Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/q1ENCYS4LMio3ZfjG7LcZIeu01k.roa
File: q1ENCYS4LMio3ZfjG7LcZIeu01k.roa (raw, json)
Hash identifier: 3WwrnBIu7qId/dijaUbnaNAB9RuezLTpjNuxfHhbEMI=
Subject key identifier: AB:51:0D:09:84:B8:2C:C8:A8:DD:97:E3:1B:B2:DC:64:87:AE:D3:59
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 01922D38C75EBC88B4EDBA7B738CF6FCF6A9
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/q1ENCYS4LMio3ZfjG7LcZIeu01k.roa
Signing time: Thu 26 Sep 2024 07:25:48 +0000
ROA not before: Thu 26 Sep 2024 07:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202075
IP address blocks: 185.50.172.0/22 maxlen: 22
185.50.172.0/23 maxlen: 23
185.50.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 03 Oct 2024 14:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:38:c7:5e:bc:88:b4:ed:ba:7b:73:8c:f6:fc:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Sep 26 07:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab510d0984b82cc8a8dd97e31bb2dc6487aed359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:74:6a:2d:9f:41:74:16:ef:0d:68:d8:68:
f9:84:40:c9:8b:f4:0b:89:ca:df:19:ba:57:94:11:
cc:52:5b:cb:d7:39:45:ce:bb:6c:39:55:08:a8:24:
c4:77:26:ac:53:7d:30:37:67:df:b1:06:af:75:9b:
8c:2f:4b:5a:9b:57:1e:e8:f8:a4:f3:d9:f6:8d:52:
99:63:c5:c6:7a:61:88:cf:d5:46:7f:1e:35:71:2f:
a1:45:43:43:f8:36:8c:aa:1b:5a:8c:98:0e:77:21:
42:a6:33:2d:59:36:f9:db:df:e4:05:4f:31:a4:c8:
80:fc:93:82:cd:e9:46:15:af:53:ff:5f:aa:e7:be:
74:86:f0:9d:6f:ab:c7:bf:a4:17:a4:fc:a2:f3:d6:
c0:99:9d:12:87:6b:ab:eb:08:25:30:1b:8c:03:50:
ca:25:b0:45:fb:0c:c6:c9:a6:04:bb:99:03:79:ea:
0e:35:c9:5a:98:ce:0d:c6:ee:c0:1f:e9:71:01:d0:
4c:cc:96:88:e2:3b:09:18:e9:2d:56:f0:8d:46:6f:
50:37:89:2b:81:9a:60:0a:c5:d1:1b:13:2e:b4:31:
c5:99:bd:76:48:21:a2:d8:77:2c:71:76:f8:3c:fa:
54:e7:c3:2e:a6:cf:e7:a9:78:cf:39:4b:73:f7:30:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:0D:09:84:B8:2C:C8:A8:DD:97:E3:1B:B2:DC:64:87:AE:D3:59
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/q1ENCYS4LMio3ZfjG7LcZIeu01k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.172.0/22
Signature Algorithm: sha256WithRSAEncryption
74:d3:ac:7e:86:dc:af:84:a8:00:71:30:db:6c:d5:4d:e8:63:
87:d3:7b:49:63:78:2f:ad:d0:c1:ef:d4:88:21:84:c7:3c:3c:
eb:be:7b:fe:19:30:bc:6e:0d:9d:96:5e:23:a2:c0:3d:af:43:
1c:ce:57:42:ae:95:1c:fa:8e:2e:04:94:85:d1:90:15:3f:8e:
c4:66:e6:f8:3e:d6:e6:17:81:69:97:e5:16:c4:4e:89:21:65:
61:77:fd:7e:77:b0:dc:48:9f:1e:76:56:8d:4e:9a:5e:bc:32:
54:f9:52:ff:4d:2d:5e:23:bb:ed:a7:3c:a7:e8:d7:4a:ec:4b:
fd:9c:28:e1:97:b8:3b:74:52:b9:00:ce:57:70:18:0a:1e:b4:
89:7d:ca:f8:bf:67:c6:0d:58:9a:59:e5:dc:f5:4b:6d:d2:7a:
d9:9a:e5:d8:2d:17:65:f7:11:23:14:2b:0d:53:59:19:24:e8:
29:f3:4e:b7:5a:2d:8a:7d:76:fc:4f:91:9c:6f:d1:d1:1b:29:
7c:46:51:33:99:9c:3f:3e:5c:a7:14:1f:92:83:9f:0e:e5:7c:
28:b9:03:21:73:ff:32:6b:b5:41:d0:77:1f:11:78:2d:77:b7:
e0:f9:a4:c3:e3:68:e5:38:21:97:9e:87:25:b0:6a:38:90:96:
bf:e8:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:45:39 2024 by rpki-client on console-ams.rpki-client.org