Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/cqk7F052M2-Kz-wTPxXDvmFSY3Q.roa
File: cqk7F052M2-Kz-wTPxXDvmFSY3Q.roa (raw, json)
Hash identifier: JnI2W5hEXPCwR4Udyu3gvaOX9w9vqvxfELu8CrWx7tc=
Subject key identifier: 72:A9:3B:17:4E:76:33:6F:8A:CF:EC:13:3F:15:C3:BE:61:52:63:74
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 01856C813F3F6FB8D375A95728CE9477940A
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/cqk7F052M2-Kz-wTPxXDvmFSY3Q.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198726
IP address blocks: 185.238.160.0/22 maxlen: 22
185.240.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 16 Jan 2023 19:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3f:3f:6f:b8:d3:75:a9:57:28:ce:94:77:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a93b174e76336f8acfec133f15c3be61526374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:ae:09:06:00:6d:db:f8:42:f9:b5:d4:9c:
e6:78:4c:3c:d7:33:3b:50:95:49:59:8c:a7:8f:29:
0e:d3:94:9d:b9:18:82:9d:0e:7d:3f:83:d8:96:43:
9a:ef:0d:8e:bc:ba:62:52:0e:16:61:e2:84:60:18:
d5:be:ba:cd:73:20:ee:bc:f1:0a:4d:c6:cd:7e:a8:
91:9e:01:43:36:ee:1a:84:91:15:db:c7:98:1b:42:
97:55:a8:7b:1b:9d:49:6d:fe:85:08:5a:13:98:a7:
65:27:de:82:b6:80:da:45:d8:0e:1f:f1:b6:94:b0:
12:27:4f:0d:39:2f:c9:b4:a9:70:70:05:10:fb:48:
28:2f:0f:86:31:45:93:2b:aa:77:c3:4e:9c:39:19:
78:ec:91:4c:58:9b:1c:b0:8d:9d:66:b3:db:ab:87:
8c:3b:e1:5f:5c:a9:0f:cf:4e:87:94:32:40:fa:09:
af:4a:11:fa:dc:eb:97:75:f9:e9:61:7f:78:a8:a3:
9f:39:8b:70:b3:7a:4d:0c:e6:6a:b1:45:ee:0e:7a:
f6:b1:ce:e0:a1:87:ff:0e:5e:6e:ac:b8:61:3a:b7:
a5:80:18:b5:0a:12:ae:38:ac:ec:a6:14:7e:e8:42:
62:76:f9:d1:e6:12:1c:aa:cd:65:9c:74:d5:5f:c7:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:3B:17:4E:76:33:6F:8A:CF:EC:13:3F:15:C3:BE:61:52:63:74
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/cqk7F052M2-Kz-wTPxXDvmFSY3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.160.0/22
185.240.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:f8:41:cc:4d:85:1b:cb:4d:61:51:2a:1d:5f:67:db:69:04:
6e:6d:f8:83:f6:da:7f:8d:b7:71:c9:d7:95:21:55:79:51:34:
60:07:9d:c7:23:45:06:44:7d:d9:88:21:3b:9f:79:cd:67:c8:
b7:99:13:39:8a:15:f1:da:8f:d1:c2:a0:43:eb:8f:ff:59:1f:
22:d5:80:e2:58:66:54:de:b4:95:68:fb:c5:4c:74:ac:5f:4c:
19:67:a1:72:b3:10:a5:85:16:a8:ba:8c:c0:ab:c8:46:1f:4d:
7b:eb:cd:ed:95:93:79:c7:c1:5b:8f:f7:5a:fa:98:83:78:2a:
5e:e7:b5:46:37:12:cb:4b:45:f0:c9:96:30:61:10:9d:49:c7:
42:57:f1:f4:42:c4:de:ec:eb:b1:05:f4:32:94:58:63:e2:50:
a8:43:ca:d4:66:09:b3:d7:00:5c:15:18:5a:8c:3f:98:d7:7c:
20:fd:51:1a:05:ae:bd:30:ba:ed:99:49:2b:91:87:16:33:24:
a1:92:48:a3:15:fa:5c:01:16:e8:67:55:7f:b6:b5:28:cc:30:
b1:72:e8:89:43:8a:3e:44:b9:02:4c:c0:99:41:eb:cf:75:16:
4f:d8:7b:92:86:8e:d0:ab:51:02:87:0a:c2:8a:f7:44:d5:e4:
e5:e8:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org