Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/qow2wLtwsumKh8Qewc2anenJ8Bw.roa
File: qow2wLtwsumKh8Qewc2anenJ8Bw.roa (raw, json)
Hash identifier: 3o3aQHchXFccYziAvTt/WFa232Hfdb3bagXzeAieSzE=
Subject key identifier: AA:8C:36:C0:BB:70:B2:E9:8A:87:C4:1E:C1:CD:9A:9D:E9:C9:F0:1C
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 018943F5D65CB068BE2114EB04CDB97EABE5
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/qow2wLtwsumKh8Qewc2anenJ8Bw.roa
Signing time: Tue 11 Jul 2023 07:58:51 +0000
ROA not before: Tue 11 Jul 2023 07:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39386
IP address blocks: 84.235.56.0/23 maxlen: 23
178.86.50.0/24 maxlen: 24
84.235.0.0/17 maxlen: 17
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
37.224.192.0/24 maxlen: 24
84.235.95.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.120.0/22 maxlen: 22
193.19.244.0/24 maxlen: 24
2001:16a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 23 Jul 2023 07:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:f5:d6:5c:b0:68:be:21:14:eb:04:cd:b9:7e:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jul 11 07:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa8c36c0bb70b2e98a87c41ec1cd9a9de9c9f01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:6f:e5:90:a4:95:0a:60:28:a2:6f:bb:be:
01:dd:2c:96:03:f0:a9:08:a0:aa:65:9b:09:bf:dc:
c0:37:3c:5a:9f:cc:78:e6:ad:53:58:a2:9f:58:2e:
bf:67:f2:f4:bc:b1:4b:fa:e8:67:7e:7b:4a:0f:b2:
71:8d:6f:8a:15:de:85:a9:52:94:69:56:6a:0b:10:
7c:b3:f1:d9:0b:fe:e0:23:4b:de:79:70:fd:89:fd:
cc:47:55:a5:fe:77:07:8a:88:c3:7e:fb:5d:d0:b0:
38:4c:58:62:a0:1b:57:21:c6:3a:4d:0a:3e:db:8e:
76:53:b2:8d:44:2b:6a:34:52:f5:05:5c:a2:44:e0:
33:02:7e:84:96:85:05:ff:3d:82:f5:05:73:00:af:
db:73:b4:ef:e6:3c:d7:be:40:39:26:0e:03:6a:50:
d1:a8:36:bc:c2:81:ea:99:bd:48:65:4c:b6:5e:4c:
d8:1f:f3:1f:34:6a:e0:4f:48:c7:20:34:c8:92:7c:
15:c5:22:da:c2:ac:00:c1:c3:1a:d5:08:a6:ce:c6:
eb:05:b3:89:f5:2b:85:3b:6d:be:53:00:5d:02:12:
20:b9:ac:b3:59:68:28:d8:e3:db:a1:7e:3b:db:38:
c3:e1:69:31:da:1b:78:0b:2d:79:a6:88:14:57:e5:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:36:C0:BB:70:B2:E9:8A:87:C4:1E:C1:CD:9A:9D:E9:C9:F0:1C
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/qow2wLtwsumKh8Qewc2anenJ8Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/17
178.86.50.0/24
193.19.244.0/24
IPv6:
2001:16a0::/29
Signature Algorithm: sha256WithRSAEncryption
19:05:9e:03:e2:57:67:79:bb:5f:2e:b7:b0:f6:fa:36:41:49:
d7:fa:f4:39:2a:9b:f1:33:48:f2:d4:64:71:c0:6a:c8:9f:b3:
65:2d:39:5b:65:f9:e6:eb:7c:12:6b:40:13:1a:7e:24:9d:67:
0a:cd:b4:4d:75:95:21:6e:91:13:85:3d:cc:54:82:d6:4f:80:
7c:30:a1:ca:b0:5f:ae:ba:ad:5e:63:39:a8:6e:d0:23:14:58:
bf:33:a4:6f:42:5f:92:ae:91:41:0a:e6:15:1f:40:87:a6:5e:
20:7e:4e:7f:0a:53:63:b9:8c:1d:5a:60:a8:a7:d7:2a:34:6d:
23:4a:0a:55:12:86:59:c0:6f:74:84:b4:0f:06:b0:46:cb:51:
c0:40:4f:27:dd:15:fb:9c:ae:bd:99:98:49:43:6b:c0:05:74:
43:6b:0f:a7:62:86:4b:db:b2:a1:60:33:d6:47:0b:98:1e:45:
65:d8:fb:69:38:70:5f:be:ba:b5:df:b0:28:2d:9b:e3:13:55:
4a:8b:c6:db:8a:83:48:43:b8:e0:24:64:b0:48:a7:3b:d3:94:
20:df:91:d7:a9:82:dc:e6:f0:60:dd:f1:d4:84:19:55:5c:f6:
ee:4c:a1:fd:ca:2d:e1:1e:ef:81:7e:70:63:bf:2c:18:1f:c8:
e9:66:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:07 2024 by rpki-client on console-ams.rpki-client.org