Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Q1MYJMV6qk00aEQBdaG2wFOqpdc.roa
File: Q1MYJMV6qk00aEQBdaG2wFOqpdc.roa (raw, json)
Hash identifier: /eIrGxAWSSbYuT9hUMR5WqkwhpQBXY3yp0eU3Agwdek=
Subject key identifier: 43:53:18:24:C5:7A:AA:4D:34:68:44:01:75:A1:B6:C0:53:AA:A5:D7
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018BAAF6B9865FD0BBBD2596D493106A79A9
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Q1MYJMV6qk00aEQBdaG2wFOqpdc.roa
Signing time: Tue 07 Nov 2023 18:06:17 +0000
ROA not before: Tue 07 Nov 2023 18:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.240.83.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
62.112.30.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
89.36.231.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:f6:b9:86:5f:d0:bb:bd:25:96:d4:93:10:6a:79:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 7 18:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43531824c57aaa4d3468440175a1b6c053aaa5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:92:43:58:9d:80:76:96:a3:e3:a7:f7:74:
3f:a6:08:55:1b:4d:48:5b:ec:48:0f:43:10:d3:c2:
65:78:e4:01:56:25:66:99:50:f6:26:21:4a:dc:de:
cc:9e:d5:d1:07:05:82:fa:62:dd:c8:5e:da:bf:fc:
b8:56:1e:1d:3a:02:45:3b:63:87:0e:0c:6f:01:e5:
4f:1e:c5:99:65:35:fb:33:73:70:0f:8c:d3:87:0d:
94:4f:59:90:4e:97:23:93:56:dc:d9:80:78:b4:72:
88:8d:e4:7d:19:ed:03:cb:95:a5:77:27:dd:40:3b:
e5:8d:ef:4f:f1:44:93:6a:31:36:b5:2f:49:06:aa:
5f:fa:71:d0:c7:63:b5:6d:06:60:6d:84:10:b7:ed:
05:96:61:f3:67:67:d3:73:68:1a:ac:74:dc:2e:62:
77:49:d2:cb:39:54:88:60:4d:f3:6d:87:37:9e:22:
5d:25:bc:cb:63:c2:b9:0d:5a:90:d6:e9:0b:51:0f:
37:65:35:db:68:2d:ca:e3:34:28:fd:4a:2b:58:6d:
28:fa:56:59:20:39:18:b2:90:f6:5a:38:27:44:a7:
af:cf:88:1f:67:30:d2:d8:80:a9:5c:6b:dc:95:e4:
f9:ba:48:da:82:bd:d1:62:f6:df:c6:6f:70:94:25:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:18:24:C5:7A:AA:4D:34:68:44:01:75:A1:B6:C0:53:AA:A5:D7
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Q1MYJMV6qk00aEQBdaG2wFOqpdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
62.112.30.0/24
84.247.20.0/24
89.34.171.0/24
89.36.231.0/24
89.37.106.0/24
89.37.128.0/24
89.40.43.0/24
89.42.40.0/24
89.42.213.0/24
93.114.69.0/24
94.177.113.0/24
94.177.118.0/24
176.223.190.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5b:0d:b1:55:22:04:75:d3:21:5e:ef:bb:fa:93:18:cc:47:
06:60:36:dc:94:6e:b4:c2:ec:85:f2:34:8c:76:34:f0:b9:02:
7c:14:52:d5:d6:e5:fe:28:ae:0f:74:8f:ad:15:4c:a4:bc:89:
8d:bb:15:74:b8:77:f4:0d:95:b8:84:b4:62:6a:6d:f2:54:73:
58:49:5d:5d:c7:87:f0:c9:13:d3:b1:62:95:33:59:b2:0f:e9:
8e:fd:d0:68:5e:e4:07:9f:1c:53:ef:62:41:a5:fa:4f:67:aa:
db:56:f9:e6:33:d0:a9:91:e0:77:67:cf:80:4f:09:8b:af:4d:
ff:49:ce:f0:2e:78:4d:c7:3d:51:b1:6d:0a:a3:7e:87:d3:29:
db:b3:29:e8:af:dd:24:c8:64:78:46:34:b9:6b:ac:4e:2f:54:
d4:90:5b:d0:a3:fa:2f:a0:5b:ec:96:3e:bd:69:a0:c8:a6:92:
5d:ed:51:34:15:3b:f4:b9:45:ef:78:ac:ac:94:7f:0b:6a:39:
4b:56:76:4f:82:d4:36:ae:18:7c:79:80:7d:08:40:a7:85:36:
59:ae:b2:3d:1e:d4:83:d2:ac:2e:d6:3d:6d:25:31:a6:06:63:
70:70:80:00:e2:42:be:ce:de:1e:07:25:a2:f1:61:ca:32:32:
4f:f4:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 21:08:50 2023 by rpki-client on console-ams.rpki-client.org