Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/q27AQWkOir32EuJ_Q2SVZ-5hbX4.roa
File: q27AQWkOir32EuJ_Q2SVZ-5hbX4.roa (raw, json)
Hash identifier: p2ng57XlYcUK6veSlCfyku+wOeYkS48kWpJaPtUjOUY=
Subject key identifier: AB:6E:C0:41:69:0E:8A:BD:F6:12:E2:7F:43:64:95:67:EE:61:6D:7E
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 018CC26D63EC19BBC7E6E1F008053C1410FB
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/q27AQWkOir32EuJ_Q2SVZ-5hbX4.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29156
IP address blocks: 147.29.192.0/18 maxlen: 18
147.29.0.0/17 maxlen: 17
147.29.128.0/20 maxlen: 20
147.29.144.0/22 maxlen: 22
147.29.148.0/23 maxlen: 23
147.29.152.0/21 maxlen: 21
147.29.160.0/19 maxlen: 19
2a01:5440::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 06 Mar 2024 08:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:63:ec:19:bb:c7:e6:e1:f0:08:05:3c:14:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab6ec041690e8abdf612e27f43649567ee616d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:92:6f:2a:eb:50:8d:72:94:c3:97:91:c3:
39:2c:14:6c:91:8a:c4:33:99:07:37:f7:c9:3a:f2:
60:25:d5:a7:1c:53:31:4d:bb:f8:d6:01:81:00:a4:
24:8a:b6:5f:60:a2:ae:32:51:c1:0a:2d:8c:2f:54:
a8:8e:e5:bb:4b:79:2a:7a:32:3b:f5:53:75:ec:9c:
95:69:ba:97:b7:cd:0c:4b:7e:78:06:f1:9b:f2:84:
18:b8:21:e7:6f:c7:b2:07:b4:3f:a5:33:bf:ff:d6:
46:ed:5f:32:78:53:7c:69:42:8d:9b:5a:17:12:fa:
75:e0:22:c3:ba:89:8d:ea:f8:97:b2:ce:d3:23:87:
52:18:15:b8:11:66:55:f2:1e:f7:56:6a:dd:86:06:
69:79:88:2a:d0:23:de:69:35:4b:2b:18:05:a6:84:
72:56:c4:b5:cd:a8:08:48:57:7c:cf:a4:b5:5b:95:
4c:70:4c:cb:71:95:b2:af:42:9e:79:34:92:6f:cd:
c1:55:08:21:36:95:78:0d:51:7a:db:db:13:62:b9:
e7:9a:72:9f:40:ee:31:23:ab:e5:f7:a9:97:84:25:
ec:af:62:ea:87:f9:57:c9:c5:04:63:c8:f6:bb:1f:
f9:82:5a:d6:23:9c:db:aa:cb:bc:4e:93:4b:02:2c:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:C0:41:69:0E:8A:BD:F6:12:E2:7F:43:64:95:67:EE:61:6D:7E
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/q27AQWkOir32EuJ_Q2SVZ-5hbX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.0.0-147.29.149.255
147.29.152.0-147.29.255.255
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
23:92:94:a7:e7:6c:05:59:ef:12:f9:5d:01:53:c4:84:ec:4a:
d8:b9:03:b2:a5:16:d6:0b:cc:41:b3:f5:30:82:99:88:94:5e:
cb:9f:18:b3:91:62:f4:94:d0:34:9c:49:04:3c:c0:61:89:71:
f8:1a:5d:d9:4a:e9:6e:c9:c2:8b:d8:04:c4:b7:19:ac:de:10:
5d:2f:00:c5:73:b2:3d:60:42:e1:1c:f1:d2:90:ef:61:bc:ea:
ea:a1:77:57:9f:ef:f5:e9:0c:a4:2c:a3:b4:60:98:d2:6d:dd:
df:3e:31:29:5c:18:cf:b6:95:7c:15:f9:87:54:61:48:e4:fd:
9d:f3:7f:dd:21:c7:65:c2:d4:99:52:d6:34:24:d0:71:52:ca:
75:50:48:69:9a:4e:73:7d:bd:5c:7c:5c:76:c3:7b:26:05:b6:
4f:92:34:00:4f:66:d8:b4:ef:49:66:52:76:eb:a9:54:8c:a4:
36:b5:c9:a3:cd:ee:d9:ee:57:c2:ed:e8:54:9b:44:38:7e:6a:
14:fb:0a:b2:8d:b4:51:bb:54:cc:52:1d:3f:79:8e:0b:a0:25:
15:fc:e4:bc:4a:84:d7:de:a1:2a:d3:a5:14:6a:6c:62:5f:d6:
44:0f:74:fd:8c:91:be:70:9f:5d:0f:50:23:89:a5:00:4c:d3:
09:d6:15:1d
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzCbWPsGbvH5uHwCAU8FBD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MmQ3Y2FjMWZmYjJjM2ZiZGUyODQ2MjViZjFhZjRjNmJh
ZTZiMGUwHhcNMjQwMTAxMDAyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjZlYzA0MTY5MGU4YWJkZjYxMmUyN2Y0MzY0OTU2N2VlNjE2ZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSSbyrrUI1ylMOXkcM5LBRskYrE
M5kHN/fJOvJgJdWnHFMxTbv41gGBAKQkirZfYKKuMlHBCi2ML1SojuW7S3kqejI7
9VN17JyVabqXt80MS354BvGb8oQYuCHnb8eyB7Q/pTO//9ZG7V8yeFN8aUKNm1oX
Evp14CLDuomN6viXss7TI4dSGBW4EWZV8h73VmrdhgZpeYgq0CPeaTVLKxgFpoRy
VsS1zagISFd8z6S1W5VMcEzLcZWyr0KeeTSSb83BVQghNpV4DVF629sTYrnnmnKf
QO4xI6vl96mXhCXsr2Lqh/lXycUEY8j2ux/5glrWI5zbqsu8TpNLAiyF/QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFKtuwEFpDoq99hLif0NklWfuYW1+MB8GA1UdIwQY
MBaAFMYtfKwf+yw/veKEYlvxr0xrrmsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEt
MTU0NGI0NGQ1OWNhLzEvcTI3QVFXa09pcjMyRXVKX1EyU1ZaLTVoYlg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEtMTU0NGI0NGQ1OWNh
LzEveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAsDAwCTHQME
AZMdlDALAwQDkx2YAwMBkxwwDQQCAAIwBwMFACoBVEAwDQYJKoZIhvcNAQELBQAD
ggEBACOSlKfnbAVZ7xL5XQFTxITsSti5A7KlFtYLzEGz9TCCmYiUXsufGLORYvSU
0DScSQQ8wGGJcfgaXdlK6W7JwovYBMS3GazeEF0vAMVzsj1gQuEc8dKQ72G86uqh
d1ef7/XpDKQso7RgmNJt3d8+MSlcGM+2lXwV+YdUYUjk/Z3zf90hx2XC1JlS1jQk
0HFSynVQSGmaTnN9vVx8XHbDeyYFtk+SNABPZti070lmUnbrqVSMpDa1yaPN7tnu
V8Lt6FSbRDh+ahT7CrKNtFG7VMxSHT95jgugJRX85LxKhNfeoSrTpRRqbGJf1kQP
dP2Mkb5wn10PUCOJpQBM0wnWFR0=
-----END CERTIFICATE-----
Generated at Wed Mar 6 11:26:30 2024 by rpki-client on console-ams.rpki-client.org