Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qjFsZp1hLZ86fYheDr8kZqybgs4.roa
File: qjFsZp1hLZ86fYheDr8kZqybgs4.roa (raw, json)
Hash identifier: m3dA2GtlVTb0yzH6gDZ3/RUxFgcM6sOnY8d0KfzP8Ow=
Subject key identifier: AA:31:6C:66:9D:61:2D:9F:3A:7D:88:5E:0E:BF:24:66:AC:9B:82:CE
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018BED6EC557A28484841DDE7F662057D5F0
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qjFsZp1hLZ86fYheDr8kZqybgs4.roa
Signing time: Mon 20 Nov 2023 15:52:21 +0000
ROA not before: Mon 20 Nov 2023 15:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205411
IP address blocks: 185.21.124.0/22 maxlen: 24
2a00:5560::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:6e:c5:57:a2:84:84:84:1d:de:7f:66:20:57:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Nov 20 15:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa316c669d612d9f3a7d885e0ebf2466ac9b82ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:26:d9:51:15:6c:a0:89:9c:68:1f:59:2d:
5c:3d:c7:9a:c5:a3:35:c2:a4:43:09:d3:e4:21:67:
74:49:5f:b2:c5:8e:d5:fe:26:63:e7:71:f5:94:e3:
bc:c8:6b:a9:ca:ea:40:aa:b1:9b:40:3b:9c:56:f8:
a8:8a:05:17:42:d7:f5:25:71:ba:48:e9:73:c6:cc:
d8:0b:3b:b6:92:5b:ab:95:41:f7:77:26:dd:46:07:
ff:7a:0b:77:8e:5f:32:fd:f0:5b:69:be:56:b0:34:
e2:2a:c2:78:7b:70:fb:32:f2:50:70:94:99:0c:29:
f1:39:50:84:e1:0b:8b:68:e3:78:08:56:c1:4d:bb:
0e:27:39:ca:ce:ad:33:81:2d:6d:21:e5:c2:fd:13:
01:42:4c:36:7d:a3:e7:4f:64:29:31:5a:b1:03:ac:
ff:7a:86:14:55:29:c6:3e:74:b8:d9:4c:65:dc:90:
01:c2:90:73:2c:aa:b3:b7:41:0c:71:0d:36:5f:7f:
df:34:ea:48:3b:04:39:da:0a:c2:dc:a2:66:9c:e1:
22:8f:b4:42:f8:ae:a5:fb:76:67:e4:94:c8:dc:58:
a5:bf:34:28:f3:5d:35:74:50:51:c1:29:41:5b:a4:
a9:4b:a7:98:34:92:8f:32:dd:56:3c:5f:aa:5d:6e:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:6C:66:9D:61:2D:9F:3A:7D:88:5E:0E:BF:24:66:AC:9B:82:CE
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qjFsZp1hLZ86fYheDr8kZqybgs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.124.0/22
IPv6:
2a00:5560::/32
Signature Algorithm: sha256WithRSAEncryption
01:0e:75:b1:c7:3a:0f:50:86:f7:72:73:f4:26:1b:60:ee:71:
79:39:29:f9:59:77:b7:d9:8c:2b:08:a4:b9:41:ea:4f:34:bd:
a2:65:2e:ce:1f:b4:c5:8d:61:e2:a7:96:10:5f:47:54:08:30:
25:be:7e:b5:aa:0e:d5:0e:0d:e5:cd:4e:f8:1c:37:dc:15:43:
98:8b:76:44:88:75:73:d0:51:23:18:c6:11:9c:16:79:34:af:
7c:5a:6f:7f:af:c9:2d:ce:d2:fe:8f:5c:f2:9b:c8:d0:ac:a3:
c6:c9:30:81:cb:39:c4:15:f0:02:0d:bd:f5:1c:d1:83:07:4d:
b0:d1:30:5d:6c:7e:37:1d:5e:e5:68:19:01:e6:f8:89:4a:34:
5f:8c:8e:1a:16:87:7d:0b:89:92:4b:56:38:5d:a1:c3:f4:4b:
89:80:f6:c3:4b:bc:e7:e7:b4:84:1e:60:90:e4:87:4a:a6:ef:
ad:5c:2e:30:0f:51:9a:43:3c:22:47:29:fb:db:2c:f3:f0:af:
9a:a7:30:42:a3:6b:9f:5b:ca:20:f2:3a:9d:e8:94:11:b7:1d:
06:03:1d:dd:6d:34:b8:ef:19:9e:b4:8c:b0:16:a2:2f:f6:2f:
ac:dd:29:60:65:8b:85:50:7e:71:3f:48:38:39:20:21:9e:6a:
83:c2:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:26 2024 by rpki-client on console-fra.rpki-client.org