Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/qjqQDco5Wv7FdtofudupcwXXC9M.roa
File: qjqQDco5Wv7FdtofudupcwXXC9M.roa (raw, json)
Hash identifier: 6iZo3MBl6cuhlClxWizkxM7pSwCjHUSQq/0RdK+2sHg=
Subject key identifier: AA:3A:90:0D:CA:39:5A:FE:C5:76:DA:1F:B9:DB:A9:73:05:D7:0B:D3
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 01901259D0C9FDEF84B7C082F8A53C5EEAD9
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/qjqQDco5Wv7FdtofudupcwXXC9M.roa
Signing time: Thu 13 Jun 2024 16:06:34 +0000
ROA not before: Thu 13 Jun 2024 16:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 04:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:59:d0:c9:fd:ef:84:b7:c0:82:f8:a5:3c:5e:ea:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Jun 13 16:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa3a900dca395afec576da1fb9dba97305d70bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:37:a4:40:d3:63:b1:ac:39:f5:c2:dc:28:
e3:e3:89:b3:16:ab:1c:66:e5:ce:17:f4:2a:ea:5e:
08:8b:15:d9:9f:fc:90:cd:80:df:71:1b:61:d7:15:
3c:aa:20:33:33:90:2c:14:b7:00:ea:33:af:72:5c:
7a:ce:56:c8:88:dc:e2:54:45:f0:59:cf:40:1a:90:
9b:87:cb:67:9e:ad:b3:ba:cc:c7:03:72:b8:69:c2:
b6:54:fa:9c:0d:db:da:9b:e9:9c:5b:ce:5e:52:52:
22:df:4b:90:61:da:c2:71:39:b0:ad:e2:de:d8:da:
bf:30:45:8a:71:de:b6:58:41:71:9d:35:ea:71:6a:
51:55:6c:82:e2:ad:a3:59:06:25:74:d9:11:06:d9:
f0:d9:be:7a:6a:24:9e:d1:60:f2:f9:b1:47:47:f1:
69:97:de:e8:80:b6:47:d8:af:84:d7:ba:fa:b2:50:
ce:b8:ca:11:41:0c:ed:f4:73:46:22:0d:88:5d:62:
85:36:c4:fe:23:5b:10:7c:71:b1:a8:95:6b:92:a7:
c2:da:d7:17:1f:9f:5e:36:5d:58:0a:c1:60:8a:b1:
8a:37:d8:b2:9f:22:3c:2e:5b:90:3b:d2:00:10:d2:
ea:d2:79:cc:9f:1b:13:c6:ab:27:9e:1a:ad:4e:e6:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:90:0D:CA:39:5A:FE:C5:76:DA:1F:B9:DB:A9:73:05:D7:0B:D3
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/qjqQDco5Wv7FdtofudupcwXXC9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
84:21:85:35:28:b9:f1:3d:90:e5:1e:cd:6d:a8:4e:95:6d:1c:
78:86:70:93:4d:e8:f5:72:32:db:79:60:5f:05:3a:91:9f:f3:
36:f6:ed:28:19:dd:f9:e2:2d:c8:e3:33:38:d7:4e:65:e0:07:
90:3f:ed:18:b0:1e:2b:3f:39:7e:23:7d:70:45:d0:0d:9e:67:
72:26:c5:f4:d0:ac:cc:b7:d9:f9:bf:1c:cc:c2:f6:76:00:20:
22:07:b8:7e:cb:36:bb:f1:87:59:81:f2:bd:2a:1b:b3:86:b9:
66:25:ae:ff:7b:56:7f:c6:19:63:2a:9f:a0:6f:51:53:05:b8:
b9:b2:30:a4:41:63:76:29:d4:cc:92:8d:a9:e3:fd:44:e0:6d:
a1:a3:cd:03:a6:f5:0d:3f:c8:ce:b0:6c:21:20:0e:5f:0d:ac:
7e:a2:b2:2d:9d:57:ab:cc:bb:15:a0:20:10:85:93:f5:19:4a:
d3:c7:cf:66:25:27:cf:bd:2f:8b:1e:da:36:1d:56:2e:13:bd:
1a:15:1c:21:52:b5:5c:f3:27:26:34:01:f3:2a:a9:a3:c6:5d:
43:9e:af:15:b8:d6:73:9b:51:33:2f:e8:87:16:d8:a5:25:2f:
bf:0d:ff:db:ac:4d:38:b3:79:8a:e2:52:f0:29:e5:b2:b0:3d:
75:1b:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:57:53 2024 by rpki-client on console-fra.rpki-client.org