Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/qogdPDG6jTvsg_rxoql5gK_x6PQ.roa
File: qogdPDG6jTvsg_rxoql5gK_x6PQ.roa (raw, json)
Hash identifier: 0MkSjXgjXPuihp1QBhY5bA3o6EkimIaAUN0RcSErYO4=
Subject key identifier: AA:88:1D:3C:31:BA:8D:3B:EC:83:FA:F1:A2:A9:79:80:AF:F1:E8:F4
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01858B2A767FE6D6CDA308B6B1096F5B6EFE
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/qogdPDG6jTvsg_rxoql5gK_x6PQ.roa
Signing time: Sat 07 Jan 2023 07:38:13 +0000
ROA not before: Sat 07 Jan 2023 07:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 11:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:2a:76:7f:e6:d6:cd:a3:08:b6:b1:09:6f:5b:6e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 7 07:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa881d3c31ba8d3bec83faf1a2a97980aff1e8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:1c:16:72:3f:01:45:c7:00:05:c2:91:1f:
cc:bd:0b:f5:76:c4:c6:96:79:9a:62:a7:be:be:92:
52:f9:71:db:73:39:92:9d:44:79:e3:f2:e9:a5:34:
e5:3c:bc:c7:6f:4f:e5:da:2a:f2:e1:de:1d:b7:df:
73:e5:b4:1f:2d:cc:30:a0:73:99:c0:10:b7:cd:a5:
5c:87:ac:69:97:ef:d9:42:2d:3b:5a:4c:74:8f:cb:
4d:03:74:12:20:df:d0:de:b6:fe:2f:dc:92:a3:42:
63:f1:60:d4:c0:e8:f9:d0:84:e0:22:0f:00:e2:f1:
e9:47:4d:8e:26:01:93:6f:2a:03:1f:63:94:75:02:
f6:61:8b:8f:5d:c9:0d:24:3c:71:2f:c7:bb:6e:ca:
b2:94:bd:96:eb:ab:78:b8:0a:19:d9:1f:7a:b8:c0:
3f:47:d2:36:23:cd:73:16:7f:9b:51:8f:36:33:65:
96:13:d6:32:bb:67:91:78:4f:8f:a4:b6:e2:f2:1d:
1c:98:4a:f6:b2:18:59:07:74:0d:3b:fb:0b:5a:f2:
50:fb:a9:fb:2d:c6:5a:3e:38:3a:b0:ed:3d:83:0d:
30:9f:73:6b:fe:3d:41:a7:c2:99:db:53:29:c7:38:
e2:37:8e:bd:e4:aa:16:5a:bc:50:e6:28:f2:eb:32:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:1D:3C:31:BA:8D:3B:EC:83:FA:F1:A2:A9:79:80:AF:F1:E8:F4
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/qogdPDG6jTvsg_rxoql5gK_x6PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:18:26:6b:9a:10:44:2c:9c:6c:ae:5d:72:87:5c:b6:aa:41:
89:f0:d8:0f:f5:e8:43:46:75:29:50:1f:c2:84:77:9f:f3:99:
75:5d:bc:27:9f:27:b5:c2:d4:36:9e:ed:ec:5e:cc:67:74:c7:
2e:a7:7f:d3:3a:13:2a:5d:de:cf:48:b2:3d:2e:fd:25:60:81:
e9:29:9e:08:ca:06:0a:cf:f1:bd:f0:ae:03:a8:3f:37:ab:96:
22:d8:70:2a:03:d4:67:56:5e:e2:a5:f0:04:f9:4c:05:ef:43:
fb:89:53:5c:13:5b:46:d4:b3:42:59:7a:72:31:59:f2:77:65:
8c:8f:dd:c4:c6:3a:5a:4f:da:56:41:bb:50:a6:a6:f3:54:cb:
33:65:88:c3:eb:75:29:2c:ef:11:60:f3:5a:b0:7c:d8:7d:45:
c2:41:81:1d:ce:05:86:a3:e5:63:b9:a8:1d:b5:a4:8d:11:81:
92:76:d4:d6:65:89:ab:bc:e0:67:a2:a3:fb:c8:2d:ff:46:b0:
71:6f:26:e1:76:fa:95:ab:5b:d9:ec:68:35:92:24:9a:9a:40:
9e:c7:9c:fd:5c:fa:bd:bd:23:71:68:5c:30:94:69:e0:31:2f:
d3:84:8a:d1:76:04:5b:fa:8c:81:e3:89:98:ed:bc:78:da:aa:
03:7d:b9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org