Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QVh36l0_yFlPmz3fENRS2gFF9Nw.roa
File: QVh36l0_yFlPmz3fENRS2gFF9Nw.roa (raw, json)
Hash identifier: KoEgryFzEj9GF45wHj/KUbTuDrMe5pLJ1BhHf5MmEso=
Subject key identifier: 41:58:77:EA:5D:3F:C8:59:4F:9B:3D:DF:10:D4:52:DA:01:45:F4:DC
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3CCBA1E84846D88D8E3E0779943C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QVh36l0_yFlPmz3fENRS2gFF9Nw.roa
Signing time: Mon 02 Jan 2023 05:55:05 +0000
ROA not before: Mon 02 Jan 2023 05:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.174.138.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
185.109.21.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
185.221.160.0/24 maxlen: 24
45.142.120.0/24 maxlen: 24
194.53.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3c:cb:a1:e8:48:46:d8:8d:8e:3e:07:79:94:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=415877ea5d3fc8594f9b3ddf10d452da0145f4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:82:cf:21:8e:be:cd:43:c5:2b:4c:16:b0:
ef:3a:2d:b5:d9:bf:42:77:fe:79:2d:ac:49:f8:b3:
ff:55:fe:67:8f:68:5a:8d:a0:70:19:44:6e:92:e9:
30:15:b0:fa:fb:7f:4d:21:6e:98:f0:62:37:82:93:
72:b2:38:71:7c:5f:db:e5:e4:59:b9:b6:08:63:eb:
aa:17:bf:71:10:96:dd:4a:67:a3:28:3e:c3:b0:61:
3e:e8:c7:8f:fd:9f:15:6b:50:ab:5c:bf:58:10:ca:
25:d7:df:43:18:99:ed:55:47:00:ea:1f:55:d9:ba:
e4:f3:dc:b1:3b:07:93:d1:b5:64:ef:0c:59:89:ba:
ad:4c:a6:80:50:f0:bf:6b:46:98:0c:ab:8a:12:72:
18:4e:0c:a8:01:a9:1d:2e:a0:ee:2e:df:ea:48:1f:
f4:7d:3b:cb:b9:33:1b:61:59:17:5c:96:44:a4:0f:
af:b7:72:a7:42:2d:6a:f8:1a:cb:50:79:c6:a5:dd:
93:69:61:32:48:63:f0:93:e0:f0:f4:a5:35:a9:fc:
33:c3:0c:10:20:1d:cf:c6:68:84:0f:74:05:38:de:
bc:f8:f6:7a:bb:44:7e:6b:d8:61:45:5b:1c:74:78:
7c:18:cf:ad:11:ea:f0:86:7a:0c:02:dd:52:0c:f2:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:77:EA:5D:3F:C8:59:4F:9B:3D:DF:10:D4:52:DA:01:45:F4:DC
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QVh36l0_yFlPmz3fENRS2gFF9Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.211.0/24
45.133.247.0/24
45.142.120.0/24
185.109.21.0/24
185.174.138.0/24
185.221.160.0/24
194.53.53.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c9:ff:d1:ff:46:84:7f:22:a2:2a:9b:52:f0:8d:cd:28:4f:
bf:64:e8:8e:37:2a:57:71:53:59:55:cd:92:4f:16:25:56:36:
30:88:d6:7d:03:4c:97:a1:03:52:70:a6:4a:5c:9e:98:9a:2b:
c0:86:d3:50:4b:18:ca:ae:10:13:e0:3a:52:32:f4:9c:e7:74:
2b:d7:b9:3c:6f:c7:2d:b2:a9:28:55:ab:cd:91:8e:9c:90:8f:
2c:94:26:78:48:90:dd:ab:22:3f:e2:79:0d:f8:20:36:e3:f2:
0e:ae:ed:51:b5:26:11:e3:f1:2a:95:65:0c:8f:7c:2b:10:c8:
1a:e1:aa:9c:e4:38:69:27:2c:77:06:3b:22:ee:8c:d8:07:43:
9a:c6:69:17:25:ee:9c:05:28:17:06:7a:75:1a:03:26:97:94:
78:90:df:ff:c1:98:2c:1e:08:e7:96:68:62:3e:9d:a5:d7:24:
7a:6c:63:45:4c:93:e7:b8:8d:a9:af:cf:bb:1f:49:35:aa:dd:
80:e2:83:ea:9a:d4:d5:5e:8c:b0:ac:16:48:d8:39:1a:95:04:
55:c1:65:0d:fa:67:d8:6f:66:e7:54:e4:85:a4:64:a1:76:2f:
ad:fc:45:33:6c:79:a0:da:6d:18:0d:c2:85:3b:f0:a4:5d:a2:
61:7a:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org