Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/qkGnhnGcDdRJQtSvY6oYkkYSS5g.roa
File: qkGnhnGcDdRJQtSvY6oYkkYSS5g.roa (raw, json)
Hash identifier: 6KR/udwOpF3gMPsryX6vpPzuzDlSyhjHIZj6fKIUMm0=
Subject key identifier: AA:41:A7:86:71:9C:0D:D4:49:42:D4:AF:63:AA:18:92:46:12:4B:98
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 0185701EE48122A766356986261ADA22DF1F
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/qkGnhnGcDdRJQtSvY6oYkkYSS5g.roa
Signing time: Mon 02 Jan 2023 01:35:50 +0000
ROA not before: Mon 02 Jan 2023 01:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35228
IP address blocks: 93.97.12.0/22 maxlen: 24
87.194.202.0/24 maxlen: 24
87.194.216.0/23 maxlen: 24
93.97.44.0/22 maxlen: 24
87.194.0.0/16 maxlen: 24
93.97.48.0/22 maxlen: 24
93.97.60.0/22 maxlen: 24
93.97.176.0/22 maxlen: 24
93.97.180.0/22 maxlen: 24
93.97.212.0/22 maxlen: 24
93.97.0.0/22 maxlen: 24
93.97.216.0/22 maxlen: 24
93.97.0.0/16 maxlen: 24
93.97.8.0/22 maxlen: 24
87.194.102.0/23 maxlen: 24
87.194.100.0/23 maxlen: 24
87.194.118.0/24 maxlen: 24
87.194.116.0/24 maxlen: 24
87.194.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e4:81:22:a7:66:35:69:86:26:1a:da:22:df:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Jan 2 01:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa41a786719c0dd44942d4af63aa189246124b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:5b:38:e3:70:61:8d:fa:49:6e:5b:9d:64:
09:bf:4e:40:74:7f:8c:ba:2e:62:c3:aa:f4:8e:32:
7a:83:dc:3c:7b:7f:1c:9e:a0:8e:dd:ca:fc:e5:a6:
4c:b2:f3:c9:ce:ce:2f:e8:d8:32:ee:93:b3:c2:ba:
43:1a:78:aa:52:6a:47:49:e4:39:fa:00:01:8d:9a:
ff:ca:72:df:9d:0a:6b:ea:84:15:fe:f5:3e:92:04:
01:42:c5:6f:48:62:1f:70:79:d3:c4:a2:64:27:bf:
a6:85:f7:91:69:46:89:0d:67:b8:05:af:72:2e:e4:
c9:ea:c7:27:d6:a0:40:48:94:44:46:f1:d6:66:4f:
4f:16:81:81:2b:3f:13:9f:52:f0:f0:0d:c6:07:9b:
8b:6c:32:b9:3e:44:76:45:d9:2e:63:e4:ae:65:8e:
97:34:d4:4e:7e:f1:e3:08:17:4a:82:e3:84:02:4c:
0a:6b:b3:e5:36:76:f1:70:60:83:fc:aa:19:cb:2c:
84:32:86:35:65:42:89:47:d6:12:00:7f:f6:06:b8:
3f:24:d9:9b:e6:6c:b4:b6:23:a4:58:04:05:fe:3a:
5a:38:62:f5:50:39:60:6a:da:34:79:69:ce:09:dc:
1f:e4:f8:2d:63:47:69:c5:c9:59:35:30:51:86:79:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:A7:86:71:9C:0D:D4:49:42:D4:AF:63:AA:18:92:46:12:4B:98
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/qkGnhnGcDdRJQtSvY6oYkkYSS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.194.0.0/16
93.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:ee:bf:54:34:4e:09:65:5f:a2:4c:d3:42:ed:28:81:b3:d4:
11:5e:d5:9c:3d:e9:68:58:29:25:21:d9:d5:e4:84:7d:f3:ea:
11:ae:52:b5:97:07:5c:48:e7:07:70:50:5c:00:1d:b2:8d:8f:
df:4e:b3:d0:7d:27:e1:df:2f:bc:d0:c6:d0:d4:5f:61:30:3c:
cf:84:fb:4e:2a:6d:6d:95:61:0f:01:95:94:cb:e1:fe:7d:39:
ad:41:eb:ec:fa:8d:ca:d4:3a:d7:5c:a6:6e:36:35:89:d2:14:
cd:e3:f1:db:29:d3:03:99:fb:ca:48:7d:c0:28:60:19:a2:df:
6a:82:39:01:5c:8a:cc:53:7f:1c:bf:e3:85:94:16:db:73:e9:
86:ec:f6:7c:d6:75:2e:88:5f:b1:43:36:f6:24:83:4c:9e:2c:
40:d8:4d:28:d4:f5:22:03:14:a2:8d:eb:15:7e:a1:ae:12:2a:
c5:3c:5e:59:7d:58:99:ca:c0:65:26:e1:cd:40:20:73:44:6c:
97:49:7e:f7:72:fd:2d:e5:61:2c:4b:19:5c:e5:33:5a:b8:ad:
cc:ac:78:44:cd:79:30:93:5f:d6:a0:29:fe:ec:89:65:db:2f:
e7:5b:60:da:b4:13:38:f2:da:50:98:7d:b2:af:a3:dd:7a:3a:
ce:a8:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:39 2024 by rpki-client on console-ams.rpki-client.org