Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/q6efVCSUysxA0IL3UQx2XPPaGJs.roa
File: q6efVCSUysxA0IL3UQx2XPPaGJs.roa (raw, json)
Hash identifier: ym5QCItdOtl9ryD+Tt7HWbYJR6ITs64kKmS1numU1U4=
Subject key identifier: AB:A7:9F:54:24:94:CA:CC:40:D0:82:F7:51:0C:76:5C:F3:DA:18:9B
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0193E943E07D386404B6C2B14D207116C693
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/q6efVCSUysxA0IL3UQx2XPPaGJs.roa
Signing time: Sat 21 Dec 2024 12:49:19 +0000
ROA not before: Sat 21 Dec 2024 12:49:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206192
IP address blocks: 31.169.91.0/24 maxlen: 24
185.21.4.0/24 maxlen: 24
185.33.61.0/24 maxlen: 24
185.93.249.0/24 maxlen: 24
185.193.4.0/23 maxlen: 23
185.193.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:43:e0:7d:38:64:04:b6:c2:b1:4d:20:71:16:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Dec 21 12:49:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aba79f542494cacc40d082f7510c765cf3da189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:03:6c:f1:2b:f2:98:60:c3:c8:8c:5b:7a:
53:1f:41:65:97:94:c9:cf:d0:df:0d:9c:88:d2:fb:
be:fc:12:2d:a2:ab:c1:d7:55:b5:f2:20:d6:f8:4d:
cc:d1:fa:77:bd:90:06:72:92:35:c5:7c:d6:02:d2:
3d:1c:f3:5a:8a:ba:c5:93:06:d8:47:e0:5d:4a:39:
ea:69:f9:33:7f:b1:ab:f5:94:9e:94:2a:3b:ae:0a:
29:e2:6c:cf:a8:10:bc:8c:28:78:67:00:51:47:1a:
c5:eb:bf:94:0a:43:a8:72:b5:ea:b8:7f:6f:82:c3:
1d:c7:ad:8f:2c:6c:d2:ae:f6:5d:4e:a3:ef:61:d6:
ed:c9:d4:cf:de:15:9e:ac:fd:eb:e7:1d:ab:ec:e6:
7a:14:0d:ae:5b:dc:76:aa:03:b0:94:92:1f:71:d5:
19:ca:b4:23:dc:63:01:7f:c0:c5:60:d0:7c:6a:d8:
76:49:8a:c5:a0:cf:28:16:f3:78:9d:4c:c6:17:fb:
31:48:fb:a2:83:a7:59:15:7c:69:a9:91:5c:5f:f1:
66:2e:73:fe:e4:81:d6:b2:37:75:21:57:9c:4e:5d:
c3:bc:3b:c8:18:bb:38:3b:8d:3b:53:90:03:f5:7f:
bd:75:bf:98:11:97:67:5c:ef:85:a1:e7:60:bf:62:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:9F:54:24:94:CA:CC:40:D0:82:F7:51:0C:76:5C:F3:DA:18:9B
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/q6efVCSUysxA0IL3UQx2XPPaGJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.91.0/24
185.21.4.0/24
185.33.61.0/24
185.93.249.0/24
185.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
07:31:61:b8:01:08:b9:65:25:67:c6:a2:6d:06:f8:90:18:46:
ed:10:ba:44:7b:f2:53:e4:7b:d6:db:46:ec:b0:4a:c6:fb:f9:
11:68:5a:71:29:bd:3f:77:95:87:7b:37:2d:69:d5:20:62:be:
46:b0:a8:63:d7:c4:aa:16:80:ec:7d:1b:a6:b4:f1:3d:a0:05:
da:ae:aa:6d:5f:9e:47:59:4f:2e:5a:78:91:ef:2a:f3:0e:d3:
6d:e2:e6:a4:d6:87:68:64:c3:4c:62:b5:72:11:50:f8:f4:ae:
ca:3e:1b:22:9e:f9:c9:47:3e:cb:6b:a0:0c:31:cc:77:a4:02:
8d:18:10:46:32:c5:a6:31:44:5f:7a:a5:51:ca:1d:a0:b2:26:
db:c3:28:f4:e0:e5:e2:8a:a5:0c:b5:f5:60:2e:60:1a:35:1b:
82:d3:ea:37:e0:c2:67:f0:d1:70:0c:21:a6:10:b9:4d:07:c8:
cf:f1:64:38:2a:79:cc:02:cd:f6:58:e7:21:42:87:6c:5e:b1:
66:98:4a:41:92:85:ba:05:a1:7b:b8:e3:45:f8:c0:bd:a0:6c:
43:09:69:d6:ec:34:bf:aa:ec:ca:f8:16:a5:45:e4:a9:98:d1:
bd:bd:e3:06:f3:df:7e:3e:8d:78:87:91:98:0b:d7:88:b7:26:
06:62:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:24 2025 by rpki-client