Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Q0tJBSdSJ8ay9ju55pnGQDCUZ7A.roa
File: Q0tJBSdSJ8ay9ju55pnGQDCUZ7A.roa (raw, json)
Hash identifier: IK+CRrRJulE0riNvaVUj6v101K7JHPbkd7USLxLxf6U=
Subject key identifier: 43:4B:49:05:27:52:27:C6:B2:F6:3B:B9:E6:99:C6:40:30:94:67:B0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018B1E27541192D310808DC7E25A864CDD42
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Q0tJBSdSJ8ay9ju55pnGQDCUZ7A.roa
Signing time: Wed 11 Oct 2023 09:52:55 +0000
ROA not before: Wed 11 Oct 2023 09:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 14 Oct 2023 09:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:27:54:11:92:d3:10:80:8d:c7:e2:5a:86:4c:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 11 09:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434b4905275227c6b2f63bb9e699c640309467b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:2d:a4:3d:ac:90:b8:50:79:a7:0c:40:1e:
02:79:72:51:18:eb:95:4f:6d:42:42:ee:12:05:75:
b4:4a:43:9e:96:7e:1e:f9:ea:aa:07:7e:c6:da:f2:
2f:b9:1a:6c:1c:4e:7e:cf:89:81:b2:0a:a8:24:d0:
7b:38:0e:a7:cc:68:ca:d4:f4:51:ef:95:fd:31:85:
47:7c:97:8b:52:94:de:ed:80:72:81:7e:80:61:a6:
b9:d5:65:c9:7d:93:d8:c9:62:88:71:99:2d:2c:52:
94:f8:d4:99:0b:12:de:31:52:36:cc:87:51:85:2b:
a8:02:11:40:29:28:97:04:e5:0d:48:62:57:b1:1f:
a8:3f:79:24:df:16:40:87:0c:ea:d8:ed:b8:b6:d2:
60:1e:f6:9c:ed:b4:3d:2c:bb:8f:5e:5c:32:0d:c8:
ae:3a:33:36:3b:cd:8a:f7:88:be:49:bd:32:1b:9a:
bf:07:07:ab:b0:92:c4:82:1e:ef:ab:f5:b5:4c:45:
35:34:b9:7a:53:68:6f:a5:15:25:1a:3c:70:e8:31:
79:c9:5c:71:96:19:04:f0:23:e9:c5:dc:57:4e:74:
59:46:ff:6a:95:20:3d:7e:e5:a8:96:f6:b4:01:4a:
a1:ee:d9:b0:52:30:0b:6e:55:a9:87:cb:07:dd:49:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:49:05:27:52:27:C6:B2:F6:3B:B9:E6:99:C6:40:30:94:67:B0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Q0tJBSdSJ8ay9ju55pnGQDCUZ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
13:67:30:76:6c:a3:32:5a:f1:eb:dc:41:16:b2:da:97:97:d3:
74:05:5a:55:1d:04:2d:f7:10:12:45:e8:6a:8c:60:ad:d0:ab:
e2:1b:98:24:99:fa:ec:a9:79:a0:57:a4:26:de:79:37:78:1d:
51:c9:2e:f1:c2:bd:55:cc:17:e3:0f:d2:04:68:80:5a:56:89:
b1:da:06:36:64:29:c8:b8:7b:46:ef:bf:d1:34:a1:07:d5:8f:
97:15:22:d6:77:94:2b:a4:15:1a:f9:e7:cb:41:65:92:fb:1f:
fb:ab:d3:69:f4:6c:cd:5f:c2:01:08:a5:2f:ac:db:73:1e:0f:
7c:5d:be:ef:65:a1:d0:01:f1:e5:4c:e9:7d:70:a6:6e:a4:94:
c3:1d:b6:a3:d6:b0:c1:3f:2f:02:b3:11:bb:f5:c7:7d:99:e7:
0d:06:ea:b5:3b:f2:3e:fe:40:26:12:7c:dc:40:cd:36:d4:84:
b9:32:ea:d0:a1:b7:dc:4c:0b:76:89:42:bb:83:a6:ad:76:b2:
ec:a0:dc:94:13:e8:ed:86:16:89:a1:e1:7b:84:6f:7e:82:d5:
ed:41:72:06:7e:08:9f:b8:7c:d5:60:0b:96:3c:5a:8f:95:08:
22:86:96:ff:97:e3:bc:0c:0c:98:18:84:bd:d7:cf:0e:84:e9:
fb:ae:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org