Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/qPDWA3pdViG2dVOPSNc2H_XtPVA.roa
File: qPDWA3pdViG2dVOPSNc2H_XtPVA.roa (raw, json)
Hash identifier: OtpLdouKbC4gY3GTcDVV4wlT2UxSN7dh/i4pPaIpyOY=
Subject key identifier: A8:F0:D6:03:7A:5D:56:21:B6:75:53:8F:48:D7:36:1F:F5:ED:3D:50
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 018571D7C534F1A99CF86190DB7B314EDA30
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/qPDWA3pdViG2dVOPSNc2H_XtPVA.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34979
IP address blocks: 185.242.46.0/24 maxlen: 24
185.242.47.0/24 maxlen: 24
185.242.45.0/24 maxlen: 24
2a0c:bc80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c5:34:f1:a9:9c:f8:61:90:db:7b:31:4e:da:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f0d6037a5d5621b675538f48d7361ff5ed3d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:dc:d2:7d:d2:84:62:0d:c4:e4:ea:a0:d9:
3d:37:e8:4c:21:af:81:14:9e:e9:68:fe:f7:fe:5e:
a0:b0:5a:fa:b9:6d:19:d1:e3:d9:ff:e1:45:73:77:
3d:c4:29:8b:25:38:b8:90:c3:d0:7d:e8:c7:26:a8:
fc:3b:a1:5e:56:5d:8c:e8:fe:58:9e:dc:70:cb:f3:
bb:5b:44:40:b1:62:8f:4a:d2:8e:8a:ad:8e:e9:d8:
42:0b:e2:89:9e:2e:94:88:41:ab:b4:a9:88:d1:2c:
49:e5:b8:31:07:4e:01:f0:29:50:d0:ab:89:3a:3c:
7c:0a:89:9a:d3:d3:19:bf:66:52:98:3b:b9:5a:f2:
cd:ee:4f:6b:e4:88:ca:d0:5b:de:f6:d0:ae:7a:66:
f5:b0:af:71:3a:99:03:4d:a6:92:de:15:b6:ee:d2:
ef:20:c7:27:36:92:df:a6:85:b6:c6:95:00:f2:c2:
86:16:6e:9a:ad:bf:f9:6d:e2:28:2a:ed:1c:a9:54:
78:bb:c3:77:20:61:c3:4f:03:b1:7a:96:85:12:b1:
ed:01:04:fe:b5:c9:33:e5:60:a3:c0:71:61:5c:1e:
9d:f2:9d:ab:0e:f0:f4:21:71:a7:fb:a3:6c:03:68:
70:93:e8:4a:2e:4f:50:8b:b1:15:c7:8d:9e:ab:3a:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F0:D6:03:7A:5D:56:21:B6:75:53:8F:48:D7:36:1F:F5:ED:3D:50
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/qPDWA3pdViG2dVOPSNc2H_XtPVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.45.0-185.242.47.255
IPv6:
2a0c:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
69:92:2a:65:35:17:6a:f2:9f:15:6f:82:32:17:0c:ef:60:57:
34:3f:44:73:4b:d9:51:c1:f6:8f:2e:89:47:4d:cc:67:5b:d0:
35:92:a6:31:e7:c0:40:18:a7:23:f0:fb:77:31:d1:04:b0:a8:
24:73:9f:16:dc:14:41:90:31:dc:26:86:84:89:6d:ac:49:8a:
b0:d6:c6:4c:cb:97:ba:84:ad:c8:08:8d:16:64:11:36:9e:fd:
4d:f5:57:01:e2:15:7d:bd:6b:39:89:73:74:a6:12:48:b3:3a:
4f:1c:5c:d0:e2:85:25:6b:d7:6c:c8:85:9b:9c:bf:e3:43:a6:
e7:8e:6b:e0:9c:7e:57:03:72:13:ff:8a:7e:cb:f8:3e:2e:53:
ce:22:d2:71:76:99:64:ea:c8:6e:b1:9e:d6:cd:0d:cc:16:a1:
9c:14:30:2e:bf:87:3e:ad:10:cf:42:39:72:37:29:aa:cb:2c:
f6:cf:13:67:01:4a:df:d6:f4:cf:95:55:02:6a:8d:9a:7d:09:
37:e2:4a:77:3b:9f:a6:d2:1c:e4:c7:c1:ff:10:b5:8e:83:7e:
77:33:8e:df:b1:70:f6:32:13:d8:23:f0:80:1f:00:c2:9c:84:
d8:bc:50:4d:05:fb:ab:c4:ce:e8:18:ca:a2:45:c8:55:34:90:
41:ed:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org