.112.139.0/24 maxlen: 24
153.112.150.0/23 maxlen: 23
153.112.149.0/24 maxlen: 24
192.138.109.0/24 maxlen: 24
192.138.110.0/23 maxlen: 23
192.138.116.0/23 maxlen: 23
192.157.11.0/24 maxlen: 24
192.157.8.0/23 maxlen: 23
192.157.8.0/24 maxlen: 24
192.157.9.0/24 maxlen: 24
192.157.10.0/24 maxlen: 24
153.112.240.0/24 maxlen: 24
153.112.241.0/24 maxlen: 24
2a02:f784:30::/48 maxlen: 48
2a02:f784:8001::/48 maxlen: 48
2a02:f784:20::/48 maxlen: 48
2a02:f784:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:77:d1:09:61:8a:8c:8d:fb:c4:c5:0f:b5:1e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 07:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5caa660719d6e35e7377eb706b582c8aa93cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:73:e5:8a:6e:29:fa:c4:ac:4b:5c:bf:81:
85:b1:b8:16:6b:df:aa:92:8e:00:79:23:11:cc:7d:
fb:5c:e9:6a:10:aa:b8:2d:f4:d1:da:20:0e:51:ff:
1f:85:25:bf:5e:ee:f1:e7:e8:84:76:30:69:a0:5a:
e5:bd:bd:5e:af:25:d4:7e:04:d7:54:bd:41:fc:ad:
24:e9:05:bd:2e:2c:5f:62:bf:59:47:c1:d6:5a:63:
1c:c3:99:8c:16:4f:c7:93:87:d4:0e:3a:f4:6e:c4:
cb:a7:c0:ad:58:3d:78:21:f2:c4:f0:6f:41:e2:4c:
b9:00:93:72:fa:92:26:18:20:b6:58:5a:83:17:77:
50:98:93:64:ef:97:82:cc:ab:14:8a:b6:5c:f3:4a:
4d:ce:76:4e:3f:a9:be:b3:49:11:ac:cf:f4:11:94:
d3:c3:10:20:d1:7a:9e:2b:b7:7f:af:8e:2e:d2:90:
f3:af:28:55:d7:c0:95:58:88:48:da:28:fa:df:fc:
bb:99:c1:36:22:fa:ee:c5:2b:36:8c:16:93:6d:a5:
43:4e:5b:4e:2c:0d:0b:a9:9d:5f:f6:4f:c0:ea:9b:
96:95:fb:3c:2d:57:d1:ec:fc:2c:0f:2a:8f:c7:53:
0b:d4:6e:43:df:44:17:df:fc:5a:f4:d8:9d:f5:23:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:A6:60:71:9D:6E:35:E7:37:7E:B7:06:B5:82:C8:AA:93:CC:1E
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/1cqmYHGdbjXnN363BrWCyKqTzB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.16.0/21
153.112.132.0/22
153.112.139.0/24
153.112.149.0-153.112.151.255
153.112.160.0/21
153.112.173.0/24
153.112.176.0/20
153.112.208.0/23
153.112.240.0/23
192.138.109.0-192.138.111.255
192.138.116.0/23
192.157.8.0/22
IPv6:
2a02:f784:20::/48
2a02:f784:30::/48
2a02:f784:8000::/47
Signature Algorithm: sha256WithRSAEncryption
84:65:ec:78:9e:a6:d8:a0:3d:8d:5d:f4:db:29:1c:43:18:a7:
e7:6c:37:a3:26:d0:47:9c:6a:c0:14:e7:9c:1e:25:1f:5b:78:
e7:a3:91:f4:72:e9:1e:63:47:10:40:92:94:55:24:65:0c:c5:
31:97:bd:68:3a:fe:0a:c4:d3:46:2f:56:81:6e:f2:6a:85:02:
94:c3:6a:51:36:1d:be:53:bb:e4:e0:78:bf:e3:31:2b:63:6f:
66:aa:8c:de:24:c3:84:b6:ca:e5:52:e8:80:34:c7:65:25:af:
11:d6:b5:ad:2b:a5:65:c7:4d:74:75:f5:97:2d:5e:46:11:56:
62:7a:c0:d5:38:eb:33:ec:87:b8:e3:27:ed:45:c2:f7:32:ca:
31:ad:fb:67:34:7c:7e:2f:c0:51:dd:5f:a6:b7:e0:29:6e:81:
a0:39:24:7c:04:fa:90:61:8e:f5:68:61:26:d9:43:ff:2b:71:
c2:73:31:12:88:75:b1:a6:16:5d:15:ce:79:13:ee:d8:07:40:
bc:3f:66:cb:ff:54:a3:71:a9:be:94:c4:c2:b2:2e:f7:49:41:
c4:b1:65:67:2d:d5:29:cc:80:f7:75:f5:69:2a:bc:32:0c:a1:
a6:5a:43:c6:57:01:f6:7e:8a:91:33:65:22:73:ad:21:f8:65:
05:d3:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org