Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/qHyfi0_kv6ZpotmPRsvZhDXVk0o.roa
File: qHyfi0_kv6ZpotmPRsvZhDXVk0o.roa (raw, json)
Hash identifier: h93z5pgfIMImCPVTudWHxifLzX/0ITVyLL+C/E89doo=
Subject key identifier: A8:7C:9F:8B:4F:E4:BF:A6:69:A2:D9:8F:46:CB:D9:84:35:D5:93:4A
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 018DD28E76D931110817430F82617D8C1A02
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/qHyfi0_kv6ZpotmPRsvZhDXVk0o.roa
Signing time: Thu 22 Feb 2024 20:42:48 +0000
ROA not before: Thu 22 Feb 2024 20:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50941
IP address blocks: 178.18.192.0/24 maxlen: 24
178.18.193.0/24 maxlen: 24
178.18.195.0/24 maxlen: 24
178.18.196.0/24 maxlen: 24
178.18.197.0/24 maxlen: 24
178.18.198.0/24 maxlen: 24
178.18.199.0/24 maxlen: 24
178.18.200.0/24 maxlen: 24
178.18.201.0/24 maxlen: 24
178.18.203.0/24 maxlen: 24
178.18.204.0/24 maxlen: 24
178.18.205.0/24 maxlen: 24
178.18.206.0/24 maxlen: 24
178.18.207.0/24 maxlen: 24
185.21.4.0/24 maxlen: 24
185.21.6.0/24 maxlen: 24
185.21.7.0/24 maxlen: 24
185.88.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 22:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d2:8e:76:d9:31:11:08:17:43:0f:82:61:7d:8c:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Feb 22 20:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87c9f8b4fe4bfa669a2d98f46cbd98435d5934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:c5:76:9a:80:c3:d7:6c:38:4e:36:2e:a5:
dc:b2:aa:16:97:59:65:f1:3f:d2:48:dc:11:cd:e8:
d8:45:7a:d6:fb:cd:34:f9:69:f3:a9:94:d6:e2:71:
e6:99:48:8f:3a:88:6f:a1:b5:b9:ed:7c:8f:16:4f:
c8:57:a8:58:6e:5d:21:f6:9f:e5:38:0f:c1:1a:94:
90:ce:6f:71:cd:6c:56:a1:a3:f5:4d:24:8d:57:bd:
aa:af:5b:22:34:ab:e2:47:70:b7:71:f7:7b:f7:c7:
2d:4b:97:b5:b1:13:18:32:f2:57:21:70:c4:8c:27:
15:0f:82:29:bc:79:30:e0:e6:8f:59:b6:18:00:df:
f7:a1:06:9c:7d:39:7e:97:3d:8f:1c:87:87:07:4e:
cc:bc:cf:8d:4e:de:3e:19:6f:df:1d:6e:7d:09:ae:
8c:4d:b9:b2:7a:14:3e:88:c8:af:b4:c6:db:21:37:
fe:95:da:f1:91:89:a6:15:35:9d:25:ff:dc:64:fc:
d1:5f:dd:5e:1e:f6:41:21:e8:2c:b6:2c:21:75:50:
76:9b:b7:d3:ce:bd:c0:21:7c:60:a1:6f:32:a5:bb:
58:8c:ac:e6:d3:1b:f8:ed:54:4b:ff:d2:8b:5f:fa:
25:7d:9d:4c:1b:08:10:e3:c1:2a:48:e9:00:c1:32:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:9F:8B:4F:E4:BF:A6:69:A2:D9:8F:46:CB:D9:84:35:D5:93:4A
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/qHyfi0_kv6ZpotmPRsvZhDXVk0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.192.0/23
178.18.195.0-178.18.201.255
178.18.203.0-178.18.207.255
185.21.4.0/24
185.21.6.0/23
185.88.132.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c4:d5:e1:0a:01:be:bc:93:15:04:4b:9a:29:c6:62:08:c7:
8f:ad:72:4b:da:48:26:b2:72:fd:f8:64:16:b3:d1:f3:78:21:
81:c9:f8:6e:27:26:b5:43:4d:6b:82:b0:2a:5e:2b:bc:7b:b0:
4e:ba:24:f1:8c:f4:00:11:ba:eb:82:9c:e2:32:ca:58:8b:ec:
e3:22:a1:49:7e:54:ae:ea:7d:07:e8:a7:80:2c:ed:b8:68:1e:
7c:56:13:d4:1d:ba:db:06:4a:01:72:33:5f:2e:0e:0b:db:cd:
e2:d0:5d:28:d4:83:63:8c:19:6e:4f:0a:27:42:12:59:37:22:
40:c7:08:2e:15:6b:dd:40:f4:a7:ee:f4:83:e4:6f:85:21:1f:
b4:01:8a:f1:bd:aa:22:69:a1:6f:06:7f:66:72:17:a3:3f:d2:
bf:a0:d7:fe:76:23:90:33:98:00:42:c6:65:ea:c4:c0:4c:46:
f9:c3:a6:f8:75:51:63:43:89:86:48:fa:62:84:e6:b5:c7:c6:
3c:ad:b4:1f:aa:4a:31:f4:8d:57:5b:54:dc:66:73:f5:29:c7:
9e:fa:b8:5b:df:8f:1f:71:d4:62:81:27:2d:f3:a3:1a:5e:ef:
3b:5d:23:3b:07:f5:89:72:06:53:1c:48:55:ad:8a:c6:b6:a6:
51:d7:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:54:57 2024 by rpki-client on console-fra.rpki-client.org