Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/qiL5Id-VdhPpnzKMOTIopYbsDd8.roa
File: qiL5Id-VdhPpnzKMOTIopYbsDd8.roa (raw, json)
Hash identifier: h4kQNq8uxkkRIZqtWLAVq43dmIjANES/Sjg3H0xyebk=
Subject key identifier: AA:22:F9:21:DF:95:76:13:E9:9F:32:8C:39:32:28:A5:86:EC:0D:DF
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 01856CB859A8AD07E3FB125DA688372AFE6C
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/qiL5Id-VdhPpnzKMOTIopYbsDd8.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203041
IP address blocks: 185.147.2.0/24 maxlen: 24
185.147.3.0/24 maxlen: 24
185.147.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:59:a8:ad:07:e3:fb:12:5d:a6:88:37:2a:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa22f921df957613e99f328c393228a586ec0ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:4a:a0:ce:f0:ef:44:44:5b:ed:7c:7a:6d:
cb:ad:fb:66:c9:29:dc:17:f5:2f:71:e5:b9:ab:3a:
ad:76:17:ff:7d:88:bc:a2:71:22:67:c7:d0:88:34:
62:21:9b:b0:22:dd:48:45:46:07:cf:1d:ba:72:b7:
ee:f6:13:79:59:35:34:51:9a:76:75:72:e1:9d:e5:
26:c3:55:c7:2c:46:66:4f:d4:dc:69:87:19:f9:e4:
f3:67:1f:a1:26:6b:62:1e:50:92:94:73:1b:a2:cb:
b4:db:ea:b1:61:e8:dc:fb:40:b2:f7:41:45:04:7e:
49:79:bc:93:4f:3b:5e:3e:cb:b5:4a:f3:1f:70:e0:
ae:bc:e8:9e:bf:95:b7:1f:ce:97:66:3e:76:fc:0a:
82:96:91:dc:27:e6:ac:1c:b6:9d:3f:97:81:f2:57:
a5:ec:5d:eb:e6:d4:2e:7b:11:25:cf:76:8f:09:27:
07:4b:27:cb:73:47:3a:d8:3f:f3:6b:f1:75:6e:29:
4e:6e:a6:44:6d:3d:0a:b3:25:b2:f4:3b:38:2b:e0:
6d:71:b9:40:57:34:45:20:58:52:0a:09:f0:3f:35:
2e:0f:f6:41:6d:94:1d:4f:fc:69:89:a4:cb:fc:fc:
6d:da:73:4b:80:9a:44:1d:c2:94:89:05:ed:fa:23:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:F9:21:DF:95:76:13:E9:9F:32:8C:39:32:28:A5:86:EC:0D:DF
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/qiL5Id-VdhPpnzKMOTIopYbsDd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.1.0-185.147.3.255
Signature Algorithm: sha256WithRSAEncryption
8d:be:9e:64:e4:c2:2e:9c:e8:0a:ba:ae:e8:6b:bf:d8:61:c3:
5e:a8:8f:d2:3f:12:23:ce:43:2d:5e:69:b6:be:ae:fd:7d:62:
31:13:21:dd:4d:25:f2:0b:20:b4:ed:d0:45:66:67:07:97:85:
6b:5c:c4:61:a3:ca:92:eb:13:4e:d6:c2:5c:70:ef:3a:88:1d:
0c:c3:4a:b8:a2:b6:5c:3c:b9:68:c0:ea:67:a8:4b:ea:b4:a1:
3a:37:0f:af:0f:3a:78:9a:0d:7c:31:ed:97:12:1c:ce:a7:ab:
e6:f2:16:e4:32:c1:2c:69:22:3a:ec:dd:20:19:09:b1:61:61:
1b:f6:91:47:ad:4e:39:0c:69:00:e3:4d:86:40:02:a6:b2:4b:
d5:5c:2f:4c:05:49:ac:2a:3a:29:5e:e3:36:37:0a:97:f7:b6:
51:88:5a:44:d2:e0:61:bb:c7:5a:b9:22:5f:46:bf:04:59:3a:
78:83:03:fa:9a:d1:e9:b8:c0:a2:e2:b3:64:93:86:eb:8b:71:
79:19:ce:43:93:46:59:4a:0a:49:40:aa:5d:f9:52:e7:ea:3d:
79:20:8a:40:61:12:c2:a9:04:d6:fd:0a:e3:b4:d2:a6:53:7f:
e9:17:8e:8b:0e:02:b2:5a:c9:13:dd:2d:5c:9e:5b:61:ec:c7:
d8:20:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:16 2024 by rpki-client on console-ams.rpki-client.org