Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/qv6GxR8RH0a80bGKRHjTkMVuN1A.roa
File: qv6GxR8RH0a80bGKRHjTkMVuN1A.roa (raw, json)
Hash identifier: 7jtUUDFjRw38V7ZB95Vw85cOIyF5UE326kVz6MfbmGI=
Subject key identifier: AA:FE:86:C5:1F:11:1F:46:BC:D1:B1:8A:44:78:D3:90:C5:6E:37:50
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 01857271413C9B571322E721138C197D0405
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/qv6GxR8RH0a80bGKRHjTkMVuN1A.roa
Signing time: Mon 02 Jan 2023 12:25:03 +0000
ROA not before: Mon 02 Jan 2023 12:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211855
IP address blocks: 185.105.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:41:3c:9b:57:13:22:e7:21:13:8c:19:7d:04:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jan 2 12:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aafe86c51f111f46bcd1b18a4478d390c56e3750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:c0:c6:8f:2c:09:99:18:74:c1:97:a1:fd:
a0:7e:c2:16:26:62:a1:a4:03:06:ed:95:2b:c1:32:
7c:55:75:51:1a:49:6f:d8:7e:56:c7:36:01:5d:91:
50:55:98:b6:8e:91:62:4d:fa:fb:c7:66:09:a3:16:
4f:a9:32:a3:95:a3:2e:e6:75:19:7a:ca:69:fa:6c:
d6:f0:32:cd:63:ce:a2:bc:bf:3e:17:a9:63:6b:ff:
d1:de:ea:de:1b:63:55:6f:62:75:d5:50:c2:d0:ce:
5a:b0:37:b5:8b:07:43:96:e3:7a:9a:e2:84:33:8b:
ee:c4:01:5e:ce:7e:e3:9f:17:b5:c0:60:5b:34:f4:
23:c2:c5:05:0f:69:61:2e:3e:5e:9d:c3:5e:29:b9:
5d:80:8c:c5:08:64:72:ff:58:32:23:3b:91:47:c5:
0f:d1:cb:4f:e2:a0:8c:c0:36:d2:bb:5b:5b:8b:82:
b5:02:36:09:42:86:1f:0d:59:fa:34:23:b4:a9:e3:
db:a0:1f:d0:73:74:1f:2c:7d:64:2d:3d:f5:e6:b3:
8f:d5:8e:47:aa:1d:db:38:aa:76:76:8c:e0:1e:46:
d4:40:c6:88:7e:9e:3b:1f:98:5d:15:e7:69:b1:fc:
80:22:fa:51:24:91:a7:11:2f:ee:7d:2b:8d:79:66:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:86:C5:1F:11:1F:46:BC:D1:B1:8A:44:78:D3:90:C5:6E:37:50
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/qv6GxR8RH0a80bGKRHjTkMVuN1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1c:64:8f:a8:67:3f:0d:56:be:7a:e8:b5:64:ba:e2:08:c9:
6e:1c:ff:88:76:97:63:b9:da:f2:50:3b:20:67:88:d0:68:d6:
e9:a6:f3:58:53:51:c8:ee:3d:78:3a:fc:c2:8b:80:a8:c4:6f:
ef:21:4e:f8:eb:3f:97:4f:99:66:a9:17:10:5e:00:10:b9:15:
a2:41:74:62:65:6b:cb:e7:b3:fa:48:93:25:af:3c:55:89:be:
9e:67:2f:3e:d7:51:af:f8:59:b4:6e:94:58:12:d1:97:cd:1e:
ef:89:3c:85:5d:34:8a:f4:d5:7b:fb:c3:e6:bf:a7:90:b3:8b:
8c:30:88:0e:a6:7f:43:67:02:61:6e:df:b4:81:d5:1b:31:24:
9a:d9:23:7a:d8:3b:6c:38:c2:40:e0:87:25:56:b1:5e:d4:d5:
83:a5:f8:57:bd:66:12:63:ad:8f:12:85:d6:f7:27:95:ec:01:
49:fd:ce:bd:44:2d:73:44:10:45:97:41:71:dd:b3:18:20:5c:
bd:66:21:10:18:c7:6b:df:26:31:54:7a:32:d0:65:29:56:99:
10:d1:87:04:46:a5:81:63:87:20:5d:a0:37:96:74:ef:3b:8f:
f8:3a:88:89:b6:fb:6e:ef:c8:56:4d:e7:d5:42:4f:2e:e1:f4:
7d:ac:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org