Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qzsJXNxXA9I3EDwyxTaoFSAAdPs.roa
File: qzsJXNxXA9I3EDwyxTaoFSAAdPs.roa (raw, json)
Hash identifier: bgs0zoaEsb/SLJ7UBCJYpZrhlMbMe7Wm938YxpGBJis=
Subject key identifier: AB:3B:09:5C:DC:57:03:D2:37:10:3C:32:C5:36:A8:15:20:00:74:FB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019103D1C4F788635DC8907D7DBBFA627BC9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qzsJXNxXA9I3EDwyxTaoFSAAdPs.roa
Signing time: Tue 30 Jul 2024 13:26:04 +0000
ROA not before: Tue 30 Jul 2024 13:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 12 Sep 2024 10:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:d1:c4:f7:88:63:5d:c8:90:7d:7d:bb:fa:62:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 30 13:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab3b095cdc5703d237103c32c536a815200074fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:f1:5a:65:d6:bb:3c:bf:3a:bb:a3:8d:cc:
73:be:1f:b8:6c:0d:12:71:42:57:05:3d:12:be:3c:
a6:ff:c0:d6:d0:48:c8:cc:09:5d:5d:c0:6f:8f:d0:
39:41:16:27:9b:1b:1c:57:96:d4:aa:eb:44:26:88:
6c:a5:fc:95:b5:6d:04:4b:12:65:ed:ee:d3:e1:f6:
bc:f1:bc:90:da:2d:cd:76:9b:19:f4:87:45:f0:bc:
71:fb:88:10:e8:ef:dc:44:6d:46:7a:60:f5:83:16:
19:3d:d4:31:81:5e:3a:7e:5b:61:8d:2a:fc:57:15:
53:c1:9d:16:4e:39:b6:48:b4:07:ad:5a:c5:b9:52:
c3:1c:95:4c:98:83:96:b9:e9:c0:49:7e:7e:a3:6d:
c2:15:73:4b:1b:de:ba:5f:f5:da:1a:f3:35:1f:42:
62:8c:68:e1:06:55:dc:b9:b0:a6:05:46:f8:09:17:
b3:8e:14:4a:08:7b:8a:bc:85:09:0b:31:81:f9:87:
91:cc:e2:64:5a:ff:f3:95:94:93:11:22:f4:5a:63:
ae:a8:72:75:ba:40:a7:2a:de:5f:0e:71:e8:4f:b7:
65:b4:b0:c5:d6:76:f0:93:0f:f9:71:e8:fb:2c:ee:
85:5d:80:80:b9:ca:49:27:7b:fa:15:61:00:bd:0d:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:09:5C:DC:57:03:D2:37:10:3C:32:C5:36:A8:15:20:00:74:FB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qzsJXNxXA9I3EDwyxTaoFSAAdPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.148.0/24
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:a4:df:a5:40:ad:e4:9d:16:c1:15:02:72:58:84:f0:e5:d9:
c3:e3:30:b7:c6:fc:b8:33:c4:31:c2:f3:77:3c:04:e9:7a:6f:
72:50:88:d3:69:9a:07:91:74:61:82:06:be:70:07:9b:9f:9c:
45:13:a0:52:15:ec:25:aa:d7:fa:f4:c0:48:58:56:ca:a0:f7:
7c:18:42:72:31:08:6a:66:fc:94:aa:f9:8f:c6:3a:57:7a:55:
60:d0:2a:e5:15:f3:42:45:7c:2e:7e:6d:db:c9:e7:47:eb:92:
73:dc:ce:88:26:67:6e:67:83:70:eb:e4:a8:fd:24:7f:0b:c7:
c7:2b:c7:21:93:57:99:fd:73:90:8f:5b:b9:95:f5:c5:95:18:
39:f6:b7:e5:fe:e9:22:40:14:5b:65:58:93:3c:b1:6b:fa:3d:
ee:53:83:dd:e5:f9:96:43:82:6c:7b:d5:8a:2d:bd:99:e6:37:
90:0c:f1:e4:fd:43:7c:57:4e:c0:55:ac:ee:1a:d2:61:be:2a:
e5:96:33:01:51:af:28:67:2b:fb:b5:b7:98:9a:10:2c:36:fa:
e6:d8:98:17:cc:8a:34:d7:48:97:73:63:08:fa:e5:00:b4:85:
c9:10:c8:c3:b6:09:92:17:8c:6a:59:ba:26:03:97:5d:09:a4:
2f:c9:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 12:52:46 2024 by rpki-client on console-fra.rpki-client.org