Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QBajIPRxMsDy-iwdNobOrMu6HFs.roa
File: QBajIPRxMsDy-iwdNobOrMu6HFs.roa (raw, json)
Hash identifier: W5rei8l2IYAXfNy2PIbf+Wv5B/TGssMTocp5jwcXoaQ=
Subject key identifier: 40:16:A3:20:F4:71:32:C0:F2:FA:2C:1D:36:86:CE:AC:CB:BA:1C:5B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D7D77BE85127CE4534131E16326786898
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QBajIPRxMsDy-iwdNobOrMu6HFs.roa
Signing time: Tue 06 Feb 2024 08:10:16 +0000
ROA not before: Tue 06 Feb 2024 08:10:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 95.214.27.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 16:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:77:be:85:12:7c:e4:53:41:31:e1:63:26:78:68:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 08:10:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4016a320f47132c0f2fa2c1d3686ceaccbba1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:17:d6:a9:a2:2f:3a:18:5f:d5:6d:8a:ea:
7f:97:aa:3d:fe:c4:39:c6:92:b4:fe:4e:12:bd:a9:
57:15:cc:e7:1e:35:87:1c:62:fa:05:c5:de:06:09:
ff:c5:69:28:bb:63:ee:20:99:a1:30:44:58:d8:1d:
e7:1d:76:19:24:d8:c8:f5:90:ea:23:27:54:03:ec:
dc:43:78:db:63:06:01:c3:b8:c0:7a:e8:fb:8e:e4:
f0:00:56:7a:42:15:69:04:fb:68:a8:72:0a:3e:a7:
2b:ae:f2:b7:aa:10:cc:2d:3a:55:e3:31:4f:5e:3b:
45:7e:4a:34:50:77:32:ab:40:d0:e3:74:6d:4e:18:
4d:22:f2:31:89:be:96:b3:c3:fc:94:e0:7c:16:e0:
5a:6b:7d:37:c5:a6:e2:5e:3e:c5:f7:f5:7a:86:5a:
7c:b3:c6:49:e2:9c:0c:9d:42:ae:55:05:c3:28:d2:
92:6c:83:11:a0:ec:b1:60:e7:0c:c9:7d:c8:5d:a5:
48:a1:61:c5:b5:5c:2d:59:06:9f:9a:2f:36:ef:fd:
6a:60:38:11:0c:99:76:50:6c:54:f4:37:2e:17:d8:
83:ad:a8:70:d3:56:02:83:68:9a:ba:15:a2:c0:d6:
3b:5b:9f:ac:50:17:8f:1a:26:70:2b:69:e1:e0:44:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:A3:20:F4:71:32:C0:F2:FA:2C:1D:36:86:CE:AC:CB:BA:1C:5B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QBajIPRxMsDy-iwdNobOrMu6HFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.27.0/24
141.98.7.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:cd:e8:3b:e0:2f:74:60:c1:02:f4:e4:25:04:78:34:6c:
d6:a7:d3:8d:2f:78:49:de:b6:44:f9:91:87:ae:d4:c6:82:8e:
05:51:a0:6a:7d:58:1a:7c:bc:08:f7:be:0c:3b:13:89:c8:50:
c1:78:25:23:81:40:8f:cc:b2:b2:c5:3b:5f:91:d0:bc:c3:c2:
f9:db:e6:ce:0b:2b:d6:8b:bd:a1:27:85:8f:60:78:04:d2:3f:
12:83:42:b6:6d:e4:22:a8:7a:ba:37:f7:04:7d:60:13:12:da:
c7:36:4b:23:c2:eb:ee:ef:f0:2c:59:8a:8b:15:40:35:d5:33:
af:cd:54:4e:e2:6a:6a:99:83:1e:a3:af:af:5d:3e:b0:8e:d3:
15:ff:26:d7:c4:9a:99:77:4d:7f:fa:13:15:29:6d:a7:39:1b:
64:07:e9:23:c9:91:ae:d9:5a:94:e8:f7:db:1c:73:1e:d0:35:
3b:3e:97:40:88:3f:c4:46:3e:2c:52:c4:ca:b3:35:a4:ba:cc:
90:3d:41:08:8c:da:4d:86:26:2f:f6:97:b3:7c:14:cc:5e:4c:
11:5d:b2:c1:e2:95:90:3e:9e:29:c5:2d:7f:96:9f:13:0c:56:
cb:1f:38:f1:84:b7:92:57:d6:23:79:44:c2:1b:6c:28:14:a6:
d7:7c:6a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:50:30 2024 by rpki-client on console-ams.rpki-client.org