Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/QkVklm68dS0F-udM5XN6NxirhH8.roa
File: QkVklm68dS0F-udM5XN6NxirhH8.roa (raw, json)
Hash identifier: 2fBXebE+PK1K5KOdOvhoPISRFYPbEBozkUGE/2udIYw=
Subject key identifier: 42:45:64:96:6E:BC:75:2D:05:FA:E7:4C:E5:73:7A:37:18:AB:84:7F
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CB0A301A5D57EB914C20B6F38253A
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/QkVklm68dS0F-udM5XN6NxirhH8.roa
Signing time: Mon 02 Jan 2023 16:24:43 +0000
ROA not before: Mon 02 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25938
IP address blocks: 213.86.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:b0:a3:01:a5:d5:7e:b9:14:c2:0b:6f:38:25:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=424564966ebc752d05fae74ce5737a3718ab847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:17:af:2a:73:ba:d4:bc:cd:42:92:ca:16:
ed:dd:10:0b:a4:15:bb:49:57:4d:f3:9b:91:c2:14:
9a:92:bd:22:93:57:02:8c:71:57:0e:4b:9c:0b:54:
19:56:31:67:c6:92:fa:fe:0c:86:00:4f:46:16:b5:
08:8d:dc:b8:cf:c1:93:25:b0:39:31:0f:e8:bd:a7:
26:eb:db:86:cb:b8:5b:a9:ff:39:52:44:60:8e:49:
48:81:09:f3:83:24:27:15:bc:0a:40:7e:42:f6:49:
e4:b5:bf:f6:ef:87:8b:9f:b9:b7:0a:f7:ed:06:d9:
81:f1:5a:9d:34:df:15:55:a8:05:21:e8:2a:46:61:
4a:03:4d:d9:f7:d9:40:08:41:94:4a:9d:b3:fa:dc:
73:aa:20:11:5f:aa:c1:7d:b7:0f:12:a8:97:70:ae:
f2:6c:44:b7:70:9d:9d:85:72:eb:f2:f1:fb:bf:1d:
1c:81:ae:95:31:3e:2e:0d:95:61:ca:e6:63:fb:8a:
0d:8a:1e:6d:2d:1e:5f:e1:2a:f8:97:f2:2f:d2:54:
8a:1a:b7:d6:55:1d:c1:69:1d:66:e4:01:f0:a6:29:
e4:a7:9c:76:f9:1b:8a:fd:35:50:42:31:ac:a2:c0:
6f:0d:b8:66:70:85:1d:54:c1:77:07:85:4b:94:44:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:64:96:6E:BC:75:2D:05:FA:E7:4C:E5:73:7A:37:18:AB:84:7F
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/QkVklm68dS0F-udM5XN6NxirhH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.86.85.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d9:44:c2:09:2e:56:7a:d6:20:7a:54:9a:3d:04:70:42:62:
b8:e0:8e:bf:aa:b1:fd:03:cb:36:0a:9d:f5:ed:03:ce:a4:65:
40:f8:52:5e:76:48:f4:6f:d3:b5:62:fe:c6:d6:96:26:93:50:
b4:96:5e:c5:f5:38:9e:fc:d9:9b:e2:59:92:41:5a:38:29:e7:
15:24:ad:c3:24:ff:e2:73:54:6b:be:6e:71:22:76:39:a4:50:
27:40:d5:3c:cc:51:23:73:95:1b:4c:b5:ac:6b:03:b9:dd:f6:
3a:55:a8:a7:88:9f:13:ce:94:3e:1d:88:42:93:21:ea:54:99:
24:ee:18:71:de:5c:b7:b4:00:4b:fa:5b:b2:32:31:68:6a:4c:
bd:24:90:0e:fb:19:99:fe:88:23:8c:cd:61:c5:85:0e:af:a1:
31:c1:e7:e5:08:0e:1c:30:99:43:42:7b:57:90:c3:78:b0:77:
7d:44:99:43:f0:8e:45:60:41:9a:d3:08:a1:c5:b3:b5:1e:12:
ff:8a:f2:fc:b6:14:bf:b2:c2:f3:54:a6:2d:b9:0c:5c:c7:9f:
ed:d0:93:ae:36:49:63:f2:be:17:dd:a4:89:d8:9c:7d:56:52:
49:72:b8:03:26:1d:37:87:fa:cf:72:cf:c2:d6:fb:68:37:de:
47:aa:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:28 2024 by rpki-client on console-ams.rpki-client.org