Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/QzHBAaFFG1CULBaxfhe3FeYCc8c.roa
File: QzHBAaFFG1CULBaxfhe3FeYCc8c.roa (raw, json)
Hash identifier: yLoWuJxxdVeQSqN9O51jAkWvSFO/G+KCfeNj+xzP3x0=
Subject key identifier: 43:31:C1:01:A1:45:1B:50:94:2C:16:B1:7E:17:B7:15:E6:02:73:C7
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01856CE608D19F20274B8221856A598CD6F4
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/QzHBAaFFG1CULBaxfhe3FeYCc8c.roa
Signing time: Sun 01 Jan 2023 10:34:52 +0000
ROA not before: Sun 01 Jan 2023 10:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39611
IP address blocks: 185.49.24.0/24 maxlen: 24
185.49.25.0/24 maxlen: 24
185.49.26.0/24 maxlen: 24
213.207.39.0/24 maxlen: 24
213.207.40.0/24 maxlen: 24
213.207.40.0/22 maxlen: 22
213.207.43.0/24 maxlen: 24
213.207.41.0/24 maxlen: 24
213.207.42.0/24 maxlen: 24
213.207.44.0/22 maxlen: 22
213.207.44.0/24 maxlen: 24
213.207.45.0/24 maxlen: 24
213.207.46.0/24 maxlen: 24
213.207.47.0/24 maxlen: 24
213.207.48.0/20 maxlen: 20
213.207.48.0/21 maxlen: 21
213.207.50.0/24 maxlen: 24
213.207.48.0/24 maxlen: 24
213.207.48.0/22 maxlen: 22
213.207.49.0/24 maxlen: 24
213.207.51.0/24 maxlen: 24
213.207.55.0/24 maxlen: 24
213.207.57.0/24 maxlen: 24
213.207.52.0/22 maxlen: 22
213.207.53.0/24 maxlen: 24
213.207.54.0/24 maxlen: 24
213.207.52.0/24 maxlen: 24
213.207.56.0/22 maxlen: 22
213.207.56.0/21 maxlen: 21
213.207.56.0/24 maxlen: 24
213.207.58.0/24 maxlen: 24
213.207.60.0/24 maxlen: 24
213.207.60.0/22 maxlen: 22
213.207.61.0/24 maxlen: 24
213.207.59.0/24 maxlen: 24
213.207.63.0/24 maxlen: 24
213.207.62.0/24 maxlen: 24
213.207.37.0/24 maxlen: 24
213.207.38.0/24 maxlen: 24
213.207.35.0/24 maxlen: 24
213.207.32.0/22 maxlen: 22
213.207.32.0/24 maxlen: 24
213.207.33.0/24 maxlen: 24
213.207.34.0/24 maxlen: 24
213.207.32.0/19 maxlen: 19
213.207.32.0/20 maxlen: 20
213.207.36.0/22 maxlen: 22
213.207.36.0/24 maxlen: 24
2a01:9d24::/31 maxlen: 31
2a01:9d20::/29 maxlen: 29
2a01:9d22::/31 maxlen: 31
2a01:9d20::/31 maxlen: 31
2a01:9d26::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:08:d1:9f:20:27:4b:82:21:85:6a:59:8c:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jan 1 10:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4331c101a1451b50942c16b17e17b715e60273c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:65:98:26:8e:20:51:a7:57:25:7f:32:55:
1f:0f:6e:9a:e0:2a:d5:bb:19:b7:27:e1:35:a7:5a:
89:e2:28:34:28:ec:ce:48:5d:8b:37:de:75:21:51:
aa:1c:f0:74:54:56:b5:74:5a:5d:11:d1:33:d8:63:
5f:d3:91:3f:86:c2:fb:04:1c:e9:70:98:b6:61:59:
c3:5e:05:2c:aa:cd:7e:55:df:9b:d1:e6:a0:e3:f0:
7b:0f:1e:8a:43:1b:d6:33:81:5e:6c:49:da:3c:ed:
d0:87:d0:22:6c:f9:bf:c2:0c:87:0b:5e:8f:21:ec:
ba:d8:9a:25:6a:68:e6:f3:73:82:36:8c:97:86:1a:
27:a4:3e:95:40:ed:80:48:e2:01:17:71:fe:80:6b:
ec:14:ce:54:a2:5a:48:83:b7:5f:e2:c5:d4:67:87:
94:81:22:a1:cb:87:d5:01:ad:01:8a:b9:ca:0e:06:
d1:bf:13:67:4e:5c:02:3a:0d:20:63:81:49:6d:18:
20:c4:28:8c:37:4a:e1:14:75:f4:9a:fa:3f:d7:d7:
3e:80:9c:cd:c1:ed:57:87:8e:81:ea:6c:25:e3:f8:
27:a7:1e:cc:4f:a0:4e:e8:df:75:6d:dd:35:0e:46:
75:ec:13:7c:48:68:b0:ce:34:59:5e:0b:68:07:27:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:C1:01:A1:45:1B:50:94:2C:16:B1:7E:17:B7:15:E6:02:73:C7
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/QzHBAaFFG1CULBaxfhe3FeYCc8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.24.0-185.49.26.255
213.207.32.0/19
IPv6:
2a01:9d20::/29
Signature Algorithm: sha256WithRSAEncryption
c4:bd:26:43:97:c4:c5:a0:51:77:7f:9d:e1:10:6e:f6:eb:be:
8c:6b:7a:62:5d:f0:07:c7:6a:d7:d2:d9:5c:84:6c:a3:73:c0:
d0:49:61:fb:67:a9:72:a9:14:04:f3:78:8e:0d:ac:70:7c:4e:
99:77:00:57:e5:1a:f9:00:a3:b1:e5:08:ae:e8:92:c0:16:2f:
59:dc:95:28:99:57:d5:ee:13:87:cf:27:f9:4e:c2:97:66:d9:
21:09:24:26:90:bb:1e:08:18:43:6d:c9:67:44:a8:3a:65:a3:
f6:06:63:6d:06:36:1f:b4:da:0e:30:15:bb:f6:b6:5d:5b:93:
42:86:5e:7c:3a:5e:76:1b:5f:89:36:31:41:fb:d6:8e:74:29:
0a:e3:15:aa:a6:e8:2a:d0:08:d9:f5:c7:2d:52:ca:d2:9b:55:
af:bd:b4:e4:79:06:fc:f3:a3:7c:de:57:e5:b6:99:55:17:fa:
de:3c:17:c6:5d:94:d9:90:03:b0:b4:a7:8d:af:99:0c:4b:02:
9a:ac:43:e8:fb:ae:e3:8e:72:6e:0f:be:35:51:44:0f:fb:73:
02:a7:4b:31:e6:00:54:48:39:54:9a:62:f0:ae:b9:42:18:88:
5b:e6:83:91:23:d6:4d:f3:55:d5:5a:38:5c:c3:7a:84:d4:db:
9a:04:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net