Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/Qe1xaiTEi2aPZTGGcEG4TedZkAQ.roa
File: Qe1xaiTEi2aPZTGGcEG4TedZkAQ.roa (raw, json)
Hash identifier: JCiw1xIf8KhXhL0zdB3XKsdRTfmB+V5v1eKDlhHSbyA=
Subject key identifier: 41:ED:71:6A:24:C4:8B:66:8F:65:31:86:70:41:B8:4D:E7:59:90:04
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 0187A4263A59EF34E4801977479699B05A07
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/Qe1xaiTEi2aPZTGGcEG4TedZkAQ.roa
Signing time: Fri 21 Apr 2023 14:09:41 +0000
ROA not before: Fri 21 Apr 2023 14:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16365
IP address blocks: 212.149.0.0/18 maxlen: 18
212.149.0.0/19 maxlen: 19
212.149.30.0/24 maxlen: 24
212.149.29.0/24 maxlen: 24
212.149.32.0/19 maxlen: 19
2a00:d580:4900::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:26:3a:59:ef:34:e4:80:19:77:47:96:99:b0:5a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Apr 21 14:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41ed716a24c48b668f6531867041b84de7599004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:ac:46:ea:91:d9:79:52:fc:bc:2c:6d:fc:
d1:df:3a:c3:9f:28:c5:97:da:bd:a8:ed:61:fe:40:
f3:31:bc:1a:b4:b2:be:21:3c:4e:8e:68:e8:26:0b:
d3:4d:8f:a6:00:40:e2:ef:6b:de:09:7d:f1:e7:2f:
8b:7a:bf:1c:d3:b4:e0:b3:e1:27:e4:1f:56:17:9e:
8b:17:75:65:23:e7:d3:c6:98:8a:f2:05:ba:41:77:
e3:54:a2:23:f6:78:d8:76:16:65:a0:29:44:3a:52:
a0:f2:20:04:02:2d:ec:cc:09:70:29:75:75:30:c8:
c7:13:61:43:e6:80:73:28:5a:a9:9d:ff:f6:1a:8f:
37:e9:1e:62:43:9e:86:f4:45:a0:8b:0e:10:de:63:
fa:a2:6e:5e:42:ee:5a:75:96:7e:09:60:9d:45:ea:
9e:17:01:40:e8:59:c9:de:dc:e9:ef:07:53:06:d2:
3a:05:57:5b:07:83:0a:4c:c7:a2:8b:27:48:5b:05:
1a:d7:17:3c:4c:d4:f5:aa:71:37:dc:e1:30:24:8b:
fe:dd:a3:84:f8:f6:81:e4:37:39:60:04:be:86:00:
bd:19:5f:bf:b7:f9:b4:71:d5:c5:c7:67:8e:a3:e8:
ea:f9:c8:22:6f:65:c5:b3:d4:47:94:81:71:5b:be:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:ED:71:6A:24:C4:8B:66:8F:65:31:86:70:41:B8:4D:E7:59:90:04
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/Qe1xaiTEi2aPZTGGcEG4TedZkAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.149.0.0/18
IPv6:
2a00:d580:4900::/40
Signature Algorithm: sha256WithRSAEncryption
44:47:c5:e2:0f:be:2c:19:7d:7c:c0:7e:53:39:15:0c:d6:57:
6b:69:68:eb:c7:da:3f:af:0c:be:da:15:62:e0:75:21:cb:57:
fb:ad:cf:ac:11:5f:55:c7:1e:7c:a4:81:fb:f1:3f:af:97:50:
11:d6:8c:0e:0c:95:60:53:13:e7:79:c5:ec:35:0f:bc:13:a6:
b0:f0:a2:7e:c3:5a:ee:e9:41:0a:99:4f:77:ae:05:e3:92:fc:
a6:7a:64:05:d2:db:83:3a:f2:02:65:21:86:eb:01:65:1d:48:
f5:e6:7b:95:d2:40:88:b0:f7:bd:b5:46:54:23:14:e4:4a:56:
bf:33:67:02:6a:53:e9:1c:b9:23:7a:35:f6:aa:7f:84:89:66:
dd:50:9b:d6:84:5d:89:95:86:7b:28:43:b9:d5:fb:5a:05:c7:
05:6b:0f:87:10:bf:97:cc:46:1b:9a:f4:09:70:cb:29:b1:cd:
3b:7c:aa:f0:38:d2:94:d3:5b:d7:03:ff:eb:05:23:38:67:c4:
05:36:fe:13:cf:0f:ec:54:5e:e3:30:13:3e:d5:4a:32:54:8e:
af:0b:40:4b:ce:b8:02:95:9b:8c:fe:1f:1b:3e:d4:18:e0:67:
95:4a:3b:23:b5:eb:12:fc:1b:28:38:d6:f9:e1:fa:4f:13:a1:
5f:10:79:e2
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 8 18:00:22 2023 by rpki-client on console-fra.rpki-client.org