Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/QHp8sULYpXcRMOze2h4O9N28f2A.roa
File: QHp8sULYpXcRMOze2h4O9N28f2A.roa (raw, json)
Hash identifier: L65wRheAjBqFHgqEe/5myDrqg27hYunNMRa69WBuMgs=
Subject key identifier: 40:7A:7C:B1:42:D8:A5:77:11:30:EC:DE:DA:1E:0E:F4:DD:BC:7F:60
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 018D82D41CEEE67474B12CC01F3536AE5E13
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/QHp8sULYpXcRMOze2h4O9N28f2A.roa
Signing time: Wed 07 Feb 2024 09:09:15 +0000
ROA not before: Wed 07 Feb 2024 09:09:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 45.84.52.0/22 maxlen: 22
62.106.73.0/24 maxlen: 24
77.75.228.0/24 maxlen: 24
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
91.242.224.0/24 maxlen: 24
109.234.73.0/24 maxlen: 24
146.19.18.0/24 maxlen: 24
185.182.107.0/24 maxlen: 24
194.247.36.0/24 maxlen: 24
2a0c:7140::/29 maxlen: 29
2a0e:9780::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:d4:1c:ee:e6:74:74:b1:2c:c0:1f:35:36:ae:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Feb 7 09:09:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=407a7cb142d8a5771130ecdeda1e0ef4ddbc7f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:33:1c:6a:dc:49:3a:f2:fb:e8:2f:04:77:
93:a0:47:44:87:8b:f6:b1:0e:b1:ba:76:68:2a:be:
2d:5e:08:9f:ff:9a:38:cf:8e:e3:f9:ab:12:9d:34:
44:80:51:28:47:75:0a:af:81:c7:59:2e:84:97:c2:
b6:ec:c9:21:c5:b8:8e:56:7a:0d:47:a9:33:51:8b:
a7:c0:e3:47:82:ce:c0:b6:5c:c1:5e:0c:e0:71:90:
ff:b9:9d:34:cc:e6:d8:45:32:c9:c7:42:67:fc:9b:
89:b7:3c:31:e7:14:ab:24:2d:c8:3b:20:4c:c9:5b:
4a:31:00:62:cc:22:93:40:dc:97:8f:5a:99:0e:59:
e5:82:22:a9:cd:f0:c4:ac:7c:91:c2:4c:24:bc:6c:
c8:e2:30:fe:12:38:a7:4e:be:d8:96:41:dd:d8:c9:
91:c7:8c:89:a2:d2:38:3a:4e:88:f8:e5:5d:11:f7:
cb:0e:34:b8:92:08:44:e8:90:08:29:ca:05:9e:bf:
26:4c:76:4b:e7:35:ae:76:53:50:df:bc:73:5d:e7:
ef:d6:c3:bd:1c:a0:40:cb:06:cb:e4:2d:29:1c:6e:
68:0a:65:bf:33:a1:a6:a2:9a:ec:5b:e0:57:f5:35:
fd:f4:f7:6f:0d:5e:01:65:c6:63:f1:f3:a4:74:13:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:7C:B1:42:D8:A5:77:11:30:EC:DE:DA:1E:0E:F4:DD:BC:7F:60
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/QHp8sULYpXcRMOze2h4O9N28f2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.106.73.0/24
77.75.228.0/24
91.211.64.0/22
91.238.63.0/24
91.242.224.0/24
109.234.73.0/24
146.19.18.0/24
185.182.107.0/24
194.247.36.0/24
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
41:74:d1:70:71:e3:12:fe:d9:ea:7a:1b:fc:ac:f3:f7:cf:2f:
06:9f:df:b8:55:eb:6a:17:4c:38:a4:c4:a7:cc:06:a4:de:fe:
d6:15:48:ba:fa:13:9d:37:a0:b2:f8:66:48:ae:44:a1:f2:0c:
93:c1:a6:c6:cf:43:2e:20:08:6e:b2:bd:6b:e8:87:4a:e8:1c:
40:27:66:d6:6a:ad:c3:2a:2f:e2:e3:28:bb:42:1c:94:b5:fd:
28:85:05:1b:7f:52:cd:52:85:de:70:3a:6a:9e:22:41:c9:f9:
88:ec:31:74:59:82:6b:fb:38:e4:2d:0c:f5:ca:63:c2:42:db:
7d:15:38:05:74:29:38:33:73:56:49:cb:ff:39:45:40:ea:5c:
70:d6:6a:42:22:97:4c:c8:82:2a:70:6c:07:97:49:04:f6:7b:
68:52:ba:0e:d6:ca:59:e3:67:f5:73:62:db:46:fb:22:19:e8:
b8:fb:97:5a:46:78:66:5d:e8:0d:e6:b8:a8:69:09:42:a5:46:
05:8d:21:54:28:84:1f:a1:d1:38:a1:a8:22:7b:30:00:c6:bc:
c9:b6:ee:dc:fa:3e:dd:b8:8c:aa:91:45:cc:7d:53:75:d6:c3:
24:28:2c:3b:f4:0e:88:b7:ef:8e:e7:fa:1d:d0:96:c8:ec:5f:
e9:49:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:35 2024 by rpki-client on console-ams.rpki-client.org