Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/QxcLNKhNqiKKyYaiF9jClon8WSY.roa
File: QxcLNKhNqiKKyYaiF9jClon8WSY.roa (raw, json)
Hash identifier: l4xF+tmvb6ItvfXxZ4zuEIik14AbtdCjib0DvRotGaY=
Subject key identifier: 43:17:0B:34:A8:4D:AA:22:8A:C9:86:A2:17:D8:C2:96:89:FC:59:26
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E076C6C268F4A57C733C219201286
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/QxcLNKhNqiKKyYaiF9jClon8WSY.roa
Signing time: Sun 01 Jan 2023 23:15:05 +0000
ROA not before: Sun 01 Jan 2023 23:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 85.239.35.0/24 maxlen: 24
85.239.48.0/22 maxlen: 24
85.239.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 18:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:07:6c:6c:26:8f:4a:57:c7:33:c2:19:20:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43170b34a84daa228ac986a217d8c29689fc5926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:97:f9:b3:48:db:0b:39:26:86:88:9e:b8:82:
b1:86:4f:4b:07:53:1c:7f:39:5c:97:a7:b6:9f:c8:
40:16:e5:eb:e5:14:2c:04:82:7d:99:97:04:7f:d3:
bb:5a:a1:72:5d:11:0c:74:28:11:0c:3b:c6:e7:ce:
01:e6:8c:4d:a7:2e:2b:b6:0a:66:09:c2:44:7f:17:
47:ba:2d:4e:0d:91:da:15:89:63:95:c3:37:e9:63:
29:d7:3c:27:76:e8:6b:17:b1:3f:04:a9:b3:d5:6f:
fb:7e:ba:25:c5:91:72:1b:d5:55:e5:71:98:61:b0:
89:7c:53:33:50:3a:01:4d:54:b0:62:42:7b:bf:d2:
38:49:26:b5:54:60:ed:9b:bd:23:f3:f4:79:47:91:
a4:40:38:00:1e:6d:4d:6b:6d:c0:14:05:0d:1e:75:
3a:4a:86:f1:40:38:d8:63:57:15:de:84:eb:cd:ca:
7b:74:41:50:38:78:dd:af:49:48:16:d2:a2:b3:1b:
ed:dd:e5:a4:86:bb:22:e5:11:59:46:56:49:f5:9b:
18:f4:cc:79:b9:f4:e8:1e:40:7b:93:31:04:6c:24:
84:39:c7:a3:84:64:26:a0:94:a7:8a:a5:78:29:ae:
fc:db:df:38:aa:17:01:10:0d:6f:8a:81:b5:63:dc:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:0B:34:A8:4D:AA:22:8A:C9:86:A2:17:D8:C2:96:89:FC:59:26
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/QxcLNKhNqiKKyYaiF9jClon8WSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.35.0/24
85.239.48.0/22
85.239.56.0/22
Signature Algorithm: sha256WithRSAEncryption
67:64:5b:37:b6:79:ec:4c:27:28:bb:ac:7b:e1:53:c3:78:7d:
9b:1f:7a:9a:c9:79:8b:fd:27:93:82:7e:e8:6f:25:d8:38:ef:
66:b6:26:68:9b:13:c0:07:75:fb:7b:3b:ed:06:a0:04:fb:ca:
1e:b1:82:b9:e6:1a:d7:43:e2:59:5e:1f:81:fa:dd:cd:da:ee:
ed:de:7b:95:5d:23:5f:91:a9:cb:2d:0b:56:51:7a:e3:24:41:
62:71:76:30:1d:f6:8d:9d:6f:c5:c9:84:cc:cb:97:92:33:fa:
61:82:7e:70:1c:bc:7d:8b:4f:ba:09:10:bf:de:02:a7:1d:a0:
64:49:35:fb:a1:1d:1f:76:1b:f2:2a:92:b8:bc:99:f7:d2:04:
0f:81:3d:38:a4:f9:8f:d1:b2:a7:a9:f0:f4:6c:1f:5a:f3:3f:
00:2e:77:ec:57:16:7b:ab:30:66:ea:2f:5a:b1:25:2a:f8:0b:
3d:48:47:92:e5:b3:44:1b:e0:f1:73:9f:92:06:b0:f3:04:da:
cf:87:06:3b:53:24:86:52:70:59:2b:0b:5b:99:78:fe:ca:90:
d9:e4:70:35:76:8d:52:66:60:32:c2:68:cf:05:ac:13:68:f8:
72:21:2c:5a:01:58:b3:9b:ea:4a:1c:06:49:f4:39:9b:e5:c5:
48:24:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org