Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/qR_yTrKlgQpiV4JS5BaIXkKdh8U.roa
File: qR_yTrKlgQpiV4JS5BaIXkKdh8U.roa (raw, json)
Hash identifier: wPqM1gc626AUSB1ll9V2Wmk541YTgOFD0yQ9UjUT3ek=
Subject key identifier: A9:1F:F2:4E:B2:A5:81:0A:62:57:82:52:E4:16:88:5E:42:9D:87:C5
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01856FA6D7200FE8F9BE7F4E36E5FE7655CB
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/qR_yTrKlgQpiV4JS5BaIXkKdh8U.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209634
IP address blocks: 185.18.233.0/24 maxlen: 24
185.18.232.0/24 maxlen: 24
147.78.184.0/22 maxlen: 22
2a09:840::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d7:20:0f:e8:f9:be:7f:4e:36:e5:fe:76:55:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a91ff24eb2a5810a62578252e416885e429d87c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:76:64:8e:c9:48:0d:a5:7c:34:2c:52:ad:
03:24:9e:2a:30:d8:1c:dc:5e:10:cd:81:5e:32:a3:
fc:46:06:27:26:18:5a:02:6b:ca:70:73:35:d1:1c:
47:22:98:76:b0:d5:78:cf:14:8d:31:5b:cf:75:4d:
b3:13:a4:7a:65:ea:a2:a3:8f:dc:8b:b3:41:20:05:
82:91:e5:40:b4:1c:8e:28:85:cb:de:ac:f4:64:32:
7d:35:31:45:d4:47:17:20:d4:eb:15:21:62:7b:55:
e1:8b:8b:36:25:7b:81:b6:2f:7f:d6:ff:74:f3:54:
e3:06:32:03:2b:6e:82:b6:84:93:4d:a4:a3:8d:7f:
63:5b:8a:4c:a2:b1:4d:72:61:9d:82:64:df:3c:e7:
d5:03:3e:38:ec:14:43:cf:c4:d5:8e:5f:01:80:df:
8b:f8:8b:f4:f6:4c:24:11:1f:f6:ea:59:91:fb:9a:
d1:1e:4f:a3:b8:64:bd:97:2c:ef:fb:ac:36:53:bd:
00:09:b8:2d:4b:24:ec:06:78:bd:08:74:78:5d:ad:
dc:8a:8b:b0:1a:0f:3f:5b:e9:9a:a6:e1:c8:82:c1:
11:e3:70:b1:0e:48:ab:5c:b9:4a:49:fb:c5:33:82:
80:2c:a7:86:be:02:8a:e2:f9:66:d7:10:97:cd:07:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:F2:4E:B2:A5:81:0A:62:57:82:52:E4:16:88:5E:42:9D:87:C5
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/qR_yTrKlgQpiV4JS5BaIXkKdh8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.184.0/22
185.18.232.0/23
IPv6:
2a09:840::/32
Signature Algorithm: sha256WithRSAEncryption
c1:8b:ae:b8:1e:62:40:0d:12:9d:6a:51:de:ad:c8:6a:78:71:
8e:1b:6c:23:44:6c:d8:b3:f3:1c:22:1b:6a:de:9d:65:c8:ad:
ab:d8:7d:27:73:36:2e:17:98:57:92:d6:e4:8c:48:58:dd:cf:
be:19:88:1f:66:fb:a8:c4:4a:3c:f7:4e:0a:3c:ec:84:73:a0:
82:56:45:eb:ff:bf:ea:76:38:17:af:77:eb:a2:79:1f:f2:90:
5a:50:21:33:51:7e:bc:6c:65:cf:5d:da:4a:22:49:f5:47:d0:
ed:cf:af:25:7a:a3:8f:d4:a0:5e:ee:bc:21:fd:fd:ea:09:cb:
80:15:8e:6c:ed:3d:88:16:c9:ce:15:c3:14:06:bf:84:3f:d3:
04:5d:43:a5:6f:bc:50:88:47:03:17:c2:7b:02:50:1f:aa:7e:
9b:b1:87:cf:17:86:ae:f4:f0:a7:b7:3b:53:26:fb:fc:21:70:
e5:65:31:c9:79:33:7f:c1:ee:7c:0a:ce:35:64:22:8d:ee:94:
9d:6c:5c:5d:61:2b:77:af:e0:cc:05:4d:53:d3:05:4a:b8:6d:
37:cd:73:3a:a7:7a:1d:34:08:64:f5:f1:51:d6:21:7f:83:0f:
63:e5:5c:b2:48:a4:dd:d5:7a:b8:04:77:36:81:74:68:13:0c:
54:f4:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:06 2024 by rpki-client on console-fra.rpki-client.org