Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/qHxwZudhOIkSqlWbLcn_TzOWpkA.roa
File: qHxwZudhOIkSqlWbLcn_TzOWpkA.roa (raw, json)
Hash identifier: N4OuJ6UMJHVOL8gS1Cd7dmO7yfpHnpnE5RwNp/uE6UM=
Subject key identifier: A8:7C:70:66:E7:61:38:89:12:AA:55:9B:2D:C9:FF:4F:33:96:A6:40
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01856ECBB28DFAA4E98629CBE9BD375C3D30
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/qHxwZudhOIkSqlWbLcn_TzOWpkA.roa
Signing time: Sun 01 Jan 2023 19:25:21 +0000
ROA not before: Sun 01 Jan 2023 19:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61094
IP address blocks: 185.92.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:b2:8d:fa:a4:e9:86:29:cb:e9:bd:37:5c:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jan 1 19:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a87c7066e761388912aa559b2dc9ff4f3396a640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:72:cd:dd:44:07:7f:d0:eb:c8:5f:8b:77:
d5:11:ec:35:08:5b:77:32:9d:07:93:01:29:2e:87:
c6:7e:14:9a:e8:f6:75:9c:1b:09:4f:07:7a:af:34:
be:f8:c2:4f:84:bd:ef:ea:8b:d0:e3:92:81:34:75:
aa:fb:91:71:c6:1a:3c:55:4a:25:8e:76:5a:2d:7f:
77:4a:f8:c4:41:be:11:40:19:df:30:e6:04:26:5c:
16:c7:2b:28:82:dc:5e:24:e0:8c:10:95:61:dc:97:
9f:64:e9:91:2a:f4:9a:53:0a:94:68:a5:69:bd:5d:
80:26:5e:3c:fd:3b:e3:f6:8c:27:d1:14:40:f1:ed:
13:4d:ec:ce:17:c7:b7:a8:3b:e1:7e:37:fa:b9:88:
4e:b5:fe:5e:da:a7:b4:3c:f6:ec:b0:cf:6c:e8:b0:
0d:de:67:25:e0:c6:a5:af:f9:a2:53:92:9b:10:e4:
14:0d:7a:83:09:cc:89:a7:87:32:b1:d3:be:09:ae:
c9:8b:8f:1f:6c:fc:27:fb:5a:c7:02:be:2f:bb:9b:
1c:61:74:86:e4:cc:ca:7a:5d:1a:3f:d8:1a:a4:e4:
91:66:11:33:4a:ed:e6:e4:a4:cb:09:61:76:4b:fa:
0f:92:5b:1c:6c:46:2a:f7:9f:5f:ee:c0:e7:72:c1:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:70:66:E7:61:38:89:12:AA:55:9B:2D:C9:FF:4F:33:96:A6:40
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/qHxwZudhOIkSqlWbLcn_TzOWpkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.124.0/24
Signature Algorithm: sha256WithRSAEncryption
96:32:ed:b3:81:d6:d2:f5:35:81:e9:95:11:70:1b:99:9f:5c:
c4:e8:70:8b:cd:2f:13:ad:2e:84:69:72:73:38:d1:3e:eb:9f:
7a:d4:db:42:d3:e0:5a:5b:52:89:ab:0b:57:ff:e3:a3:e5:ca:
51:97:2e:51:ba:af:92:06:e8:48:2e:99:6d:36:ea:2e:89:f7:
c7:c3:1e:40:3c:c2:79:87:4c:ac:98:f6:dc:c2:a5:37:01:8c:
26:51:e7:5b:8a:f9:a5:87:d5:f1:b4:1d:b4:02:f2:7e:cc:d5:
0f:3c:15:5b:7d:c8:ea:86:07:b1:fa:b1:06:c0:bc:b5:c8:b4:
36:9b:c7:8a:82:7d:0f:9f:a1:10:4f:a3:0e:e4:28:14:4b:66:
54:e9:29:a2:94:d8:f7:e6:92:50:f8:63:8e:c4:eb:e3:0e:8e:
e9:ff:5b:91:95:29:57:6e:37:08:cc:78:da:c1:2e:0b:89:07:
fb:a5:8a:18:0a:b6:56:ec:19:07:01:64:21:42:e4:9a:2f:c5:
92:a1:57:7b:a3:3f:7b:d2:d9:a2:e1:17:90:57:7f:92:03:9c:
af:fe:95:34:b9:2e:d2:0c:1f:20:30:db:48:68:77:fb:27:c8:
c8:0e:4b:0a:2f:55:68:ca:43:cf:f7:00:dd:de:63:12:57:05:
3f:0e:a1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:29 2024 by rpki-client on console-ams.rpki-client.org