Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/QXCzFIRObT5-C0AR-4bKkhN_Q1Y.roa
File: QXCzFIRObT5-C0AR-4bKkhN_Q1Y.roa (raw, json)
Hash identifier: qQVg7aOydAFZxV6jFheNsBjZHHsLdrNosxiafKnMxmY=
Subject key identifier: 41:70:B3:14:84:4E:6D:3E:7E:0B:40:11:FB:86:CA:92:13:7F:43:56
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 018AD625A99F289228F6054EE9F1C6D00005
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/QXCzFIRObT5-C0AR-4bKkhN_Q1Y.roa
Signing time: Wed 27 Sep 2023 10:18:27 +0000
ROA not before: Wed 27 Sep 2023 10:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5582
IP address blocks: 185.113.32.0/23 maxlen: 23
185.182.224.0/22 maxlen: 22
2a0a:fa80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:25:a9:9f:28:92:28:f6:05:4e:e9:f1:c6:d0:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Sep 27 10:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4170b314844e6d3e7e0b4011fb86ca92137f4356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:e5:42:47:0e:f4:1f:96:87:23:c9:bc:65:
20:e0:25:51:05:a5:13:80:ca:b0:cc:0c:d8:e5:f6:
8b:ad:a6:2e:24:81:0e:52:a6:58:62:95:94:89:35:
8f:37:4d:0f:6c:0d:b7:be:a2:a9:64:db:e5:bc:14:
71:d2:cf:67:75:a3:e9:df:f3:30:43:25:e7:b9:26:
32:66:12:e1:45:10:9c:85:c7:54:22:95:07:f3:be:
82:95:ce:0e:24:a3:68:6b:ca:ea:be:04:17:24:8e:
75:c8:f4:f4:38:99:86:8b:41:26:c1:02:5e:2f:f9:
4e:4e:e8:a6:c4:46:ed:b1:f0:ed:f4:f0:93:bc:0a:
06:56:ce:78:a0:9b:18:c2:19:e6:c9:1b:9e:95:27:
79:81:ea:9a:95:ff:76:b0:8b:60:c6:01:e6:79:4a:
80:9a:ba:1b:ee:0f:0e:69:70:c8:5e:e1:83:89:5e:
ec:2a:bf:62:3f:9d:af:72:91:ee:fc:56:4e:4e:ad:
9d:2f:ed:25:b4:af:2c:d7:a4:cb:24:43:26:e0:78:
31:a8:18:6f:5a:af:a8:d0:69:f6:ef:df:f7:65:33:
bb:25:ca:b7:a4:85:dc:04:68:31:45:49:6c:f4:46:
3f:21:ee:f2:62:aa:9b:f7:e7:4b:18:97:5c:d6:a3:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:B3:14:84:4E:6D:3E:7E:0B:40:11:FB:86:CA:92:13:7F:43:56
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/QXCzFIRObT5-C0AR-4bKkhN_Q1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.32.0/23
185.182.224.0/22
IPv6:
2a0a:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
60:15:e3:8a:16:da:c2:8d:07:07:ec:2c:91:ad:78:55:bb:1c:
d4:c4:a4:60:02:9a:90:48:83:bc:9c:99:be:04:36:8c:09:63:
e0:0b:0c:14:7b:e0:64:b9:e5:95:5d:cb:c8:b5:95:c0:4f:3a:
dc:dd:ba:ba:32:9a:bb:d1:2a:3d:a6:8d:9d:2b:ec:20:40:25:
b9:17:71:b2:79:c7:0a:9d:ac:25:3b:4b:e8:6e:8b:fe:ae:b5:
17:77:8e:3b:f8:c6:e6:ca:3d:76:a7:71:b2:83:e1:b1:bc:e3:
0c:61:5a:34:a8:9f:38:da:49:38:2d:02:06:c6:f0:e7:16:dd:
0c:b6:d8:cb:86:c8:b0:8b:0b:72:ac:9b:c2:1b:f7:8e:cc:05:
84:eb:ce:5e:8b:02:09:c2:a6:2d:a8:ff:de:51:ba:ac:bb:dc:
3e:9c:31:ea:20:f3:97:4f:48:64:92:e7:dc:6e:7e:07:07:e8:
ef:00:7c:77:24:a2:d7:97:14:56:8e:d0:bd:42:f7:fe:8b:4c:
0e:49:57:64:28:a3:0e:fb:2d:af:7b:d5:8a:57:82:47:c9:2b:
94:50:43:00:13:0a:45:71:35:11:6e:cf:84:7b:8b:ab:c0:7f:
b5:75:96:88:9a:56:13:7a:41:4f:12:d1:1a:05:cb:12:e5:0f:
e0:2e:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:27 2024 by rpki-client on console-fra.rpki-client.org