Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/Q5BLDqwXhsB5XvUlKvg886rBpkM.roa
File: Q5BLDqwXhsB5XvUlKvg886rBpkM.roa (raw, json)
Hash identifier: wW+DHz+7oXH5hZS3kxOEBom14t2Rtvu+J2l/KkxXeNY=
Subject key identifier: 43:90:4B:0E:AC:17:86:C0:79:5E:F5:25:2A:F8:3C:F3:AA:C1:A6:43
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 018B6B4E4F28E2D63447B257F3D2A6D77C70
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/Q5BLDqwXhsB5XvUlKvg886rBpkM.roa
Signing time: Thu 26 Oct 2023 09:26:16 +0000
ROA not before: Thu 26 Oct 2023 09:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61266
IP address blocks: 185.10.244.0/22 maxlen: 22
2a03:6947:1700::/40 maxlen: 40
2a03:6947:1200::/40 maxlen: 40
2a03:6947:1b00::/40 maxlen: 40
2a03:6947:1300::/40 maxlen: 40
2a03:6947:a00::/40 maxlen: 40
2a03:6947:1d00::/40 maxlen: 40
2a03:6947:900::/40 maxlen: 40
2a03:6947:400::/40 maxlen: 40
2a03:6947:300::/40 maxlen: 40
2a03:6947:1100::/40 maxlen: 40
2a03:6947:500::/40 maxlen: 40
2a03:6947:1900::/40 maxlen: 40
2a03:6947:f00::/40 maxlen: 40
2a03:6940::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:4e:4f:28:e2:d6:34:47:b2:57:f3:d2:a6:d7:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Oct 26 09:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43904b0eac1786c0795ef5252af83cf3aac1a643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:f1:f0:7f:0a:88:99:85:0b:d0:30:26:66:
19:6e:48:0b:aa:ab:1f:ba:dc:51:f2:aa:72:6c:3b:
b6:8d:b3:fb:82:53:44:50:7e:f3:2a:8d:6f:49:90:
6f:2b:bc:58:aa:89:c8:9a:e9:f9:47:68:6a:fc:b7:
a2:27:11:7c:66:f4:e6:8a:d9:2e:32:2e:3f:f6:cc:
ed:e6:af:31:d1:bd:b3:cd:2a:2f:df:7b:be:05:96:
e2:0d:d7:7c:75:90:33:22:e6:f4:ad:1c:08:7e:17:
14:d3:30:3f:46:80:a5:10:35:58:ac:b1:3e:c8:5d:
02:95:40:c9:07:b1:ad:d2:f3:61:b2:c0:cc:1f:83:
7f:63:49:fe:2e:15:ae:8d:83:94:9f:0b:89:85:d7:
35:8a:f2:f9:a9:e7:9f:0f:6d:b4:d3:7a:09:b9:2d:
01:4a:30:3f:7e:db:92:28:dd:34:1d:6a:33:f2:64:
78:f6:67:c9:88:43:05:8f:44:3b:b7:94:71:23:76:
7c:4e:2f:a0:2b:a3:6a:7a:07:cd:eb:d9:4f:5b:4b:
57:bd:89:5e:e6:a3:a3:14:2a:85:8e:c4:01:91:b6:
53:6b:df:17:75:af:66:96:b5:ed:df:22:1d:67:9f:
eb:72:19:c1:5e:47:5e:34:ea:5d:26:09:61:23:b4:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:90:4B:0E:AC:17:86:C0:79:5E:F5:25:2A:F8:3C:F3:AA:C1:A6:43
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/Q5BLDqwXhsB5XvUlKvg886rBpkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.244.0/22
IPv6:
2a03:6940::/32
2a03:6947:300::-2a03:6947:5ff:ffff:ffff:ffff:ffff:ffff
2a03:6947:900::-2a03:6947:aff:ffff:ffff:ffff:ffff:ffff
2a03:6947:f00::/40
2a03:6947:1100::-2a03:6947:13ff:ffff:ffff:ffff:ffff:ffff
2a03:6947:1700::/40
2a03:6947:1900::/40
2a03:6947:1b00::/40
2a03:6947:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
01:25:46:06:a2:65:c0:ed:24:50:06:90:b3:38:d6:b9:1b:82:
9c:74:5e:82:ec:9a:02:02:57:56:fb:d9:05:9d:e7:93:93:fa:
a5:75:fe:6b:fd:0c:36:67:6a:ce:3b:5b:a8:e1:39:f4:51:9f:
69:ce:b3:d0:97:5c:fb:72:c4:41:28:2c:62:ac:17:39:cb:5d:
91:53:f3:68:d7:70:bb:9c:da:7d:e9:7f:dc:a2:df:b4:d2:cc:
14:c9:ff:8c:f2:bf:45:4d:72:bc:f9:70:f3:c9:26:e3:6d:30:
7d:95:31:f4:de:3b:b4:1e:3e:2b:3e:b4:2a:32:17:e9:8a:d3:
c1:c2:8b:4f:23:97:17:1c:c1:5f:49:2b:46:fd:72:e9:74:7b:
5e:06:cd:4c:c7:8a:10:89:9b:45:a8:43:1b:c4:56:07:8d:5a:
c1:36:cc:4d:aa:90:ad:1e:2a:b3:c2:99:18:b1:d4:66:74:94:
80:84:f1:25:3b:35:a5:d8:94:e8:0c:8b:72:60:31:da:6f:a9:
f2:db:d0:84:66:52:d6:a7:f2:c5:f4:54:2d:a2:dc:7c:0d:08:
62:23:5a:4e:8d:d0:43:06:c0:57:0c:4c:b1:98:80:6b:95:29:
c8:ac:e1:22:81:ed:5d:93:5e:49:70:9c:c3:eb:2d:43:2e:2c:
b0:1c:43:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:51 2024 by rpki-client on console-fra.rpki-client.org