Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/q3pgTnt9ervZoI8syj29swP9CWg.roa
File: q3pgTnt9ervZoI8syj29swP9CWg.roa (raw, json)
Hash identifier: p/KFmzfxsSb9vEtQIbjsqXTjZ4i6ww8Ki0NTTvXQLnE=
Subject key identifier: AB:7A:60:4E:7B:7D:7A:BB:D9:A0:8F:2C:CA:3D:BD:B3:03:FD:09:68
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 01856C53CB8D566945B682300127886D6E68
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/q3pgTnt9ervZoI8syj29swP9CWg.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25353
IP address blocks: 46.235.56.0/21 maxlen: 21
81.201.192.0/20 maxlen: 20
185.183.188.0/22 maxlen: 22
2a03:2600::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cb:8d:56:69:45:b6:82:30:01:27:88:6d:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab7a604e7b7d7abbd9a08f2cca3dbdb303fd0968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:0f:02:55:5a:06:ca:09:38:da:4b:79:e1:
33:66:34:a7:7f:f6:c3:6f:d0:d7:65:e2:06:3b:0e:
7f:bc:59:c0:a4:46:94:f6:01:4b:55:62:30:64:4c:
78:3f:1c:38:0d:56:b3:2c:37:ba:3e:6a:d0:17:fb:
98:db:82:cb:85:57:6c:4f:ea:e8:e7:26:ca:ef:d6:
7d:22:58:46:95:4a:24:e9:ec:22:7e:c4:69:13:e5:
0d:fe:ff:1d:a6:00:e9:d6:09:4e:90:74:95:9a:30:
fc:95:4f:78:de:b2:cb:a5:94:67:9e:d6:59:6c:e8:
08:66:06:64:38:3b:e7:59:b0:40:41:49:22:b3:55:
2a:0a:3f:3d:c6:d7:5b:d8:ca:85:8b:de:67:90:8b:
0d:6a:b9:a1:7d:d8:26:41:ac:7e:90:cc:9b:60:6a:
c6:fb:08:7a:bb:f5:cb:33:0b:b2:18:a1:a3:ea:fa:
b8:8b:a9:ef:ed:1e:57:b9:20:73:89:b7:0e:78:ba:
cd:e3:25:c9:47:30:c9:7b:4f:49:95:fc:ec:2f:74:
36:83:e8:cd:32:60:96:94:aa:d8:51:79:0e:16:9f:
97:1e:0e:eb:90:cf:7b:3b:74:1e:98:71:05:d1:34:
e8:6e:4a:19:95:f9:8b:e5:e4:fa:08:94:ce:33:7d:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:60:4E:7B:7D:7A:BB:D9:A0:8F:2C:CA:3D:BD:B3:03:FD:09:68
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/q3pgTnt9ervZoI8syj29swP9CWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.56.0/21
81.201.192.0/20
185.183.188.0/22
IPv6:
2a03:2600::/32
Signature Algorithm: sha256WithRSAEncryption
3e:53:81:51:cd:b6:0f:aa:5d:ca:29:4a:3b:76:fb:11:46:1f:
93:9e:25:6e:49:c6:2a:b3:24:d9:09:0a:ff:70:97:9c:7b:8c:
f3:16:74:eb:bb:d6:db:d2:46:6e:71:71:be:cf:62:41:d2:d4:
b9:84:11:a0:55:72:63:6f:49:a5:e7:ae:b1:90:1a:2f:00:0e:
64:bc:c2:5e:7a:d2:eb:e7:e0:56:a3:10:24:56:20:95:ab:2b:
d6:0a:ed:22:d8:1e:48:72:dd:72:55:a8:5b:c8:64:d3:93:f8:
7e:a9:b0:e6:3a:de:72:d2:3e:39:3d:10:de:0f:8e:a6:7c:45:
2f:e9:c1:6e:ce:9d:b3:a4:ad:7c:62:2d:d1:a1:f4:6c:33:bc:
cd:df:3b:a5:a2:55:ee:e8:23:13:e1:50:e3:c2:89:af:a3:39:
ce:9f:da:0e:3e:bd:58:92:e3:16:a7:cb:93:25:59:d3:8a:e4:
a2:78:97:a4:cd:3c:69:cd:e7:1a:18:f2:4f:85:23:f5:41:94:
4d:51:d3:34:6d:f9:f4:b0:f2:b1:f6:75:05:e2:7c:bd:82:75:
c5:a8:f1:ef:45:6d:01:3f:ce:e6:c1:6b:68:a6:42:a4:3b:ee:
2a:8b:52:45:dd:b1:b1:af:22:24:84:4e:b9:6a:fa:64:48:55:
6d:e1:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org