Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/SQOYR34IBudpNZ4vdrSrHMa9pZg.roa
File: SQOYR34IBudpNZ4vdrSrHMa9pZg.roa (raw, json)
Hash identifier: DkplGObnaYSor3suchNjXQjbQxT7XvPL/RlhqPz/XAQ=
Subject key identifier: 49:03:98:47:7E:08:06:E7:69:35:9E:2F:76:B4:AB:1C:C6:BD:A5:98
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 018CC26D37357C6820DF1963E80A24A38601
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/SQOYR34IBudpNZ4vdrSrHMa9pZg.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209723
IP address blocks: 2.59.200.0/23 maxlen: 23
88.218.148.0/23 maxlen: 23
5.183.62.0/23 maxlen: 23
5.183.60.0/23 maxlen: 23
147.78.226.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
85.209.4.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:37:35:7c:68:20:df:19:63:e8:0a:24:a3:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=490398477e0806e769359e2f76b4ab1cc6bda598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:4b:f9:7d:38:36:da:f7:40:c2:26:00:47:
e4:10:70:29:b5:f2:51:ba:fb:c0:d9:8f:cb:ab:aa:
6f:c3:53:e3:e2:c2:a5:ee:20:c6:df:b1:e2:27:8c:
b1:24:27:02:46:bc:88:10:fb:fb:44:b4:12:9b:4a:
ab:9f:e3:38:4b:b8:d2:a1:bb:e1:4f:12:68:6c:06:
68:9d:e2:d0:51:d7:f4:1a:26:32:3b:55:f3:eb:10:
63:34:36:2e:31:5b:ac:95:3c:2b:b3:9d:21:ed:1c:
56:37:4d:dd:e9:06:85:ff:15:06:42:ec:89:4a:0b:
e1:5a:37:b2:27:e8:87:6f:ae:c9:c5:1b:26:13:ed:
a7:a9:65:08:10:4a:60:2a:c4:30:dd:3b:a7:29:6e:
2e:1b:34:d9:87:29:b3:45:ef:4d:c2:28:e5:d9:f6:
0a:78:a3:02:00:65:31:1a:7e:33:bc:e8:e0:43:5b:
19:eb:1c:67:b3:68:c8:b7:2d:11:07:ca:64:f9:21:
60:b1:07:2c:ac:66:96:a9:78:74:65:c6:8b:ab:09:
1a:70:bc:6a:aa:21:ba:57:a1:37:24:45:1d:7f:6f:
02:cb:5e:7f:f4:5c:30:03:76:bd:67:d9:a0:5b:5e:
0b:24:ee:76:cc:fa:fc:93:b4:10:6b:5b:52:8d:28:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:98:47:7E:08:06:E7:69:35:9E:2F:76:B4:AB:1C:C6:BD:A5:98
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/SQOYR34IBudpNZ4vdrSrHMa9pZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.200.0/23
5.183.60.0/22
85.209.4.0/23
88.218.148.0/23
147.78.224.0/22
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
27:ee:f5:5d:51:57:f7:e6:bc:70:e5:c7:e2:f3:d7:77:1c:9e:
d1:db:31:2e:b8:07:23:7b:65:bf:02:80:56:5b:e5:b1:1a:b2:
fa:27:0b:4d:10:ff:55:c6:0e:1d:79:f9:a7:35:64:f6:2d:85:
a1:ed:3a:3f:c4:31:90:9b:c5:26:1f:9c:55:29:d3:cd:cb:81:
6d:f7:bd:d4:c9:2d:ee:21:2d:68:be:c8:3b:87:c8:60:c1:12:
8d:8d:08:45:84:23:3f:0f:0a:0b:e2:b4:7e:08:a7:60:8f:d0:
f3:64:67:dd:49:e8:33:f4:2b:4e:bb:de:3a:e6:fa:81:6e:cd:
ee:f4:bc:c0:14:0a:a0:b3:78:b1:c1:15:a0:63:06:4e:ab:56:
22:be:61:6a:ad:bf:9a:0d:92:ef:6b:54:bf:21:25:1c:df:01:
de:fc:fd:e9:44:47:9a:99:6e:e6:4c:dd:38:c8:5a:3b:30:d3:
ba:e8:a5:a3:7f:40:fe:1c:56:24:20:12:de:12:76:09:29:2a:
93:e5:9b:62:b3:2f:e3:54:d2:e3:8b:b5:1d:3e:30:d2:ea:ec:
6f:8d:85:d5:da:92:53:83:ee:1d:5f:db:93:81:1c:9d:95:94:
24:0e:7c:00:d7:30:bf:2c:89:03:e1:16:4f:47:c0:10:26:58:
91:db:66:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:26 2025 by rpki-client