Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/qGQQ7OcEkiqlsh50phML969nsY0.roa
File: qGQQ7OcEkiqlsh50phML969nsY0.roa (raw, json)
Hash identifier: 7GPJyReccAMr7jSQ5ex3445D9ZjJDB6YhVZ/In0gExs=
Subject key identifier: A8:64:10:EC:E7:04:92:2A:A5:B2:1E:74:A6:13:0B:F7:AF:67:B1:8D
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 018FA5C94748B49C685D4591A1ED2A5D5F76
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/qGQQ7OcEkiqlsh50phML969nsY0.roa
Signing time: Thu 23 May 2024 14:09:42 +0000
ROA not before: Thu 23 May 2024 14:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47366
IP address blocks: 185.62.8.0/22 maxlen: 24
185.62.9.0/24 maxlen: 24
185.62.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 14:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:c9:47:48:b4:9c:68:5d:45:91:a1:ed:2a:5d:5f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: May 23 14:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a86410ece704922aa5b21e74a6130bf7af67b18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:c2:72:13:a9:5c:81:00:22:b5:9e:b3:df:
72:e5:8e:d9:d4:e0:1f:1f:26:23:6d:96:b8:96:80:
12:60:eb:7c:84:a2:8a:c5:05:36:2a:5a:8a:f6:63:
33:de:be:49:5b:9b:4c:72:38:16:37:bf:d3:08:58:
69:cf:5a:ba:c9:e3:27:b8:16:f5:55:5c:cf:57:e8:
70:30:81:48:7d:6e:99:ef:61:f0:7c:50:4e:b2:9f:
33:7d:7c:ce:d3:bb:d9:90:97:12:05:b6:d0:d3:e4:
24:a5:26:fc:bf:2e:bf:f0:cd:0f:9e:40:c0:72:91:
dc:0b:f6:85:39:40:88:48:e2:89:7b:af:d9:c3:22:
cd:da:d1:bf:c6:84:c5:68:25:6d:4c:1e:53:6b:04:
9d:33:ed:80:5f:d3:6f:2e:62:7d:8c:56:95:02:35:
a9:c8:d2:10:3d:52:92:8c:15:9f:92:53:d5:06:5e:
27:c4:26:28:6e:50:23:9e:d9:9a:31:b3:ad:22:12:
20:05:18:d1:aa:19:56:44:33:d1:6e:5c:d2:29:3c:
25:e2:16:d7:f6:71:6e:6e:18:b0:07:b6:94:05:8b:
96:98:5b:8d:6c:fb:1d:40:af:93:0b:28:18:98:3a:
36:89:59:32:1e:37:1b:56:2c:6b:7c:50:b9:fd:df:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:10:EC:E7:04:92:2A:A5:B2:1E:74:A6:13:0B:F7:AF:67:B1:8D
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/qGQQ7OcEkiqlsh50phML969nsY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.8.0/22
Signature Algorithm: sha256WithRSAEncryption
27:04:4a:ff:ac:ae:9e:ad:09:66:b6:0e:f9:1c:5d:d2:4e:d6:
7e:4b:4c:d9:f3:88:70:a3:5b:bd:90:48:37:34:56:a3:67:eb:
0d:aa:fb:04:8a:ff:b9:a7:61:58:f7:ff:17:f0:e1:94:7c:69:
28:fa:4d:4a:6b:a3:58:53:19:14:62:aa:74:de:5d:ac:0c:fe:
01:c2:dd:a1:68:53:9d:c5:3f:57:04:30:56:d8:b2:ba:7a:6d:
80:82:ca:7a:31:86:63:ca:fa:06:1f:06:d7:e5:5d:1d:0e:24:
6d:7f:fb:97:b6:a5:a9:c1:56:43:4b:36:c4:c5:62:8f:67:0c:
e6:4d:37:fc:96:bc:a0:fe:ee:62:4d:e7:1a:77:16:d8:78:15:
ff:a5:59:08:83:53:18:75:d5:95:3e:59:bc:b6:97:78:66:19:
5f:d5:0e:1c:af:6f:21:db:43:e9:f7:b3:9d:01:62:fe:67:05:
e8:19:44:f8:3a:46:bc:57:83:d8:2e:b4:51:54:21:06:59:04:
4a:94:6a:3e:30:5e:59:13:86:8d:72:15:51:12:9e:5f:6e:77:
17:6c:5e:32:f3:ab:38:c2:cf:80:aa:c1:f2:13:b3:ff:21:3d:
ce:4d:21:d1:90:c9:a9:c9:f7:c9:96:2a:c3:82:da:6d:6e:e7:
61:3c:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:19:11 2024 by rpki-client on console-fra.rpki-client.org