Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QNXrpMAQ4xcN1EN_NoQEOXq1ECM.roa
File: QNXrpMAQ4xcN1EN_NoQEOXq1ECM.roa (raw, json)
Hash identifier: /ZapOGKxhFaSfUZ7I3bFjtFDf5Vbn5U3zLq0RmK1pTE=
Subject key identifier: 40:D5:EB:A4:C0:10:E3:17:0D:D4:43:7F:36:84:04:39:7A:B5:10:23
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E37525145CC929B72144C80216C21DF13
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QNXrpMAQ4xcN1EN_NoQEOXq1ECM.roa
Signing time: Wed 13 Mar 2024 10:18:45 +0000
ROA not before: Wed 13 Mar 2024 10:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 10:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:52:51:45:cc:92:9b:72:14:4c:80:21:6c:21:df:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 13 10:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d5eba4c010e3170dd4437f368404397ab51023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:f9:06:1b:c7:f2:77:fd:33:96:04:4c:72:
b1:d5:80:34:9e:ea:3b:88:aa:b1:6c:99:b6:bd:86:
31:87:e3:60:fb:45:e5:b8:49:54:47:93:30:d4:63:
77:27:4d:51:3c:e2:c0:8d:99:02:17:82:fd:3e:a0:
c9:27:59:21:7d:d8:3b:a7:a0:88:19:f2:02:a8:6e:
e7:55:55:02:1d:3e:10:44:fd:3e:73:79:52:20:6e:
95:be:ee:bf:89:56:75:ae:fa:97:fc:5f:8c:15:af:
f4:f6:ce:51:b3:a0:8b:8b:ef:75:dc:51:9c:14:f5:
e3:35:c1:df:0f:be:fa:75:8d:8d:65:33:03:f6:3f:
d5:6d:df:3b:61:76:01:c1:4b:31:12:00:3b:30:ed:
dd:ce:57:38:96:15:a6:a8:6c:2b:a8:b0:c8:97:35:
54:60:ab:64:1d:d8:42:33:88:3f:82:f0:28:0e:9f:
98:2c:02:da:67:05:82:d1:ee:1c:8e:39:8b:a6:3a:
77:2b:d6:f2:ec:e8:b1:6a:21:56:46:78:08:f3:24:
68:21:c8:87:91:de:e5:e7:dd:eb:1c:f2:ca:ec:4a:
cf:0d:2b:3f:ac:a7:77:ad:58:32:1f:e3:22:b5:0a:
16:9e:50:37:b6:92:0c:6d:d0:63:84:b7:ae:4a:d9:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:EB:A4:C0:10:E3:17:0D:D4:43:7F:36:84:04:39:7A:B5:10:23
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QNXrpMAQ4xcN1EN_NoQEOXq1ECM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.73.0/24
185.222.29.0/24
185.246.112.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7c:13:97:c1:a3:65:3e:68:f1:60:78:c1:bd:81:26:75:9a:
e4:8b:73:34:8f:6d:1e:db:e4:09:d1:52:6a:5a:44:b3:c6:58:
62:c9:41:db:27:c4:54:44:dc:bf:a9:67:19:17:48:e0:f2:1e:
7e:8c:f8:0f:1d:18:64:12:f9:dc:dd:54:7d:d4:c9:cb:53:e7:
28:2d:37:6f:6d:f2:4d:8e:14:7c:68:4e:f9:1d:04:b4:49:47:
00:c3:c3:93:85:93:ce:9f:1a:9f:73:c6:f7:b1:ec:9f:d6:de:
10:35:6a:49:ae:2e:f6:fe:86:95:46:a8:f7:f0:9b:ef:1d:96:
22:5d:a9:38:75:e1:29:29:0d:bb:41:80:48:27:7b:f5:91:db:
88:3e:71:df:aa:17:58:a0:78:90:21:e6:5d:67:fe:91:09:51:
95:bb:21:ed:ef:39:26:b2:9b:70:9b:a3:81:2c:56:97:9f:29:
00:75:7a:86:79:63:aa:be:89:dd:64:f9:47:d5:68:7c:1a:44:
60:8c:82:19:b3:ec:4b:9b:27:9f:61:35:01:9b:f4:d3:6b:ed:
d1:49:cd:1f:e1:75:32:0b:49:8f:fe:9a:03:65:c6:1d:27:28:
04:87:9e:a8:e2:2d:55:da:3f:04:42:3f:65:88:5c:e0:b9:5a:
b0:b1:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org