Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/QRp-SMTyoA7qMuXL_6ZrpQnVBqI.roa
File: QRp-SMTyoA7qMuXL_6ZrpQnVBqI.roa (raw, json)
Hash identifier: Ntq907Uwjd/WXPb9zSXpqsLPpAzgLwE/M2PAuVoxA1A=
Subject key identifier: 41:1A:7E:48:C4:F2:A0:0E:EA:32:E5:CB:FF:A6:6B:A5:09:D5:06:A2
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 0185701EECAF7432CD52041A62F2325B9232
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/QRp-SMTyoA7qMuXL_6ZrpQnVBqI.roa
Signing time: Mon 02 Jan 2023 01:35:52 +0000
ROA not before: Mon 02 Jan 2023 01:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197380
IP address blocks: 185.127.112.0/24 maxlen: 24
185.127.115.0/24 maxlen: 24
185.127.113.0/24 maxlen: 24
185.127.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:ec:af:74:32:cd:52:04:1a:62:f2:32:5b:92:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Jan 2 01:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411a7e48c4f2a00eea32e5cbffa66ba509d506a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:fa:d9:47:3f:3b:b6:a0:42:9c:03:d1:6f:
00:39:20:ba:19:fe:5a:cc:de:d2:6b:16:d1:ee:64:
c1:bb:0d:db:71:d0:3e:f3:5f:b2:19:fd:2f:64:5a:
79:d8:11:19:8b:3d:7f:7d:57:af:cc:f9:8a:1f:f5:
ca:ff:86:ef:36:1f:44:43:9d:97:b3:57:62:59:ed:
de:1a:10:d5:bc:17:9a:11:9a:3f:0f:a7:d8:5d:23:
c3:e0:f3:b6:51:df:4c:ba:81:ee:d8:dc:da:af:56:
61:44:a4:e1:6b:22:07:d0:1a:33:6e:3e:8f:b7:bd:
4d:ee:a5:83:12:db:e3:11:29:50:06:9e:36:b4:8b:
09:4d:8c:2b:c1:f5:fc:47:5d:f0:cb:49:be:47:0f:
ed:80:8c:e4:de:7d:c8:be:a2:ac:4f:86:6e:6a:e0:
5f:96:4e:45:01:cb:c9:2e:7a:1b:6b:7c:29:48:f4:
f2:3f:fa:79:cb:5d:e2:7d:8a:df:f8:6f:01:30:74:
35:15:9c:66:22:d7:53:ca:4f:8c:a4:2e:e6:fb:e0:
fb:ac:63:7d:00:58:57:9d:84:ec:ec:2f:15:52:fa:
45:3c:eb:7d:47:6b:c0:a4:e2:61:92:32:ce:23:f4:
50:2c:95:58:21:4e:92:5d:16:c9:45:98:a7:b2:88:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:7E:48:C4:F2:A0:0E:EA:32:E5:CB:FF:A6:6B:A5:09:D5:06:A2
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/QRp-SMTyoA7qMuXL_6ZrpQnVBqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:c7:fd:ec:10:7c:47:4c:f0:47:e0:57:d2:59:49:7e:84:6d:
0d:f2:50:14:f3:23:5f:87:28:36:6c:9a:e0:59:62:ed:79:1d:
28:62:9a:e2:f5:eb:68:83:9b:4d:57:d2:b9:20:e0:11:05:f0:
b9:e2:26:62:be:91:cc:45:9b:12:cc:c0:01:a4:41:7e:86:63:
d2:87:ee:be:5b:67:11:97:42:4b:4d:ab:94:a2:ee:d3:5e:36:
bc:97:c8:fd:4d:db:84:d0:6a:ac:17:be:87:02:7f:43:09:57:
69:23:2a:91:2c:40:a0:3b:f3:0a:df:57:1d:0b:1d:6a:10:64:
4a:9a:30:ae:12:ef:49:3b:ad:69:3a:38:84:ed:63:54:4d:9a:
8a:0e:89:9c:42:dc:0a:f6:5c:3e:70:73:a7:b9:64:26:72:c8:
78:8b:7b:88:e7:72:67:67:d2:20:02:eb:2d:fa:2e:2b:89:0c:
0d:8c:e3:ec:b2:e8:1a:36:37:60:93:2c:7e:14:6e:d8:53:3a:
4b:e2:6b:90:be:35:59:0d:42:c3:2d:06:4d:15:fc:7a:ec:cc:
dc:df:43:13:fa:4f:36:9f:85:a7:f3:c2:27:6d:f7:85:eb:0e:
c4:d1:1f:a1:72:f5:54:3d:8c:b9:d9:28:8f:81:1e:bb:fe:4a:
8b:fb:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:37 2024 by rpki-client on console-fra.rpki-client.org