Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/QbfhCF8oG10yQ7T2NeJ0r1vQVwY.roa
File: QbfhCF8oG10yQ7T2NeJ0r1vQVwY.roa (raw, json)
Hash identifier: 0dn72G3pqstysCPtanwKsAWPcVEwGvK5cdKXtbEaJXk=
Subject key identifier: 41:B7:E1:08:5F:28:1B:5D:32:43:B4:F6:35:E2:74:AF:5B:D0:57:06
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01857227E7F46C3A770B324DDA67461CE779
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/QbfhCF8oG10yQ7T2NeJ0r1vQVwY.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209324
IP address blocks: 185.107.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e7:f4:6c:3a:77:0b:32:4d:da:67:46:1c:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b7e1085f281b5d3243b4f635e274af5bd05706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:77:9c:8b:c3:13:4e:d2:04:61:43:83:f9:
ba:91:24:6b:ce:94:e5:b1:25:da:e6:eb:0c:85:b7:
9b:fb:e1:5b:3b:e2:7b:aa:c2:e4:00:5e:cb:28:31:
c4:73:df:25:37:cb:b3:e2:59:30:fd:eb:b2:f3:00:
61:f4:9b:28:b8:26:ca:ea:15:1b:bb:61:e6:4b:16:
06:f6:b3:22:a8:61:73:71:68:94:67:96:24:ca:01:
2e:b0:55:ca:60:c0:61:da:c6:09:66:b0:bc:38:d8:
25:a2:71:61:64:3c:08:5e:f4:84:48:11:52:71:88:
9a:91:0e:b6:fa:8c:86:8f:b4:92:59:a4:b6:d4:a2:
c4:ab:6f:bd:af:e4:b0:e8:e0:75:63:b9:e6:06:7c:
2f:de:0f:bc:3f:ce:ea:d3:20:65:be:4c:ce:a1:44:
c4:03:bd:21:04:10:a2:59:1f:52:b3:d1:76:31:82:
a7:7f:98:40:70:d7:65:7f:3c:99:ba:11:86:3a:9a:
13:97:b7:a3:94:02:db:22:0d:ff:28:f3:8f:1c:80:
12:bc:2f:aa:98:e3:68:02:f5:cc:ef:ce:75:3e:be:
02:0a:32:54:54:40:98:5a:d1:26:4b:24:a8:45:6b:
62:26:76:1c:ce:13:8b:df:c4:4a:f1:e6:85:c2:ca:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:E1:08:5F:28:1B:5D:32:43:B4:F6:35:E2:74:AF:5B:D0:57:06
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/QbfhCF8oG10yQ7T2NeJ0r1vQVwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.199.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0b:87:31:cc:ae:45:7f:47:ae:a7:24:09:54:e7:69:00:b9:
d6:5e:68:43:bb:29:42:e0:6b:0e:2a:6f:f9:75:30:81:c5:59:
16:6f:27:9d:9b:ae:8a:f6:97:d4:f1:da:0e:16:4c:53:5f:a5:
1c:1e:91:cb:42:af:78:f4:d4:2f:e4:a1:93:ce:ca:66:8f:85:
30:38:fc:26:8b:21:d6:c4:f0:10:0c:4d:07:8c:8c:40:7f:65:
99:bc:ce:91:ce:32:72:d7:34:66:9f:ab:d5:c7:7f:33:e4:bb:
79:52:5d:c3:3e:a3:06:4c:38:93:43:ce:07:e6:8d:4d:25:49:
fd:b8:19:b3:67:ff:51:9d:be:88:6d:4c:7c:e5:54:08:08:ba:
55:6a:20:90:bf:2b:09:47:94:fa:33:ae:97:53:8c:49:eb:da:
f5:80:7d:32:6b:e8:02:40:01:f0:47:19:b6:0e:b5:ee:ec:83:
56:b7:4e:2e:1a:ba:36:0b:f1:10:52:8c:90:a0:63:bf:c8:31:
69:7b:63:f4:26:87:da:11:4b:8e:dc:d1:83:47:f7:a5:04:71:
cf:e9:3d:ec:66:8a:a3:e6:dc:35:67:c5:48:bb:2c:77:39:aa:
bb:fa:ba:bc:b4:35:05:1d:5b:a4:6c:5f:f1:6b:54:c8:be:a0:
3b:d3:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:42 2024 by rpki-client on console-fra.rpki-client.org