Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SQ8eatudhD8GqBFj7aFJM79b1_A.roa
File: SQ8eatudhD8GqBFj7aFJM79b1_A.roa (raw, json)
Hash identifier: wCUeITLhhMkMVw/ConELThTeRPWXN3lHwmnngl5AwYU=
Subject key identifier: 49:0F:1E:6A:DB:9D:84:3F:06:A8:11:63:ED:A1:49:33:BF:5B:D7:F0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0187046DA57CD0A5A01DD95D60C37B0FB35D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SQ8eatudhD8GqBFj7aFJM79b1_A.roa
Signing time: Tue 21 Mar 2023 13:48:27 +0000
ROA not before: Tue 21 Mar 2023 13:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 185.174.137.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
5.252.118.0/24 maxlen: 24
2a0e:d607::/48 maxlen: 48
2a0e:d602:3::/48 maxlen: 48
2a0e:d602:2::/48 maxlen: 48
2a0e:d606::/48 maxlen: 48
2a0e:d602:1::/48 maxlen: 48
2a0e:d602::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Sep 2023 20:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:6d:a5:7c:d0:a5:a0:1d:d9:5d:60:c3:7b:0f:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 21 13:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=490f1e6adb9d843f06a81163eda14933bf5bd7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:30:ca:2d:01:2e:b1:91:79:54:04:33:37:
a8:39:85:08:d5:d4:d1:de:51:16:e2:17:1d:5e:35:
29:18:ac:28:8c:ac:51:5b:3b:1e:d3:de:a8:49:c5:
54:63:63:e2:8f:cd:57:63:0d:40:36:c4:ab:2a:b0:
3d:ad:9f:b9:60:50:7b:1d:c9:6d:10:6d:9e:29:19:
2d:12:7f:00:9e:f4:43:14:9b:c3:b3:e9:7d:7e:d1:
55:dd:7f:a6:01:ce:91:93:f5:d8:b9:9a:ab:59:44:
31:4d:ff:97:e0:48:bf:1d:7d:36:cc:54:2e:1d:9e:
a2:06:48:8c:39:c5:ec:8a:08:ca:70:e1:2c:c4:c7:
0d:d0:99:b1:f3:b6:25:78:d5:9c:0a:61:09:78:21:
c4:31:18:69:1d:11:1d:e0:37:8a:60:c6:db:3c:11:
4b:f0:21:13:e0:6b:ad:65:5a:54:20:4e:13:1b:60:
8a:ec:ea:3c:f7:7e:5b:51:47:96:fe:0c:ad:60:e1:
8d:1c:22:a7:ed:57:17:bc:aa:75:2e:12:60:0a:3a:
62:37:63:5f:88:7b:37:37:c2:3d:21:15:70:0e:b0:
81:fe:39:48:fe:b9:89:5a:b6:e4:b4:c2:04:aa:cc:
5a:76:86:5f:ce:f0:b8:bd:ad:c9:b1:76:48:4e:b2:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:1E:6A:DB:9D:84:3F:06:A8:11:63:ED:A1:49:33:BF:5B:D7:F0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SQ8eatudhD8GqBFj7aFJM79b1_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.118.0/24
45.138.74.0/24
45.142.122.0/24
185.17.0.0/24
185.106.94.0/24
185.112.83.0/24
185.174.136.0/23
185.229.65.0-185.229.66.255
IPv6:
2a0e:d602::/46
2a0e:d606::/48
2a0e:d607::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a2:2b:83:66:08:3e:3c:c3:75:eb:9e:d7:8a:ed:a1:0d:78:
8e:21:31:a8:10:d3:5b:38:09:19:fd:77:7f:90:93:1c:1d:1e:
26:ed:0b:d9:f7:c8:f8:24:7c:99:6b:09:01:8b:0a:d4:b6:11:
e6:2d:52:82:e3:e5:06:fe:41:2d:cc:19:28:05:10:54:19:e2:
4c:06:62:a1:ee:26:23:de:28:e8:a8:0f:c4:c8:69:f8:11:4a:
d5:db:b7:10:80:74:d7:f9:3d:fc:67:8d:90:ad:80:b3:f3:98:
ca:3d:80:9f:5a:b3:a5:d9:db:6e:b1:3b:b8:e6:63:98:01:4b:
41:ca:8f:ec:4c:a5:60:28:eb:57:9e:b0:f5:27:38:29:84:ee:
41:77:4e:96:c8:dc:f2:80:5d:92:60:ad:a7:06:4c:32:fd:90:
dc:2e:8b:4f:f8:22:6b:27:5b:63:f7:5e:6b:72:69:c5:b3:ed:
35:f3:38:c8:bf:ec:f5:e4:1d:80:b7:93:be:21:78:a8:5a:ae:
38:33:9c:05:1b:d1:c2:ef:7e:7b:5d:30:f9:fc:cd:50:12:9e:
07:81:95:f2:38:fd:94:f6:c1:30:2f:9f:34:b8:88:87:68:b1:
a4:a9:de:11:8c:fd:8a:8f:01:79:e9:db:49:b7:a3:46:bf:17:
64:b3:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org