Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/QGV8ADZmIgb1g__336s0MvMWqZk.roa
File: QGV8ADZmIgb1g__336s0MvMWqZk.roa (raw, json)
Hash identifier: lvvAPBaDExtZWfM7b7xV5OIvakzAoWnM1Io0FF9a6Yo=
Subject key identifier: 40:65:7C:00:36:66:22:06:F5:83:FF:F7:DF:AB:34:32:F3:16:A9:99
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 01856F9DC75921CDC929B4E786A17124BE63
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/QGV8ADZmIgb1g__336s0MvMWqZk.roa
Signing time: Sun 01 Jan 2023 23:14:49 +0000
ROA not before: Sun 01 Jan 2023 23:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44999
IP address blocks: 93.188.120.0/21 maxlen: 24
176.62.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c7:59:21:cd:c9:29:b4:e7:86:a1:71:24:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Jan 1 23:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40657c0036662206f583fff7dfab3432f316a999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:be:87:e6:5e:5e:8c:d5:2e:31:22:2d:ef:
27:ca:a0:22:c8:9b:66:75:8c:b8:45:4f:34:7e:be:
5a:1e:6d:e9:ca:c3:97:2f:7a:27:30:19:7b:e5:20:
ff:3e:97:3b:2a:48:99:de:6e:5f:19:0e:05:6f:1a:
76:9b:95:0b:29:eb:a9:21:f9:2a:0a:8f:a2:8e:31:
da:00:50:dd:e6:8b:e3:b7:e0:0d:7d:12:7e:62:23:
1f:85:5c:57:12:ef:5f:01:e0:9f:37:22:ac:fd:72:
74:c0:65:b5:3e:1a:7e:8b:d8:51:20:7d:2e:a9:d2:
2c:f8:0a:6a:5f:15:ed:fb:75:4f:99:b7:3c:d0:3e:
05:57:20:22:0f:86:02:a3:75:c4:96:15:a7:23:f3:
f7:c0:01:6a:ce:83:4a:0b:c5:c0:a9:55:82:95:c0:
7e:27:e9:13:c1:d0:3a:9e:30:80:27:91:4e:06:64:
2f:30:b2:8b:2e:da:2d:7f:d1:18:30:bd:3e:0a:b8:
56:31:5a:8e:3f:d8:df:65:d8:95:08:86:99:11:12:
8c:9c:81:09:ba:3d:8b:f6:ad:5a:2f:d7:26:63:bf:
ae:03:69:bb:f4:69:64:89:7c:15:d3:f0:1c:97:53:
82:7c:49:0f:63:ee:9b:e0:68:58:f6:38:87:5c:c7:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:7C:00:36:66:22:06:F5:83:FF:F7:DF:AB:34:32:F3:16:A9:99
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/QGV8ADZmIgb1g__336s0MvMWqZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.120.0/21
176.62.216.0/21
Signature Algorithm: sha256WithRSAEncryption
59:eb:4b:2a:e9:9b:74:ef:d5:6f:eb:e8:01:6d:7a:72:e6:10:
6e:2e:31:f4:b3:69:a0:29:c3:9a:9f:a3:d0:00:9b:21:6d:b6:
2b:d2:99:c6:5e:2b:c5:63:ac:81:2f:d1:e1:90:cf:0c:b2:91:
ce:86:67:81:cc:ac:d4:03:32:e7:c3:48:75:fd:d8:ba:c3:32:
17:55:01:f5:dc:59:6c:8a:d8:1b:4a:58:45:aa:09:92:d8:85:
0c:a8:ec:87:7b:83:2a:49:36:bb:73:29:3a:79:3f:54:5e:a8:
28:3d:d1:9a:df:9f:8a:f9:3c:9a:fc:ac:11:4d:d5:33:12:f1:
aa:18:6a:0e:22:5d:b5:b3:35:95:2f:3f:63:45:7e:69:9e:1a:
5a:ac:e3:04:83:87:46:43:78:93:f0:9d:88:8b:ab:26:12:bd:
bf:c4:f6:7c:97:6d:4e:78:94:bf:cc:46:24:c4:6a:0e:77:04:
da:9c:23:75:be:9e:5a:22:ac:2a:61:ba:48:ac:40:d5:5e:d5:
39:57:35:71:ab:f0:26:53:22:f4:34:74:d9:e1:49:9f:46:e0:
a6:e0:de:53:7e:a8:cf:24:d8:c7:4a:32:1b:70:fa:ab:63:cf:
4a:12:63:a2:37:dd:2f:2c:ce:47:15:9a:01:6b:e0:85:4f:e3:
14:19:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:12 2024 by rpki-client on console-ams.rpki-client.org