Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qCc-d7bm58uOgVOsqpzNjSzL-Fo.roa
File: qCc-d7bm58uOgVOsqpzNjSzL-Fo.roa (raw, json)
Hash identifier: 57jedLcxpDpRexVt8d2LB64MCGGXkJZUoOrXxTl2UBY=
Subject key identifier: A8:27:3E:77:B6:E6:E7:CB:8E:81:53:AC:AA:9C:CD:8D:2C:CB:F8:5A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018570672BBD3E59C44C12093F021C0B775F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qCc-d7bm58uOgVOsqpzNjSzL-Fo.roa
Signing time: Mon 02 Jan 2023 02:54:47 +0000
ROA not before: Mon 02 Jan 2023 02:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 89.185.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 09:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:2b:bd:3e:59:c4:4c:12:09:3f:02:1c:0b:77:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8273e77b6e6e7cb8e8153acaa9ccd8d2ccbf85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:54:16:ae:7e:d2:5e:d2:da:db:48:66:87:
a4:a5:bb:38:11:0f:2f:2e:77:cf:29:7d:6e:2f:4c:
80:9b:24:5c:90:25:ad:04:10:d0:1c:89:c5:14:92:
b3:c5:ad:79:96:c1:6f:d2:bb:3e:4e:00:cd:6b:06:
d1:bb:13:30:70:22:e0:dc:46:d3:e1:f8:79:69:d3:
07:d5:4f:34:6c:d3:50:9e:53:7c:25:08:0d:18:5a:
c3:9a:48:65:68:14:3e:f4:e6:ee:d5:47:fe:58:99:
d7:45:67:c0:d9:8d:4b:0f:91:2a:be:1b:e3:01:55:
78:76:75:4c:dd:44:ce:15:38:76:4b:84:93:c1:5b:
48:ea:d2:89:ac:b1:7f:bb:87:68:92:65:03:6e:ab:
d8:10:3a:bd:6b:03:1e:41:6c:4f:01:9a:44:2c:0a:
76:b0:fc:19:f9:26:4a:86:0c:7f:27:5d:1c:1a:ac:
ef:e1:3d:8d:cb:3f:a0:fe:b4:8c:a6:22:7d:fe:91:
ea:6a:13:e4:f5:de:21:c6:f7:d3:ae:65:38:c4:04:
0b:53:47:9d:59:17:8e:99:5f:fb:e7:89:94:a2:c3:
92:39:0c:db:92:8a:50:0b:13:06:6d:54:2e:20:c4:
32:5d:93:7d:d5:c3:5e:3d:98:1c:3f:cc:c4:a0:ea:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:3E:77:B6:E6:E7:CB:8E:81:53:AC:AA:9C:CD:8D:2C:CB:F8:5A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qCc-d7bm58uOgVOsqpzNjSzL-Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.22.0/23
Signature Algorithm: sha256WithRSAEncryption
38:be:1c:57:0d:8d:2d:b9:86:d4:fc:4c:f7:4a:00:44:68:de:
28:b4:c1:a0:dd:c3:27:55:e0:4e:af:2e:17:b0:c9:fc:a5:00:
90:8e:f4:08:3d:2f:63:6c:73:bf:a8:dc:90:86:94:f2:c9:25:
85:f7:9c:f3:03:1e:6c:f7:c4:12:27:2d:bf:5c:77:52:c9:86:
ac:79:c2:c8:f0:0e:84:92:bf:de:65:6a:8c:cd:e4:2a:31:a7:
8f:43:d3:4d:31:b0:9d:05:0a:27:ed:72:90:f0:6a:ae:6f:e3:
28:7f:14:b8:84:66:7d:bf:ac:4f:4e:5c:d0:ab:c3:11:f2:ff:
f5:88:dc:4b:ee:8d:36:8a:72:14:4d:e1:c7:2d:f2:c2:30:a9:
6e:57:00:e0:c3:93:2e:d0:ce:7f:c7:7b:7f:fa:10:ee:c8:8a:
f9:d0:14:8c:ac:c4:b8:4a:80:fc:af:a5:91:62:d8:fe:8a:5e:
62:eb:c3:b4:af:0e:1e:9c:ce:37:72:6c:97:03:60:68:7c:cb:
c8:eb:cd:38:51:59:aa:e4:85:58:8e:30:ae:27:f9:f4:16:20:
80:3b:c8:7c:65:c3:07:d9:47:e3:9d:84:fc:ff:e9:0f:4d:85:
7c:47:19:62:31:48:f8:49:90:43:5e:c4:1d:5a:16:0b:58:db:
72:cb:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org