Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/q67BSHSJSKSGcXImDSd2vTusqI4.roa
File: q67BSHSJSKSGcXImDSd2vTusqI4.roa (raw, json)
Hash identifier: glzh3iswTfoh3NpS4K1E5b00zLR1uwZDH8+XScgDzic=
Subject key identifier: AB:AE:C1:48:74:89:48:A4:86:71:72:26:0D:27:76:BD:3B:AC:A8:8E
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 0185703964C188EC9A623894E0A68349D32E
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/q67BSHSJSKSGcXImDSd2vTusqI4.roa
Signing time: Mon 02 Jan 2023 02:04:47 +0000
ROA not before: Mon 02 Jan 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.85.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:64:c1:88:ec:9a:62:38:94:e0:a6:83:49:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Jan 2 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abaec148748948a4867172260d2776bd3baca88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:00:3b:b7:da:b8:30:4f:92:fc:3f:19:b5:
f1:28:d4:de:ce:c3:00:f0:0a:1b:4a:14:68:cf:f1:
2c:e1:6f:b6:be:8c:08:2a:dc:24:62:89:3e:1f:d2:
3a:cd:92:4d:99:ca:4e:45:c0:6f:90:e8:94:04:2c:
c8:31:d8:2d:82:30:6d:3a:51:f9:53:f2:80:77:10:
38:fc:79:c3:5d:39:34:0e:9c:3e:9c:e1:85:c5:e2:
e4:c7:7e:86:f9:e4:15:c7:7d:17:59:06:f2:18:87:
1f:22:bc:09:a7:1d:bc:52:c3:61:24:f1:75:da:b8:
0f:11:cd:0e:31:7e:0d:a1:3a:f5:59:46:cb:22:14:
86:12:16:c7:c5:2a:36:0b:39:66:4a:15:72:eb:60:
45:6a:0f:c6:c1:a0:77:d1:8f:d5:f1:a6:ea:0c:59:
92:70:d7:6c:39:6f:de:2d:3f:99:c2:51:2d:e3:62:
41:ff:26:e2:0f:41:de:cb:60:49:bd:e6:c8:2b:19:
a9:83:30:55:e5:e3:71:2f:b1:4c:4e:ce:aa:e0:e7:
1d:dd:71:c6:ef:58:67:f6:b6:58:fe:57:71:e9:cf:
b5:ff:05:55:88:d2:64:3c:6e:02:4f:c8:d6:05:07:
67:68:67:a7:4e:ad:35:2e:3d:e4:31:f1:7d:2f:42:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:C1:48:74:89:48:A4:86:71:72:26:0D:27:76:BD:3B:AC:A8:8E
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/q67BSHSJSKSGcXImDSd2vTusqI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:14:a0:cf:f8:22:40:38:0e:f7:04:1c:db:32:3e:bb:ae:cd:
b3:33:68:35:36:7e:b1:df:12:3f:6e:78:2c:5e:4a:c7:b6:d0:
cf:8f:2d:06:0a:a0:d2:66:d1:a0:b1:ff:27:81:a4:3d:62:7f:
7f:1c:cc:52:99:cb:48:79:b8:d5:d1:c7:92:76:74:30:fb:fc:
17:c4:c5:69:7c:e0:73:ee:f7:3c:9d:b7:1e:c8:73:d8:39:27:
c5:ea:fb:2b:96:7e:43:f8:db:36:7b:04:46:aa:4e:47:dd:b2:
08:b7:c8:57:ef:1b:da:fc:b7:a8:99:3e:28:57:e5:93:65:ba:
42:81:d6:83:fa:42:f9:59:13:ef:d7:13:50:e3:3d:3b:90:15:
68:56:e3:50:f4:fb:0a:cd:8d:55:f1:a5:3b:61:59:2f:9f:34:
d2:42:8d:81:c1:bf:92:19:60:98:a4:ee:52:22:77:cb:ae:ba:
22:ae:c2:e3:df:ce:e6:00:49:04:8c:30:9c:c8:6a:36:80:63:
a7:35:3e:5a:a9:eb:c7:da:7c:ee:81:54:0a:76:a2:0d:a6:96:
3c:f8:31:cc:4f:69:ff:21:8f:7b:51:b7:f5:a7:a9:4e:a5:7f:
17:12:d6:13:a0:17:cb:9f:39:a5:d8:90:a1:5d:02:d6:41:91:
63:d4:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:17 2024 by rpki-client on console-ams.rpki-client.org