Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/Qbn_DVzQA00ww2r09lo0qo7LckI.roa
File: Qbn_DVzQA00ww2r09lo0qo7LckI.roa (raw, json)
Hash identifier: NhOQfQDR4lP0/2F/qaJiZ03Oy/hoCYbcDB36Dn7wdIo=
Subject key identifier: 41:B9:FF:0D:5C:D0:03:4D:30:C3:6A:F4:F6:5A:34:AA:8E:CB:72:42
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01856DCABFA170B3FCD72919DE6A611B3A34
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/Qbn_DVzQA00ww2r09lo0qo7LckI.roa
Signing time: Sun 01 Jan 2023 14:44:41 +0000
ROA not before: Sun 01 Jan 2023 14:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209281
IP address blocks: 185.74.223.0/24 maxlen: 24
2a04:7480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:bf:a1:70:b3:fc:d7:29:19:de:6a:61:1b:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Jan 1 14:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b9ff0d5cd0034d30c36af4f65a34aa8ecb7242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:f6:44:fd:fb:1e:8e:55:3b:ab:a3:bd:95:
2d:28:f4:d9:9c:27:98:72:59:b1:e3:6c:df:d4:54:
51:5b:86:4b:a1:82:91:43:8a:93:82:a9:90:20:32:
f5:80:04:2c:72:7b:ec:2e:08:30:11:9d:70:67:e6:
44:8d:4e:39:b1:f4:1c:1b:46:ba:8d:9d:ee:b0:c2:
22:11:e3:da:94:ab:ae:db:df:85:c3:ed:6e:30:2c:
5c:0e:68:d2:d2:73:91:e7:82:2e:f7:65:c2:91:fb:
08:06:ca:b2:6e:ba:69:63:7b:df:93:e8:21:44:f4:
40:18:72:98:2f:37:4b:b7:ae:48:f9:ab:cb:fb:5e:
32:ea:ed:88:8f:ec:60:74:93:99:ea:be:5a:97:1d:
e8:1b:50:a1:59:3c:b3:d6:f1:c3:4e:fe:f0:2c:3d:
f1:73:13:90:75:4f:4b:c3:59:4d:d0:df:e9:8f:ed:
08:69:d1:90:a1:34:e3:24:57:0b:fe:b4:21:bc:6a:
a1:ee:83:ec:21:12:7c:d7:c3:0e:e5:55:c9:d4:0a:
cc:ac:85:50:aa:fe:d6:ce:3a:20:48:be:11:4d:59:
c4:ec:fb:26:1a:6a:a2:30:e1:94:73:ef:fc:33:38:
01:19:87:76:49:f8:75:0c:c1:11:94:91:76:b2:da:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:FF:0D:5C:D0:03:4D:30:C3:6A:F4:F6:5A:34:AA:8E:CB:72:42
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/Qbn_DVzQA00ww2r09lo0qo7LckI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.223.0/24
IPv6:
2a04:7480::/29
Signature Algorithm: sha256WithRSAEncryption
40:6d:44:f2:03:85:57:df:3e:75:6f:d5:9b:4a:79:36:49:38:
8e:9f:b0:d0:a7:96:ec:02:5d:b0:9e:ee:81:1e:82:d3:0d:3d:
ce:b9:66:53:fc:cf:14:2d:e7:90:e5:b5:b0:c2:2f:97:34:e0:
a1:2b:93:ae:47:19:a2:bc:58:f8:c3:ba:c8:cf:d6:3c:eb:1e:
c1:ea:52:e1:b3:9f:6a:f3:1b:b5:7b:3a:30:e5:9e:99:cd:90:
1f:11:3c:f2:69:9b:51:83:38:ef:8e:ed:a7:02:49:1c:35:4c:
ad:1c:9b:5f:1f:df:4c:4d:fc:50:45:f8:1a:1f:04:9b:d9:e9:
ee:bb:86:3a:6a:4c:08:4e:51:9b:ec:5c:9c:61:5e:f7:00:e3:
31:f0:35:2f:f5:67:2c:e0:71:17:5d:45:7e:e8:8d:8c:f5:9d:
2c:df:24:7e:54:f0:7b:f7:4a:9c:4d:71:ae:81:9f:68:be:cc:
b4:af:9f:49:97:ba:f5:03:95:d7:f5:20:37:d8:7a:ec:96:09:
18:81:f4:aa:b6:4c:03:7c:93:75:99:4a:41:91:93:88:90:ae:
14:d4:78:7e:a7:1d:ef:b4:48:d3:95:15:16:d3:69:c9:8f:ce:
7e:a2:23:1f:17:0d:35:3b:6b:66:be:33:99:65:ca:31:bd:d5:
45:d8:ba:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:28 2024 by rpki-client on console-fra.rpki-client.org