Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/QG0Xm6hzqQW83oWXOYUSyID89ak.roa
File: QG0Xm6hzqQW83oWXOYUSyID89ak.roa (raw, json)
Hash identifier: OqKjHvaraJqmT4fRjzqpITTNn16mYNSriy5JRpI/vuk=
Subject key identifier: 40:6D:17:9B:A8:73:A9:05:BC:DE:85:97:39:85:12:C8:80:FC:F5:A9
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01856CB86BE3ECAB43981E342B71747767FE
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/QG0Xm6hzqQW83oWXOYUSyID89ak.roa
Signing time: Sun 01 Jan 2023 09:45:03 +0000
ROA not before: Sun 01 Jan 2023 09:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 185.253.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:6b:e3:ec:ab:43:98:1e:34:2b:71:74:77:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jan 1 09:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=406d179ba873a905bcde8597398512c880fcf5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:43:03:50:67:94:ef:bc:8f:46:7f:ea:cf:
e0:e4:31:58:6e:df:b7:0f:54:8a:94:46:e5:b8:61:
7d:e7:5a:7b:c0:72:51:7c:bb:97:8f:c9:84:e7:be:
bf:f8:e1:a9:c3:88:25:f5:d8:21:ef:1b:8a:bc:c5:
75:11:48:89:f6:ed:74:5e:dc:8e:a9:83:2f:37:9c:
9a:d6:ad:c5:3e:9a:e7:47:ff:7a:53:06:0a:58:62:
99:ce:bc:92:6f:f8:7a:87:27:86:7f:58:df:a2:fb:
09:20:68:2d:a0:26:03:f5:65:7f:8a:a4:43:e4:dd:
c2:94:7d:a2:f1:fe:f3:cd:aa:91:6f:f9:7f:ae:6a:
81:f1:14:56:03:a9:3c:b4:e3:47:40:b9:23:ff:f3:
d7:35:6e:94:89:43:fe:19:70:7f:de:e6:e9:b6:ed:
1c:0f:30:89:6e:0b:68:d1:5b:d7:d6:0e:b8:58:50:
f5:0d:f9:77:1a:67:59:20:9b:b1:91:6a:c3:2d:83:
47:54:15:69:0a:2a:5d:2d:68:f4:58:16:0a:07:e1:
32:fc:13:1a:6c:76:a2:5f:9c:c8:64:b2:f2:3d:2f:
46:70:85:66:c9:8b:a2:17:ed:7b:10:d0:25:29:ba:
07:b1:2d:a7:f6:94:5b:62:de:d9:7e:40:e8:a0:b4:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6D:17:9B:A8:73:A9:05:BC:DE:85:97:39:85:12:C8:80:FC:F5:A9
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/QG0Xm6hzqQW83oWXOYUSyID89ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.108.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6d:b7:95:23:88:7c:10:7f:0d:d5:b2:9c:ed:2b:5a:91:71:
58:2f:76:76:ff:8e:74:a0:45:ea:c3:3f:0f:1b:ba:ae:9e:06:
63:4d:5e:b5:80:77:19:d7:c5:9d:b2:43:4e:61:37:2b:e2:ca:
72:0a:f6:00:2e:34:4c:c0:1e:3d:29:50:4c:39:85:4f:d2:73:
f1:b2:02:10:f0:44:5b:f1:df:73:7a:72:87:32:89:c3:49:74:
e2:c2:31:13:1f:9e:bd:2d:6f:43:43:b4:e7:a7:44:05:b8:51:
58:4a:e0:04:88:fa:30:88:5b:98:0c:ab:70:44:51:e1:70:d0:
22:b5:1a:d3:f8:5e:41:5e:69:45:df:3f:f6:67:7d:1b:0b:95:
d7:47:c1:6b:df:ec:40:27:2e:be:c6:d4:39:e1:b7:d3:08:37:
24:11:24:e6:29:05:a9:3b:ae:12:d8:a0:73:a4:8c:b5:cc:27:
68:37:ee:5c:8b:22:95:d3:9e:24:8a:74:22:3e:4d:a8:5d:56:
bf:6b:91:cf:7d:88:5a:fd:41:8d:6b:f3:81:d3:88:70:59:cc:
ec:2c:de:ed:9d:98:15:dd:e5:27:af:38:18:44:dd:26:3a:10:
d0:85:ca:04:0f:30:05:c8:5b:51:14:91:87:82:e5:8b:ad:1c:
05:1c:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:22 2024 by rpki-client on console-fra.rpki-client.org