Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/q_qtx9xyNb09-DLEI0VWeHgMdW8.roa
File: q_qtx9xyNb09-DLEI0VWeHgMdW8.roa (raw, json)
Hash identifier: wZGaM5OQ1BNhYWH9uHOz/CNzylBVhEuSl2LzjtReSd8=
Subject key identifier: AB:FA:AD:C7:DC:72:35:BD:3D:F8:32:C4:23:45:56:78:78:0C:75:6F
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 01856CB867C77EAF6AB246E2B51BDD94F591
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/q_qtx9xyNb09-DLEI0VWeHgMdW8.roa
Signing time: Sun 01 Jan 2023 09:45:02 +0000
ROA not before: Sun 01 Jan 2023 09:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211483
IP address blocks: 192.109.198.0/24 maxlen: 24
193.29.3.0/24 maxlen: 24
185.60.76.0/24 maxlen: 24
185.60.77.0/24 maxlen: 24
185.60.78.0/24 maxlen: 24
185.60.79.0/24 maxlen: 24
2a04:5b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:67:c7:7e:af:6a:b2:46:e2:b5:1b:dd:94:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Jan 1 09:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abfaadc7dc7235bd3df832c423455678780c756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:81:b3:a1:91:60:66:71:be:a2:44:9d:41:
0d:00:b9:03:8e:70:3f:86:b6:9f:44:69:ab:b8:0b:
a6:20:e2:da:5a:e9:08:6c:e4:af:22:31:67:dd:c7:
09:c7:16:53:a4:ad:56:98:98:e4:13:6e:ff:f3:6a:
ce:b1:d3:d4:b1:cc:aa:c6:88:19:8e:64:79:97:8c:
d6:7e:b6:a0:be:ec:a4:6c:1b:f2:15:07:97:59:1e:
43:b6:72:e6:cb:dc:c3:63:06:ae:e6:31:f5:cd:c9:
24:8e:e9:a1:00:bd:1f:45:6f:61:68:7d:c2:df:2f:
c7:01:8c:ba:0a:d6:fe:da:35:c5:41:33:ef:91:19:
2c:9a:ea:a3:25:fb:0e:a4:7d:92:34:16:a9:f1:63:
68:cf:66:6f:b9:04:5e:ef:b3:63:65:ce:de:28:4d:
45:b5:7e:74:33:2d:ee:9e:c5:bd:2b:6b:80:b1:76:
bd:8c:4d:94:32:85:d7:fe:a6:bf:12:1d:ec:5d:32:
b9:ea:09:39:72:b0:81:26:c0:7a:aa:e8:f9:cc:53:
da:ff:20:fe:eb:91:01:78:0f:6a:ad:f1:81:4a:57:
c2:80:dc:e9:4f:9f:0e:75:9e:fd:08:45:38:69:df:
2d:1d:1d:ee:a7:77:87:cc:fb:c9:ea:80:ed:bc:ca:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:AD:C7:DC:72:35:BD:3D:F8:32:C4:23:45:56:78:78:0C:75:6F
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/q_qtx9xyNb09-DLEI0VWeHgMdW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.76.0/22
192.109.198.0/24
193.29.3.0/24
IPv6:
2a04:5b40::/32
Signature Algorithm: sha256WithRSAEncryption
a8:b5:b1:86:74:5c:e7:3b:31:b4:61:fc:27:f3:e8:a0:1b:01:
30:e7:c9:95:94:0e:84:3c:85:41:5c:3d:61:4a:5a:0d:a4:2d:
33:82:f1:76:01:34:0d:81:33:19:48:db:0c:0b:47:93:e8:c1:
7e:38:c9:40:83:88:51:6d:50:f5:41:b9:d3:20:89:11:35:5f:
8a:84:b3:87:5a:18:af:c6:66:f9:13:ba:28:af:bd:bc:f3:92:
f5:32:4d:8f:64:6d:27:68:af:e4:cd:39:bd:9b:09:03:57:e4:
50:3b:ff:d6:a1:85:e1:84:85:43:68:6e:36:1a:c8:ab:15:27:
4e:5c:bd:6b:37:76:87:d7:b1:91:75:f4:08:07:80:65:eb:16:
ac:da:57:63:34:f5:c8:98:50:6d:bd:2c:4a:ce:da:d6:7b:b4:
8b:42:f1:39:32:20:1c:07:8d:9c:b4:70:9f:f6:e3:6d:cd:14:
14:7b:e5:9e:73:f1:af:5c:44:94:3b:f5:8d:76:34:98:bf:89:
57:1f:ca:47:41:93:e7:28:65:6b:de:68:0b:54:c9:ab:2a:37:
58:aa:23:14:8d:bf:74:5c:a8:fe:51:1a:9f:00:fc:06:27:6c:
c2:80:29:45:41:b6:a9:44:c4:fb:d8:16:cb:ec:a1:35:4a:87:
a9:d3:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:04 2024 by rpki-client on console-fra.rpki-client.org