Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/QoRJ2WYkHaEo8VhSPRJjgntvD9Y.roa
File: QoRJ2WYkHaEo8VhSPRJjgntvD9Y.roa (raw, json)
Hash identifier: k1DKb1wiklToYWDPif8mZB8BIwshXFMtrIMKcZSE+gY=
Subject key identifier: 42:84:49:D9:66:24:1D:A1:28:F1:58:52:3D:12:63:82:7B:6F:0F:D6
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 018727F7615D1E5C9FD8C737A9EEAD9AA0D4
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/QoRJ2WYkHaEo8VhSPRJjgntvD9Y.roa
Signing time: Tue 28 Mar 2023 11:25:36 +0000
ROA not before: Tue 28 Mar 2023 11:25:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.186.213.0/24 maxlen: 24
185.186.212.0/24 maxlen: 24
2a0b:8780::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:f7:61:5d:1e:5c:9f:d8:c7:37:a9:ee:ad:9a:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Mar 28 11:25:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=428449d966241da128f158523d1263827b6f0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:c7:bd:24:d8:93:b1:56:07:ca:10:d9:8c:
24:8f:b1:ad:c5:9a:0b:e1:da:01:9a:06:c8:00:21:
7f:22:60:0f:bf:30:4f:93:67:94:4d:87:82:59:65:
76:ce:de:b5:8b:26:ab:13:1e:aa:e2:f4:51:2b:31:
ad:9e:61:36:4b:f6:eb:c3:19:2b:53:48:c0:eb:d8:
9e:e6:0b:0e:c9:b4:cc:fc:91:09:71:d7:8a:db:eb:
1a:e5:70:5b:d0:6d:d4:f3:b0:75:ac:d7:f6:31:0e:
bf:1e:b4:98:53:48:27:0d:94:0e:16:fb:37:c8:b8:
7d:63:44:89:37:4e:32:4f:13:72:f7:a7:0b:7c:8f:
77:54:0d:0b:37:87:8b:d7:27:33:dc:f4:5b:f6:fd:
cb:b1:7a:b7:33:ed:40:47:eb:25:ee:8f:e6:6e:d1:
3a:04:ab:07:c8:7a:e4:7b:1a:2c:cb:07:d4:a9:d0:
31:dd:a2:d6:d2:78:b5:6c:f4:8c:98:89:1e:91:b8:
a8:4d:2f:11:a6:d2:9a:d2:09:4d:fd:60:de:05:cb:
d8:93:6a:89:b8:ea:a1:d3:84:6e:36:9e:54:a1:e2:
26:44:bb:b4:7c:ff:54:9b:82:07:5a:40:58:dc:46:
d3:7b:5a:c9:99:25:3b:54:30:4c:49:46:c2:53:4a:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:49:D9:66:24:1D:A1:28:F1:58:52:3D:12:63:82:7B:6F:0F:D6
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/QoRJ2WYkHaEo8VhSPRJjgntvD9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.212.0/23
IPv6:
2a0b:8780::/48
Signature Algorithm: sha256WithRSAEncryption
32:c3:57:50:06:80:ec:ee:81:30:9f:69:78:27:03:dd:2a:a9:
8e:ca:ed:e7:b1:eb:df:7d:c2:ae:eb:34:01:61:6b:4d:94:90:
a5:cb:e8:c7:db:ce:0a:a5:ee:64:8f:94:9b:66:c8:d9:3c:8b:
87:54:9e:8a:bc:7a:0c:b7:57:c1:87:06:4c:86:f2:fe:0f:73:
c8:42:7d:87:16:59:1c:e5:bf:f4:ad:3d:59:9f:08:0c:51:08:
e7:08:a6:3e:56:10:ae:e7:c4:fe:d7:b9:b7:c9:de:4a:88:a8:
2b:64:55:0f:b6:b3:b6:0d:40:1e:3a:c6:cb:17:c5:2d:c9:87:
11:47:56:c5:0f:ac:69:35:99:55:e4:b4:8e:4e:75:6b:a3:b9:
e5:9f:aa:f1:58:d9:0e:1a:22:00:24:bc:3a:b3:b8:a9:87:99:
f0:d2:5e:cd:3d:e5:27:bf:9e:96:62:a3:21:f6:07:0c:44:8e:
42:e0:c1:57:b8:5e:55:b0:ab:89:9b:12:02:2d:ff:f3:4f:2d:
91:43:2c:af:0f:cc:e4:31:3e:bf:6b:15:36:d9:b5:90:93:77:
28:f4:10:9a:7b:6f:fd:88:e8:40:01:b1:5e:92:7b:7e:58:10:
be:d6:09:d1:82:8a:81:15:c9:d2:91:d5:ed:05:44:cb:55:ff:
35:6e:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:20 2024 by rpki-client on console-fra.rpki-client.org