Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/PqTyNRtXOtTKSzBzGh41Yjfeels.roa
File: PqTyNRtXOtTKSzBzGh41Yjfeels.roa (raw, json)
Hash identifier: S2GE7YES9FYvUWOCO3y8OYVRPy8sgO1p3zaohN+Obeg=
Subject key identifier: 3E:A4:F2:35:1B:57:3A:D4:CA:4B:30:73:1A:1E:35:62:37:DE:7A:5B
Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial: 0189638647751D118AC90969EA67DB1A517C
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/PqTyNRtXOtTKSzBzGh41Yjfeels.roa
Signing time: Mon 17 Jul 2023 11:04:51 +0000
ROA not before: Mon 17 Jul 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197524
IP address blocks: 185.93.200.0/22 maxlen: 22
185.18.36.0/22 maxlen: 22
91.235.8.0/22 maxlen: 22
2a05:fa40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:86:47:75:1d:11:8a:c9:09:69:ea:67:db:1a:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Validity
Not Before: Jul 17 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ea4f2351b573ad4ca4b30731a1e356237de7a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:74:ea:d2:a2:9f:96:51:40:de:45:76:26:
79:cd:b9:44:f7:d4:d4:04:33:1e:12:f0:72:00:74:
3e:1a:8f:04:dd:11:56:c1:84:40:38:ae:02:e5:5a:
d0:32:1b:ad:ba:f7:69:67:26:bd:80:11:0a:76:3c:
7f:90:b2:b0:8d:97:76:2f:73:b9:f0:01:0f:a7:56:
a7:22:d5:a3:20:11:89:6f:08:29:3d:4e:1d:90:96:
e6:39:4e:bb:89:a5:9e:4d:39:6d:3b:ab:d7:d6:ca:
92:03:b8:93:6b:34:10:25:bd:1b:93:63:df:45:41:
77:5e:14:59:71:5d:3e:3e:51:6f:3c:0f:e6:9a:3f:
31:89:6f:39:0e:a8:29:bd:5c:3a:5a:c9:d4:86:ab:
9d:83:e7:da:c5:d7:0b:bb:cb:fa:58:a5:99:e8:24:
09:86:df:9b:e4:85:8b:0a:08:3f:b7:50:3d:b8:de:
1c:f6:97:6a:5d:af:cb:58:dc:23:cf:5f:06:8b:a9:
f7:aa:b6:63:c2:30:8e:4e:7d:c7:04:33:72:ca:e2:
68:d6:f6:1a:99:61:42:00:d4:b2:11:77:8d:91:80:
c1:a5:0a:13:2c:a1:1a:3d:48:53:46:49:63:47:f6:
68:be:27:c9:24:a1:88:c1:55:ec:a1:f6:36:be:ef:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:F2:35:1B:57:3A:D4:CA:4B:30:73:1A:1E:35:62:37:DE:7A:5B
X509v3 Authority Key Identifier:
keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/PqTyNRtXOtTKSzBzGh41Yjfeels.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.8.0/22
185.18.36.0/22
185.93.200.0/22
IPv6:
2a05:fa40::/29
Signature Algorithm: sha256WithRSAEncryption
a0:fb:b8:6b:e6:53:b8:cc:dd:2f:be:47:25:57:ae:6c:bb:e6:
43:fd:f9:99:aa:7d:19:d2:a1:23:b9:11:a6:0a:25:c8:41:98:
76:bb:2e:74:a9:e3:b7:07:23:b3:db:34:f3:63:8a:31:f9:d0:
51:68:81:0e:15:2b:35:ba:cd:78:f9:0e:51:5e:49:36:c3:97:
78:ea:5e:bf:e7:a5:e6:75:77:1a:55:6d:64:45:c6:0d:84:9a:
11:4d:57:eb:60:58:f1:13:ef:da:db:07:1b:2f:ab:ab:b5:71:
21:8e:6c:ba:88:0f:9f:9f:55:8f:b4:cb:4c:9b:cd:9d:0c:51:
de:bb:3a:37:b3:91:e4:c5:c3:f4:4e:5a:c9:bb:62:7b:f9:a2:
2a:30:b6:6c:52:78:90:dc:f0:ae:c9:3b:4a:40:68:7e:a4:1d:
31:18:8e:53:a7:9b:94:d2:3b:81:eb:14:65:d4:26:2b:b9:24:
b3:6e:45:14:1f:34:a1:76:68:84:5d:53:06:74:34:39:1d:02:
43:bf:36:de:2e:5a:b1:c9:75:f5:c4:d7:3f:76:94:10:53:87:
fb:84:34:66:7d:b2:c2:97:e9:9f:6c:6b:7d:f6:8b:fd:48:8f:
0b:9b:8a:d6:ed:92:3f:77:dc:6f:28:c6:57:ce:ec:66:15:71:
63:1d:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:19 2024 by rpki-client on console-ams.rpki-client.org