Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/qL27QhBUPRYCRpMlYZmlwRPYoZg.roa
File: qL27QhBUPRYCRpMlYZmlwRPYoZg.roa (raw, json)
Hash identifier: A0qBzbVRReGDLWTkXbN5h3QnCqa9OnNLDTzEm/7tSf4=
Subject key identifier: A8:BD:BB:42:10:54:3D:16:02:46:93:25:61:99:A5:C1:13:D8:A1:98
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 018BED04926FF4C2A2A8C62F50799EBEF9FF
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/qL27QhBUPRYCRpMlYZmlwRPYoZg.roa
Signing time: Mon 20 Nov 2023 13:56:21 +0000
ROA not before: Mon 20 Nov 2023 13:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5391
IP address blocks: 31.216.192.0/19 maxlen: 19
194.152.198.0/24 maxlen: 24
194.152.192.0/18 maxlen: 18
93.141.0.0/16 maxlen: 16
93.139.0.0/16 maxlen: 16
93.159.64.0/19 maxlen: 19
78.1.0.0/16 maxlen: 16
46.188.128.0/17 maxlen: 17
46.188.128.0/19 maxlen: 19
87.252.128.0/19 maxlen: 24
31.217.32.0/19 maxlen: 19
93.143.0.0/16 maxlen: 16
93.138.0.0/16 maxlen: 16
31.217.64.0/19 maxlen: 19
93.136.0.0/16 maxlen: 16
78.3.0.0/16 maxlen: 16
83.131.0.0/16 maxlen: 16
83.131.8.0/24 maxlen: 24
31.217.0.0/17 maxlen: 17
31.217.0.0/19 maxlen: 19
46.188.224.0/19 maxlen: 19
93.140.0.0/16 maxlen: 16
89.172.0.0/16 maxlen: 16
78.2.0.0/16 maxlen: 16
188.125.0.0/20 maxlen: 20
195.29.0.0/16 maxlen: 18
46.188.160.0/19 maxlen: 19
178.160.0.0/17 maxlen: 17
78.0.0.0/16 maxlen: 16
46.188.192.0/19 maxlen: 19
31.217.96.0/19 maxlen: 19
93.142.0.0/16 maxlen: 16
93.137.0.0/16 maxlen: 18
2a00:c30::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:04:92:6f:f4:c2:a2:a8:c6:2f:50:79:9e:be:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Nov 20 13:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8bdbb4210543d16024693256199a5c113d8a198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:86:3f:72:61:4c:98:2e:34:dd:4c:03:89:
f2:e3:08:c5:f3:11:69:39:a4:17:d4:e2:3d:0e:90:
14:0c:ea:7e:0c:22:22:35:47:9f:14:d1:69:9b:4b:
d6:27:79:57:ca:94:8c:17:89:95:be:8d:52:33:7e:
4c:87:23:d3:d2:d8:77:84:bf:77:d1:b1:19:81:2d:
68:a8:36:7a:a2:00:be:45:14:69:b8:13:bf:62:3f:
42:5b:36:08:0f:67:d7:5c:b8:c2:da:6e:5a:6b:c0:
d9:16:6e:11:a1:05:d9:ca:75:f4:5e:80:a4:be:fe:
75:b7:83:2d:c2:27:cd:90:26:62:c0:b1:39:c6:23:
00:7f:f1:53:ea:fa:82:62:42:86:d6:cc:7c:cb:51:
e2:45:af:d0:57:6b:08:70:43:42:b0:75:e4:6f:59:
c0:18:a8:e1:bf:42:69:90:ae:bf:00:dc:b6:be:f7:
11:4e:02:62:e5:27:6d:8e:b4:ab:34:54:4a:78:74:
e6:f8:08:ff:39:a9:4a:a3:2b:e5:3e:f0:18:9d:bf:
b9:9a:54:3b:95:f0:46:f9:2a:b9:c3:a1:d4:1e:bc:
46:bb:29:e0:c4:79:86:18:ae:25:dd:a1:48:34:c6:
b4:1d:09:38:70:a3:d5:95:e7:b6:01:0f:35:42:d8:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:BB:42:10:54:3D:16:02:46:93:25:61:99:A5:C1:13:D8:A1:98
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/qL27QhBUPRYCRpMlYZmlwRPYoZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.192.0/19
31.217.0.0/17
46.188.128.0/17
78.0.0.0/14
83.131.0.0/16
87.252.128.0/19
89.172.0.0/16
93.136.0.0/13
93.159.64.0/19
178.160.0.0/17
188.125.0.0/20
194.152.192.0/18
195.29.0.0/16
IPv6:
2a00:c30::/32
Signature Algorithm: sha256WithRSAEncryption
75:e0:2e:ed:36:67:4b:eb:96:5c:43:72:fd:bc:97:6c:45:55:
cf:33:4c:af:4a:09:5e:c0:15:19:fc:1f:11:28:d7:a1:9f:3d:
46:fd:7f:1f:61:27:63:93:b7:d9:cc:e6:4e:25:63:07:f0:19:
fa:d8:1e:cc:05:5a:4f:b5:24:de:56:26:c6:5c:7f:5b:ae:d1:
75:fe:5d:e2:2d:0b:55:71:64:1b:9a:80:23:48:be:10:8b:40:
2a:87:6b:a5:36:db:e6:ac:46:cb:3c:0b:31:dd:ef:98:69:c4:
1a:06:ff:ab:a6:3a:67:6f:08:93:38:89:9a:0a:3f:65:ef:10:
9f:df:6a:12:d4:fb:75:b9:b5:69:7b:00:dc:fb:b9:a7:3e:b3:
56:a4:96:f8:a5:b3:c7:f3:a0:b2:32:58:d8:ef:2f:2d:76:0b:
f4:41:78:af:7b:06:2d:a4:b4:e8:3a:71:35:2a:42:f7:00:72:
75:78:f6:22:19:43:4d:14:83:df:32:89:32:4e:b5:fb:3c:b6:
78:cf:c7:2d:86:5f:e3:ee:95:aa:1f:73:15:aa:0d:fe:9e:11:
7c:ce:2e:16:48:3b:c0:3a:30:dd:32:d6:99:0a:ad:b8:5e:a4:
eb:b5:16:3a:91:b1:93:17:37:a6:61:78:47:28:f0:24:33:b9:
90:f7:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:51 2024 by rpki-client on console-ams.rpki-client.org