Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QyWWNgK5HLuFk8q2YvQCMzZJKbA.roa
File: QyWWNgK5HLuFk8q2YvQCMzZJKbA.roa (raw, json)
Hash identifier: oT+gIlvmqdVoExVzcQZALXJwnyE3MHKAsH+royZbwXo=
Subject key identifier: 43:25:96:36:02:B9:1C:BB:85:93:CA:B6:62:F4:02:33:36:49:29:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD10C6E75F84F6BEF64D7962E11458
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QyWWNgK5HLuFk8q2YvQCMzZJKbA.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215987
IP address blocks: 185.254.37.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:10:c6:e7:5f:84:f6:be:f6:4d:79:62:e1:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4325963602b91cbb8593cab662f40233364929b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:a6:cd:a3:77:d5:a5:fd:49:9a:6f:4b:82:
ac:26:1a:30:80:b4:7a:fa:60:05:6e:ed:24:57:fd:
2e:00:40:76:ad:84:6a:8b:00:3e:cb:85:10:25:26:
9b:b6:8a:28:2b:e9:a3:73:73:e7:6e:2f:0f:91:33:
e0:24:8f:bf:6f:76:b7:c6:d7:ad:05:83:78:03:c1:
33:cc:69:af:ac:f3:35:e2:f6:9e:6a:32:93:49:94:
bd:68:0e:44:a5:4e:93:2c:c4:d3:b6:f0:58:13:67:
6f:92:00:ef:20:2b:3a:f1:7b:ce:dc:a1:3c:e9:b3:
da:3f:c4:08:a6:b9:da:02:59:54:d3:72:8c:9c:3a:
fa:82:bd:a1:3c:33:6c:67:12:58:06:66:5e:83:91:
d2:5f:3f:8b:e9:b1:ef:45:6c:4c:1c:de:5f:59:f8:
4d:3c:b0:c9:6d:13:3c:25:eb:fe:f7:c0:c8:1b:3d:
03:63:2d:c7:90:83:f4:6a:46:cf:87:e9:4f:26:68:
ee:70:12:88:4d:7c:cb:d0:de:89:a6:95:e9:ad:54:
a3:79:af:0c:1d:07:38:33:0b:12:1d:bf:9a:63:9e:
36:2b:61:d4:b0:ad:81:dc:e9:46:f8:50:f8:7d:55:
0d:a1:21:7b:34:ec:59:f0:9c:97:69:87:b8:57:ba:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:96:36:02:B9:1C:BB:85:93:CA:B6:62:F4:02:33:36:49:29:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QyWWNgK5HLuFk8q2YvQCMzZJKbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
178.215.226.0/24
185.254.37.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f5:66:6c:ce:94:66:9d:f8:dd:0b:ec:d3:71:d3:ad:f4:83:
64:65:7b:f6:bd:85:d3:24:52:09:8f:f2:74:4c:a7:8b:57:b7:
22:18:1c:81:cb:d4:90:ec:79:d8:53:4e:89:cb:a4:c4:95:da:
8b:12:32:e4:2b:fe:d1:25:38:10:c2:ca:c0:6f:1c:26:5f:3a:
0c:33:d8:64:7d:ac:62:c8:cd:16:09:37:ea:0c:d7:26:94:48:
9b:a7:26:b7:15:4b:f4:73:46:aa:c2:85:e0:27:e9:48:ca:7c:
5f:9b:ae:5b:87:3d:89:7d:29:12:e5:b0:8d:26:d3:29:97:dc:
11:ea:b9:8c:37:66:0d:84:fd:ce:29:e9:7f:9c:90:ea:8e:ae:
a5:4e:a8:7b:d6:15:ad:98:0b:6e:07:08:0d:04:47:46:cb:78:
c1:71:26:3d:01:d0:56:7a:3f:94:41:3d:d1:a2:a5:d8:eb:02:
a9:87:13:50:8a:95:c3:d5:b4:52:c7:d9:83:cf:12:cd:89:30:
84:23:09:39:75:62:f4:47:4f:71:c5:2d:17:9f:de:b2:31:76:
b7:f2:21:09:dd:0e:a4:1f:57:15:73:55:49:cc:04:27:5a:f1:
66:e7:10:da:d0:02:a9:02:a3:28:ba:02:50:b8:6e:39:2a:aa:
7a:7d:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 17:51:36 2024 by rpki-client on console-ams.rpki-client.org