Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/qUayhuTh0wLxCTFLJn6d18hFp7c.roa
File: qUayhuTh0wLxCTFLJn6d18hFp7c.roa (raw, json)
Hash identifier: /ho9I3ya4/wypbQYr2g2HClcJilY0J0kO2z4U/kwkGs=
Subject key identifier: A9:46:B2:86:E4:E1:D3:02:F1:09:31:4B:26:7E:9D:D7:C8:45:A7:B7
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 018AAD73500C0E7EF3CA325859A29C15AECB
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/qUayhuTh0wLxCTFLJn6d18hFp7c.roa
Signing time: Tue 19 Sep 2023 12:38:50 +0000
ROA not before: Tue 19 Sep 2023 12:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.99.236.0/24 maxlen: 24
185.99.237.0/24 maxlen: 24
185.99.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:73:50:0c:0e:7e:f3:ca:32:58:59:a2:9c:15:ae:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Sep 19 12:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a946b286e4e1d302f109314b267e9dd7c845a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:4d:6d:2f:69:8c:88:42:65:aa:b5:e8:66:
e6:40:cf:2f:71:18:17:7c:3a:fd:ec:50:67:4c:19:
37:37:b3:cb:ce:10:57:e8:9a:62:06:79:0f:3b:02:
b1:77:93:f9:8d:fc:aa:18:d7:23:41:77:82:97:80:
1e:c0:d8:2d:21:f6:a4:0a:a4:34:38:7c:1c:8a:bb:
4c:5d:8b:27:23:19:ca:54:a2:3b:55:c0:25:94:1b:
83:59:25:f3:8f:a6:7c:ee:85:fd:a7:12:7b:f6:01:
80:87:77:c3:4e:c2:02:20:e4:33:c2:73:c7:6d:44:
d6:18:56:a5:98:01:49:93:a3:2c:94:34:7b:68:d0:
34:60:94:2f:3d:d7:5a:42:53:bb:ec:0b:82:79:e8:
07:a5:5a:cb:bf:ae:8e:a3:5e:c5:77:34:e2:b6:05:
f2:e2:86:22:8e:c6:f5:a3:3a:b3:4d:a5:51:5c:f9:
25:43:ab:05:a4:5e:0a:0c:da:9f:21:6b:4f:0b:5f:
3e:55:22:fc:a8:ee:4b:ea:fe:11:3a:23:62:16:5c:
1d:b4:64:98:24:33:6b:48:f2:19:10:59:9a:5e:cf:
31:68:f3:a1:6b:87:30:92:f1:ed:f8:2e:a4:a9:be:
c3:8b:a9:63:e4:be:01:da:f0:ac:a6:b3:03:fb:1d:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:B2:86:E4:E1:D3:02:F1:09:31:4B:26:7E:9D:D7:C8:45:A7:B7
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/qUayhuTh0wLxCTFLJn6d18hFp7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.236.0-185.99.238.255
Signature Algorithm: sha256WithRSAEncryption
68:24:ea:40:a7:ef:bf:bc:16:26:d5:cb:c9:0d:e0:e9:ed:83:
9a:6d:42:c2:50:b3:ce:00:98:de:41:1e:d9:e4:e1:27:51:e7:
8d:91:69:fd:02:42:1b:62:e8:1e:51:66:a6:b2:20:44:8a:ef:
63:d7:a3:cc:a6:11:19:9a:40:c7:e2:10:1d:f5:3f:30:fe:cc:
20:67:62:3e:90:c1:3d:3b:8e:79:b9:72:a2:0b:a2:f3:fd:7a:
54:4e:c2:9e:a4:3e:1b:33:e0:69:20:29:da:0f:e9:f6:55:60:
dc:78:01:60:eb:47:36:e8:76:65:97:56:62:69:0d:63:24:9a:
59:93:1d:b9:f6:66:cc:31:72:70:c1:6f:15:3b:8b:3a:13:84:
e0:ff:b6:fd:0a:51:09:3c:b0:73:ae:7e:36:fd:5e:c3:6d:2f:
1d:63:46:44:cb:4c:98:e7:2e:0f:68:1a:8c:8e:69:a5:4a:83:
98:56:0b:98:b4:39:05:26:1c:11:b0:ce:b5:23:69:10:61:5c:
86:74:17:79:a4:84:5f:fb:4a:b1:b1:8d:bd:6a:16:ce:5f:a0:
2f:a3:4c:e9:a1:b1:a1:59:d9:10:c0:fb:da:96:b9:0c:ad:e4:
cb:27:af:38:6e:18:a3:f5:66:a2:15:ee:96:4c:17:5d:04:2e:
d6:b6:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org